You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by kw...@apache.org on 2025/03/14 13:42:49 UTC

(jackrabbit-filevault) branch bugfix/dependency-check-maven-12.1 created (now 278d53ab)

This is an automated email from the ASF dual-hosted git repository.

kwin pushed a change to branch bugfix/dependency-check-maven-12.1
in repository https://gitbox.apache.org/repos/asf/jackrabbit-filevault.git


      at 278d53ab Update to dependency-check 12.1

This branch includes the following new commits:

     new 278d53ab Update to dependency-check 12.1

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.



(jackrabbit-filevault) 01/01: Update to dependency-check 12.1

Posted by kw...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

kwin pushed a commit to branch bugfix/dependency-check-maven-12.1
in repository https://gitbox.apache.org/repos/asf/jackrabbit-filevault.git

commit 278d53ab7485f9ab8e249da1f3881587d0fd988e
Author: Konrad Windszus <kw...@apache.org>
AuthorDate: Fri Mar 14 14:42:40 2025 +0100

    Update to dependency-check 12.1
    
    Leverage NVD datafeed mirror
---
 parent/pom.xml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index efa30f7a..9fc3c99a 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -269,7 +269,7 @@ Bundle-Category: jackrabbit
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>10.0.3</version>
+                    <version>12.1.0</version>
                     <executions>
                         <execution>
                             <goals>
@@ -277,6 +277,9 @@ Bundle-Category: jackrabbit
                             </goals>
                             <configuration>
                                 <failBuildOnCVSS>11</failBuildOnCVSS>
+                                <!-- use the mirror provided by https://github.com/dependency-check/DependencyCheck_Builder which is updated daily -->
+                                <!-- compare with https://jeremylong.github.io/DependencyCheck/data/mirrornvd.html -->
+                                <nvdDatafeedUrl>https://dependency-check.github.io/DependencyCheck_Builder/nvd_cache/</nvdDatafeedUrl>
                             </configuration>
                         </execution>
                     </executions>