You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by kw...@apache.org on 2026/01/13 19:43:46 UTC
(sling-site) 01/01: Pin pagefind version to prevent supply chain attacks
This is an automated email from the ASF dual-hosted git repository.
kwin pushed a commit to branch bugfix/pin-pagefind-version
in repository https://gitbox.apache.org/repos/asf/sling-site.git
commit 8f9bd387c25bc0d173a36daedcd020aa9fb6c3a4
Author: Konrad Windszus <kw...@apache.org>
AuthorDate: Tue Jan 13 20:43:36 2026 +0100
Pin pagefind version to prevent supply chain attacks
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 33c16a5a3..c4e24837f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -252,7 +252,7 @@
</goals>
<phase>${pagefind.maven.phase}</phase>
<configuration>
- <arguments>pagefind --site ${pagefind.site.folder}</arguments>
+ <arguments>pagefind@v1.4.0 --site ${pagefind.site.folder}</arguments>
</configuration>
</execution>
</executions>