[rya] branch master updated: Use HTTPS instead of HTTP to resolve dependencies, closes #312 from JLLeitschuh:fix/JLL/use_https_to_resolve_dependencies

[dl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

dlotts pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/rya.git


The following commit(s) were added to refs/heads/master by this push:
     new 36278e7  Use HTTPS instead of HTTP to resolve dependencies, closes #312 from JLLeitschuh:fix/JLL/use_https_to_resolve_dependencies
36278e7 is described below

commit 36278e7d3d0d7a082b67c7a2b281767060920e87
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 19:29:55 2020 -0500

    Use HTTPS instead of HTTP to resolve dependencies, closes #312 from JLLeitschuh:fix/JLL/use_https_to_resolve_dependencies
    
    This fixes a security vulnerability in this project where the `pom.xml`
    files were configuring Maven to resolve dependencies over HTTP instead of
    HTTPS.
    
    Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
 osgi/rdf4j-runtime-osgi/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/osgi/rdf4j-runtime-osgi/pom.xml b/osgi/rdf4j-runtime-osgi/pom.xml
index df2a35d..1da19f7 100644
--- a/osgi/rdf4j-runtime-osgi/pom.xml
+++ b/osgi/rdf4j-runtime-osgi/pom.xml
@@ -133,7 +133,7 @@ under the License.
             </snapshots>
             <id>bndrepo</id>
             <name>aQute BND Repo</name>
-            <url>http://www.aqute.biz/repo</url>
+            <url>https://www.aqute.biz/repo</url>
         </repository>
     </repositories>
 </project>