You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by rf...@apache.org on 2020/04/18 09:07:02 UTC
[maven-assembly-plugin] branch gh17 created (now 757405a)
This is an automated email from the ASF dual-hosted git repository.
rfscholte pushed a change to branch gh17
in repository https://gitbox.apache.org/repos/asf/maven-assembly-plugin.git.
at 757405a Use HTTPS instead of HTTP to resolve dependencies
This branch includes the following new commits:
new 757405a Use HTTPS instead of HTTP to resolve dependencies
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
[maven-assembly-plugin] 01/01: Use HTTPS instead of HTTP to resolve
dependencies
Posted by rf...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
rfscholte pushed a commit to branch gh17
in repository https://gitbox.apache.org/repos/asf/maven-assembly-plugin.git
commit 757405ae116ab0f62aa332ad37d8b055ab2d865b
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 18:20:53 2020 -0500
Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
src/it/projects/dependency-sets/massembly-99/pom.xml | 2 +-
src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/it/projects/dependency-sets/massembly-99/pom.xml b/src/it/projects/dependency-sets/massembly-99/pom.xml
index 9fa1b4b..7715209 100644
--- a/src/it/projects/dependency-sets/massembly-99/pom.xml
+++ b/src/it/projects/dependency-sets/massembly-99/pom.xml
@@ -49,7 +49,7 @@ under the License.
<pluginRepositories>
<pluginRepository>
<id>apache.snapshots</id>
- <url>http://repository.apache.org/snapshots</url>
+ <url>https://repository.apache.org/snapshots</url>
</pluginRepository>
</pluginRepositories>
</project>
diff --git a/src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml b/src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml
index cec5010..d423de4 100644
--- a/src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml
+++ b/src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml
@@ -45,7 +45,7 @@ under the License.
<pluginRepositories>
<pluginRepository>
<id>apache.snapshots</id>
- <url>http://repository.apache.org/snapshots</url>
+ <url>https://repository.apache.org/snapshots</url>
</pluginRepository>
</pluginRepositories>
</project>