You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openwebbeans.apache.org by rm...@apache.org on 2020/02/11 05:46:20 UTC

[openwebbeans-meecrowave-examples] branch master updated: Use HTTPS instead of HTTP to resolve dependencies

This is an automated email from the ASF dual-hosted git repository.

rmannibucau pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/openwebbeans-meecrowave-examples.git


The following commit(s) were added to refs/heads/master by this push:
     new c60d5a3  Use HTTPS instead of HTTP to resolve dependencies
     new a76187b  Merge pull request #8 from JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies
c60d5a3 is described below

commit c60d5a3220eb98e47336892807ee5dc87df8d30a
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 19:05:34 2020 -0500

    Use HTTPS instead of HTTP to resolve dependencies
    
    This fixes a security vulnerability in this project where the `pom.xml`
    files were configuring Maven to resolve dependencies over HTTP instead of
    HTTPS.
    
    Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
 servlet-vaadin-v10/pom.xml | 4 ++--
 servlet-vaadin-vxx/pom.xml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/servlet-vaadin-v10/pom.xml b/servlet-vaadin-v10/pom.xml
index bc78a9a..38964d8 100644
--- a/servlet-vaadin-v10/pom.xml
+++ b/servlet-vaadin-v10/pom.xml
@@ -47,13 +47,13 @@
     <!--Releases-->
     <repository>
       <id>vaadin-addons</id>
-      <url>http://maven.vaadin.com/vaadin-addons</url>
+      <url>https://maven.vaadin.com/vaadin-addons</url>
     </repository>
 
     <!--Pre-Releases-->
     <repository>
       <id>vaadin-prereleases</id>
-      <url>http://maven.vaadin.com/vaadin-prereleases</url>
+      <url>https://maven.vaadin.com/vaadin-prereleases</url>
     </repository>
   </repositories>
 
diff --git a/servlet-vaadin-vxx/pom.xml b/servlet-vaadin-vxx/pom.xml
index 6135454..710675b 100644
--- a/servlet-vaadin-vxx/pom.xml
+++ b/servlet-vaadin-vxx/pom.xml
@@ -28,13 +28,13 @@
     <!--Releases-->
     <repository>
       <id>vaadin-addons</id>
-      <url>http://maven.vaadin.com/vaadin-addons</url>
+      <url>https://maven.vaadin.com/vaadin-addons</url>
     </repository>
 
     <!--Pre-Releases-->
     <repository>
       <id>vaadin-prereleases</id>
-      <url>http://maven.vaadin.com/vaadin-prereleases</url>
+      <url>https://maven.vaadin.com/vaadin-prereleases</url>
     </repository>
   </repositories>