You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by kw...@apache.org on 2026/04/28 10:29:30 UTC
(jackrabbit-filevault) 01/01: Remove transitive unused Maven dependencies
This is an automated email from the ASF dual-hosted git repository.
kwin pushed a commit to branch bugfix/remove-transitive-unused-maven-deps
in repository https://gitbox.apache.org/repos/asf/jackrabbit-filevault.git
commit 81ceb993d77ec1ea62ac4477c79169e7bbae5181
Author: Konrad Windszus <kw...@apache.org>
AuthorDate: Tue Apr 28 12:29:20 2026 +0200
Remove transitive unused Maven dependencies
Those suffer from vulnerabilities which otherwise lead to false
positives with dependency-checker.
---
vault-validation/pom.xml | 13 ++++++-------
1 file changed, 6 insertions(+), 7 deletions(-)
diff --git a/vault-validation/pom.xml b/vault-validation/pom.xml
index e542829d..6ca6b984 100644
--- a/vault-validation/pom.xml
+++ b/vault-validation/pom.xml
@@ -69,13 +69,6 @@
<scope>provided</scope>
</dependency>
- <dependency>
- <groupId>org.apache.commons</groupId>
- <artifactId>commons-lang3</artifactId>
- <version>3.12.0</version>
- <scope>provided</scope>
- </dependency>
-
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
@@ -95,6 +88,12 @@
<artifactId>maven-artifact</artifactId>
<version>3.8.4</version>
<scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>*</groupId>
+ <artifactId>*</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<dependency>