You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by kw...@apache.org on 2023/02/14 14:19:31 UTC

[jackrabbit-filevault] branch master updated: Update to Woodstox 6.5 (#275)

This is an automated email from the ASF dual-hosted git repository.

kwin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/jackrabbit-filevault.git


The following commit(s) were added to refs/heads/master by this push:
     new cd0c757f Update to Woodstox 6.5 (#275)
cd0c757f is described below

commit cd0c757f76a46a67d8ce616245c81d325c5c0e69
Author: Konrad Windszus <kw...@apache.org>
AuthorDate: Tue Feb 14 15:19:25 2023 +0100

    Update to Woodstox 6.5 (#275)
    
    Upgrade dependency-check-maven to 8.1.0
---
 parent/pom.xml     | 4 ++--
 vault-core/pom.xml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 60b25c99..d6ad2fbf 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -281,14 +281,14 @@ Bundle-Category: jackrabbit
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>7.4.1</version>
+                    <version>8.1.0</version>
                     <executions>
                         <execution>
                             <goals>
                                 <goal>check</goal>
                             </goals>
                             <configuration>
-                                <failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability>
+                                <failBuildOnCVSS>11</failBuildOnCVSS>
                             </configuration>
                         </execution>
                     </executions>
diff --git a/vault-core/pom.xml b/vault-core/pom.xml
index e496fb0f..bd0de6e1 100644
--- a/vault-core/pom.xml
+++ b/vault-core/pom.xml
@@ -194,7 +194,7 @@
         <dependency>
             <groupId>com.fasterxml.woodstox</groupId>
             <artifactId>woodstox-core</artifactId>
-            <version>6.4.0</version>
+            <version>6.5.0</version>
             <!-- embedded, therefore not transitively relevant -->
             <scope>provided</scope>
         </dependency>