[gora] branch master updated: Use HTTPS instead of HTTP to resolve dependencies (#199)

[dj...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

djkevincr pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/gora.git


The following commit(s) were added to refs/heads/master by this push:
     new 00abd59  Use HTTPS instead of HTTP to resolve dependencies (#199)
00abd59 is described below

commit 00abd59c982c76157ac5863b4edc3732f7a49e0e
Author: Jonathan Leitschuh <jo...@gmail.com>
AuthorDate: Tue Mar 3 19:16:59 2020 -0500

    Use HTTPS instead of HTTP to resolve dependencies (#199)
    
    This fixes a security vulnerability in this project where the `pom.xml`
    files were configuring Maven to resolve dependencies over HTTP instead of
    HTTPS.
    
    Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
 gora-couchdb/pom.xml | 2 +-
 gora-solr/pom.xml    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/gora-couchdb/pom.xml b/gora-couchdb/pom.xml
index 430fcef..df464b7 100644
--- a/gora-couchdb/pom.xml
+++ b/gora-couchdb/pom.xml
@@ -120,7 +120,7 @@
   <repositories>
     <repository>
       <id>clojars.org</id>
-      <url>http://clojars.org/repo</url>
+      <url>https://clojars.org/repo</url>
     </repository>
   </repositories>
 
diff --git a/gora-solr/pom.xml b/gora-solr/pom.xml
index f9faf79..e488c61 100644
--- a/gora-solr/pom.xml
+++ b/gora-solr/pom.xml
@@ -106,7 +106,7 @@
     <repository>
       <id>maven-restlet</id>
       <name>Public online Restlet repository</name>
-      <url>http://maven.restlet.org</url>
+      <url>https://maven.restlet.org</url>
     </repository>
   </repositories>