You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by sl...@apache.org on 2023/04/18 06:57:06 UTC
[maven-dependency-plugin] branch master updated: Replace vulnerable dependency in integration test
This is an automated email from the ASF dual-hosted git repository.
slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-dependency-plugin.git
The following commit(s) were added to refs/heads/master by this push:
new d6f917e1 Replace vulnerable dependency in integration test
d6f917e1 is described below
commit d6f917e18f40c123efa4fe3c5ffbe338d12da0c3
Author: Sylwester Lachiewicz <sl...@apache.org>
AuthorDate: Sat Apr 1 12:34:35 2023 +0200
Replace vulnerable dependency in integration test
Co-authored-by: dependabot[bot] <su...@github.com>
---
.../pom.xml | 17 ++++++++++++++---
.../verify.bsh | 8 +++++---
2 files changed, 19 insertions(+), 6 deletions(-)
diff --git a/src/it/projects/mdep-779-analyze-only-verbose-shows-class-names/pom.xml b/src/it/projects/mdep-779-analyze-only-verbose-shows-class-names/pom.xml
index 2a8e6520..749dd706 100644
--- a/src/it/projects/mdep-779-analyze-only-verbose-shows-class-names/pom.xml
+++ b/src/it/projects/mdep-779-analyze-only-verbose-shows-class-names/pom.xml
@@ -33,9 +33,20 @@
<dependencies>
<dependency>
- <groupId>dom4j</groupId>
- <artifactId>dom4j</artifactId>
- <version>1.6.1</version>
+ <groupId>net.java.dev.msv</groupId>
+ <artifactId>xsdlib</artifactId>
+ <version>2022.7</version>
</dependency>
</dependencies>
+ <build>
+ <plugins>
+ <plugin>
+ <artifactId>maven-compiler-plugin</artifactId>
+ <configuration>
+ <source>8</source>
+ <target>8</target>
+ </configuration>
+ </plugin>
+ </plugins>
+ </build>
</project>
diff --git a/src/it/projects/mdep-779-analyze-only-verbose-shows-class-names/verify.bsh b/src/it/projects/mdep-779-analyze-only-verbose-shows-class-names/verify.bsh
index 35957daa..b3300d87 100644
--- a/src/it/projects/mdep-779-analyze-only-verbose-shows-class-names/verify.bsh
+++ b/src/it/projects/mdep-779-analyze-only-verbose-shows-class-names/verify.bsh
@@ -23,9 +23,11 @@ String log = FileUtils.fileRead( new File( basedir, "build.log" ) );
log = StringUtils.unifyLineSeparators(log, "\n");
-String expected = "[WARNING] Used undeclared dependencies found:\n"
- + "[WARNING] xml-apis:xml-apis:jar:1.0.b2:compile\n"
- + "[WARNING] class org.apache.xmlcommons.Version\n";
+String expected = "[WARNING] Used undeclared dependencies found:\n" +
+ "[WARNING] xml-apis:xml-apis:jar:1.4.01:compile\n" +
+ "[WARNING] class org.apache.xmlcommons.Version\n" +
+ "[WARNING] Unused declared dependencies found:\n" +
+ "[WARNING] net.java.dev.msv:xsdlib:jar:2022.7:compile";
if ( !log.contains(expected) )
{