Bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0

[dependabot]

Bumps org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review

This PR is a routine dependabot dependency bump: org.sonatype.central:central-publishing-maven-plugin from 0.10.0 → 0.11.0 in pom.xml:316. Single line changed, no source code touched.

Code Quality

• ✅ Style conventions: XML formatting/indentation consistent with surrounding block (pom.xml:313-318).
• ✅ No commented-out code
• ✅ Meaningful variable names: N/A (dependency version bump only)
• ✅ DRY principle: N/A
• ✅ Defects: No logic changes present. This is a minor version bump (0.10.0 → 0.11.0) of a build-only plugin (central-publishing-maven-plugin, used for Maven Central publishing during release profile). Since WebFetch/WebSearch are unavailable, I cannot verify the 0.11.0 release notes for breaking changes, but the change is confined to the <plugins> section and does not affect compiled artifacts or runtime behavior — risk is low. Worth a manual mvn clean install -Prelease -DskipTests (or equivalent dry-run publish) sanity check before the next actual release, since this plugin only executes in that profile and won't be exercised by normal CI test runs.
• ✅ .claude/CLAUDE.md review: Not modified by this PR; no local-environment-specific content introduced.

Testing

• ✅ N/A — no new functions/endpoints; this plugin isn't exercised in default mvn test, so no automated test coverage change is expected. Consistent with the pattern of prior dependency-bump PRs in this repo (e.g. 044aaf2, c86aaa6) which also didn't add tests.

Documentation

• ✅ README: N/A, not needed.
• ✅ API docs: N/A, not needed.
• ✅ Inline comments: N/A, not complex logic.
• ✅ CHANGELOG.md: Not updated in this PR — but this matches established project convention. Checking history, individual dependabot bumps (044aaf2, c86aaa6, 6a01065, a8a3422) are also not accompanied by per-PR CHANGELOG entries; CHANGELOG.md is instead updated in batch at release time (e.g. the [1.0.1] entry lists multiple accumulated dependency bumps at once). No action needed here.
• ✅ Markdown/CommonMark: No .md files touched in this diff.

Security

• ✅ No hardcoded credentials
• ✅ Input validation: N/A
• ✅ Error handling: N/A
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed license strings present in this diff.

Summary

Low-risk, mechanical dependency bump consistent with the repo's existing dependabot update pattern. No blocking issues found. Recommend merging once CI passes (particularly if a release profile build/dry-run is part of CI, to confirm the plugin bump doesn't break Central publishing).

Automated code review analyzing defects and coding standards