You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@netbeans.apache.org by sk...@apache.org on 2020/02/11 13:55:44 UTC

[netbeans-mavenutils-archetype-netbeans-platform-app-archetype] branch master updated: [SECURITY] Use HTTPS to resolve dependencies in Maven Build (#1)

This is an automated email from the ASF dual-hosted git repository.

skygo pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/netbeans-mavenutils-archetype-netbeans-platform-app-archetype.git


The following commit(s) were added to refs/heads/master by this push:
     new fab8b9d  [SECURITY] Use HTTPS to resolve dependencies in Maven Build (#1)
fab8b9d is described below

commit fab8b9d7ac9c860059cb13ad31ca83b96dee9e08
Author: Jonathan Leitschuh <jo...@gmail.com>
AuthorDate: Tue Feb 11 08:55:38 2020 -0500

    [SECURITY] Use HTTPS to resolve dependencies in Maven Build (#1)
    
    * Use HTTPS instead of HTTP to resolve dependencies
    
    This fixes a security vulnerability in this project where the `pom.xml`
    files were configuring Maven to resolve dependencies over HTTP instead of
    HTTPS.
    
    Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
    
    * remove repository netbeans
    
    Co-authored-by: Eric Barboni <sk...@apache.org>
---
 src/main/resources/archetype-resources/pom.xml | 16 ----------------
 1 file changed, 16 deletions(-)

diff --git a/src/main/resources/archetype-resources/pom.xml b/src/main/resources/archetype-resources/pom.xml
index 7cfc8ac..5c1ed7d 100644
--- a/src/main/resources/archetype-resources/pom.xml
+++ b/src/main/resources/archetype-resources/pom.xml
@@ -11,22 +11,6 @@
 
     <name>${artifactId}-parent</name>
 
-    <repositories>
-        <!--
-        Repository hosting NetBeans modules, especially APIs.
-        Versions are based on IDE releases, e.g.: RELEASE691
-        To create your own repository, use: nbm:populate-repository
-        
-        If you use Apache NetBeans starting with Apache NetBeans 9.0 
-        you can remove the netbeans repository section
-        -->
-        <repository>
-            <id>netbeans</id>
-            <name>NetBeans</name>
-            <url>http://bits.netbeans.org/nexus/content/groups/netbeans/</url>
-        </repository>
-    </repositories>
-
     <build>
         <pluginManagement>
             <plugins>


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@netbeans.apache.org
For additional commands, e-mail: commits-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists