You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by ad...@apache.org on 2026/06/05 12:17:43 UTC
(hadoop) branch trunk updated: HADOOP-19786. Bump org.owasp:dependency-check-maven plugin to 12.2.2 (#8186)
This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/trunk by this push:
new 20aa6881056 HADOOP-19786. Bump org.owasp:dependency-check-maven plugin to 12.2.2 (#8186)
20aa6881056 is described below
commit 20aa6881056fa0b3db3350fc390c6f5c54584d9e
Author: Edward Capriolo <ed...@gmail.com>
AuthorDate: Fri Jun 5 08:17:36 2026 -0400
HADOOP-19786. Bump org.owasp:dependency-check-maven plugin to 12.2.2 (#8186)
---
pom.xml | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 98f8ae0cc91..b9695aae409 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,7 +118,7 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
<lifecycle-mapping.version>1.0.0</lifecycle-mapping.version>
<maven-checkstyle-plugin.version>3.6.0</maven-checkstyle-plugin.version>
<checkstyle.version>11.1.0</checkstyle.version>
- <dependency-check-maven.version>7.1.1</dependency-check-maven.version>
+ <dependency-check-maven.version>12.2.2</dependency-check-maven.version>
<spotbugs.version>4.9.7</spotbugs.version>
<spotbugs-maven-plugin.version>4.9.7.0</spotbugs-maven-plugin.version>
<jsonschema2pojo-maven-plugin.version>1.1.1</jsonschema2pojo-maven-plugin.version>
@@ -526,6 +526,12 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<version>${dependency-check-maven.version}</version>
+ <configuration>
+ <!-- often misidentied native binaries as .net native binaries then looks for .Net tooling to scan them -->
+ <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
+ <!-- requires separate sonatype account and sometimes fails if not present -->
+ <ossindexAnalyzerEnabled>false</ossindexAnalyzerEnabled>
+ </configuration>
</plugin>
<plugin>
<groupId>com.github.spotbugs</groupId>
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org