You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@uima.apache.org by re...@apache.org on 2020/04/10 15:55:49 UTC
[uima-uimafit] branch NO-JIRA-https-for-maven-repos created (now
b1b26e6)
This is an automated email from the ASF dual-hosted git repository.
rec pushed a change to branch NO-JIRA-https-for-maven-repos
in repository https://gitbox.apache.org/repos/asf/uima-uimafit.git.
at b1b26e6 Use HTTPS instead of HTTP to resolve dependencies
This branch includes the following new commits:
new b1b26e6 Use HTTPS instead of HTTP to resolve dependencies
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
[uima-uimafit] 01/01: Use HTTPS instead of HTTP to resolve
dependencies
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
rec pushed a commit to branch NO-JIRA-https-for-maven-repos
in repository https://gitbox.apache.org/repos/asf/uima-uimafit.git
commit b1b26e64aba6e2fd5958506c42a9e56e5561fbe5
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 19:05:32 2020 -0500
Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
(cherry picked from commit 83fc7315f06bc1b4d3786ea962a9d08934e09695)
---
uimafit-parent/pom.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/uimafit-parent/pom.xml b/uimafit-parent/pom.xml
index 78ed4fd..3168545 100644
--- a/uimafit-parent/pom.xml
+++ b/uimafit-parent/pom.xml
@@ -34,7 +34,7 @@
<repository>
<id>apache.snapshots</id>
<name>Apache Snapshot Repository</name>
- <url>http://repository.apache.org/snapshots</url>
+ <url>https://repository.apache.org/snapshots</url>
<releases>
<enabled>false</enabled>
</releases>
@@ -44,7 +44,7 @@
<pluginRepository>
<id>apache.snapshots.plugins</id>
<name>Apache Snapshot Repository - Maven plugins</name>
- <url>http://repository.apache.org/snapshots</url>
+ <url>https://repository.apache.org/snapshots</url>
<layout>default</layout>
<releases>
<enabled>false</enabled>