You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@streams.apache.org by sb...@apache.org on 2020/02/25 17:25:20 UTC
[streams] branch master updated: Use HTTPS instead of HTTP to
resolve dependencies (#494)
This is an automated email from the ASF dual-hosted git repository.
sblackmon pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/streams.git
The following commit(s) were added to refs/heads/master by this push:
new 37f9251 Use HTTPS instead of HTTP to resolve dependencies (#494)
37f9251 is described below
commit 37f9251aa1db0267dc4f731ff51d5f2711ec1f29
Author: Jonathan Leitschuh <jo...@gmail.com>
AuthorDate: Tue Feb 25 12:25:13 2020 -0500
Use HTTPS instead of HTTP to resolve dependencies (#494)
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
pom.xml | 4 ++--
streams-contrib/streams-provider-google/google-gplus/pom.xml | 2 +-
streams-contrib/streams-provider-youtube/pom.xml | 2 +-
3 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/pom.xml b/pom.xml
index 222f400..6b7d7d8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -205,7 +205,7 @@
<id>central-repo</id>
<name>Maven Repository</name>
<!-- HTTPS is unavailable for Maven Central -->
- <url>http://repo.maven.apache.org/maven2</url>
+ <url>https://repo.maven.apache.org/maven2</url>
<releases>
<enabled>true</enabled>
</releases>
@@ -238,7 +238,7 @@
<repository>
<id>clojars-repo</id>
<name>Clojars Repository</name>
- <url>http://clojars.org/repo</url>
+ <url>https://clojars.org/repo</url>
<releases>
<enabled>true</enabled>
</releases>
diff --git a/streams-contrib/streams-provider-google/google-gplus/pom.xml b/streams-contrib/streams-provider-google/google-gplus/pom.xml
index 2e80e7f..b525b19 100644
--- a/streams-contrib/streams-provider-google/google-gplus/pom.xml
+++ b/streams-contrib/streams-provider-google/google-gplus/pom.xml
@@ -40,7 +40,7 @@
<repository>
<id>typesafe</id>
<name>typesafe</name>
- <url>http://repo.typesafe.com/typesafe/repo</url>
+ <url>https://repo.typesafe.com/typesafe/repo</url>
</repository>
</repositories>
diff --git a/streams-contrib/streams-provider-youtube/pom.xml b/streams-contrib/streams-provider-youtube/pom.xml
index b7b6405..5cf66f4 100644
--- a/streams-contrib/streams-provider-youtube/pom.xml
+++ b/streams-contrib/streams-provider-youtube/pom.xml
@@ -38,7 +38,7 @@
<repositories>
<repository>
<id>google-api-services</id>
- <url>http://google-api-client-libraries.appspot.com/mavenrepo</url>
+ <url>https://google-api-client-libraries.appspot.com/mavenrepo</url>
</repository>
</repositories>