[uima-uimafit] 01/01: Use HTTPS instead of HTTP to resolve dependencies

[re...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rec pushed a commit to branch NO-JIRA-https-for-maven-repos
in repository https://gitbox.apache.org/repos/asf/uima-uimafit.git

commit b1b26e64aba6e2fd5958506c42a9e56e5561fbe5
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 19:05:32 2020 -0500

    Use HTTPS instead of HTTP to resolve dependencies
    
    This fixes a security vulnerability in this project where the `pom.xml`
    files were configuring Maven to resolve dependencies over HTTP instead of
    HTTPS.
    
    Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
    (cherry picked from commit 83fc7315f06bc1b4d3786ea962a9d08934e09695)
---
 uimafit-parent/pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/uimafit-parent/pom.xml b/uimafit-parent/pom.xml
index 78ed4fd..3168545 100644
--- a/uimafit-parent/pom.xml
+++ b/uimafit-parent/pom.xml
@@ -34,7 +34,7 @@
     <repository>
       <id>apache.snapshots</id>
       <name>Apache Snapshot Repository</name>
-      <url>http://repository.apache.org/snapshots</url>
+      <url>https://repository.apache.org/snapshots</url>
       <releases>
         <enabled>false</enabled>
       </releases>
@@ -44,7 +44,7 @@
     <pluginRepository>
       <id>apache.snapshots.plugins</id>
       <name>Apache Snapshot Repository - Maven plugins</name>
-      <url>http://repository.apache.org/snapshots</url>
+      <url>https://repository.apache.org/snapshots</url>
       <layout>default</layout>
       <releases>
         <enabled>false</enabled>