You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by rf...@apache.org on 2020/04/18 09:07:03 UTC
[maven-assembly-plugin] 01/01: Use HTTPS instead of HTTP to resolve
dependencies
This is an automated email from the ASF dual-hosted git repository.
rfscholte pushed a commit to branch gh17
in repository https://gitbox.apache.org/repos/asf/maven-assembly-plugin.git
commit 757405ae116ab0f62aa332ad37d8b055ab2d865b
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 18:20:53 2020 -0500
Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
src/it/projects/dependency-sets/massembly-99/pom.xml | 2 +-
src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/it/projects/dependency-sets/massembly-99/pom.xml b/src/it/projects/dependency-sets/massembly-99/pom.xml
index 9fa1b4b..7715209 100644
--- a/src/it/projects/dependency-sets/massembly-99/pom.xml
+++ b/src/it/projects/dependency-sets/massembly-99/pom.xml
@@ -49,7 +49,7 @@ under the License.
<pluginRepositories>
<pluginRepository>
<id>apache.snapshots</id>
- <url>http://repository.apache.org/snapshots</url>
+ <url>https://repository.apache.org/snapshots</url>
</pluginRepository>
</pluginRepositories>
</project>
diff --git a/src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml b/src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml
index cec5010..d423de4 100644
--- a/src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml
+++ b/src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml
@@ -45,7 +45,7 @@ under the License.
<pluginRepositories>
<pluginRepository>
<id>apache.snapshots</id>
- <url>http://repository.apache.org/snapshots</url>
+ <url>https://repository.apache.org/snapshots</url>
</pluginRepository>
</pluginRepositories>
</project>