You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by re...@apache.org on 2019/07/23 11:40:19 UTC
svn commit: r1863626 -
/jackrabbit/site/trunk/src/site/markdown/creating-releases.md
Author: reschke
Date: Tue Jul 23 11:40:19 2019
New Revision: 1863626
URL: http://svn.apache.org/viewvc?rev=1863626&view=rev
Log:
update note about org.owasp:dependency-check-maven (version update)
Modified:
jackrabbit/site/trunk/src/site/markdown/creating-releases.md
Modified: jackrabbit/site/trunk/src/site/markdown/creating-releases.md
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/src/site/markdown/creating-releases.md?rev=1863626&r1=1863625&r2=1863626&view=diff
==============================================================================
--- jackrabbit/site/trunk/src/site/markdown/creating-releases.md (original)
+++ jackrabbit/site/trunk/src/site/markdown/creating-releases.md Tue Jul 23 11:40:19 2019
@@ -57,7 +57,7 @@ Release management tasks
### Part I: up to the release vote
1. Consider checking the CVE database for vulnerabilities in dependencies,
- using `mvn org.owasp:dependency-check-maven:4.0.2:aggregate` (first run will be slow because CVE
+ using `mvn org.owasp:dependency-check-maven:5.2.0:aggregate` (first run will be slow because CVE
databases are downloaded and parsed). If dependencies need action, open tickets and make sure they
are marked as candidate backports where applicable.
2. Make sure that an appropriate version for the release is entered in Jira