Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

build(deps)!: bump maven-core from 3.6.3 to 3.8.1#7612

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Open
jeremylong wants to merge1 commit intomain
base:main
Choose a base branch
Loading
fromupgradeMaven

Conversation

jeremylong
Copy link
Collaborator

BREAKING CHANGE: dependency-check-maven now requires maven 3.8.1 or newer
Resolves#7566

BREAKING CHANGE: dependency-check-maven now requires maven 3.8.1 or newerresolves#7566
@boring-cyborgboring-cyborgbot added antchanges to ant clichanges to the cli corechanges to core documentationsite documentation mavenchanges to the maven plugin utilschanges to utils labelsApr 22, 2025
Copy link
Collaborator

@aikebahaikebah left a comment
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

LGTM; not required, but it saves us a whole lot of confusion and anyone interested in secure development pipelines should've upgraded to 3.8.1 or later anyhow.

Not sure how soon you'd like to release it as I can foresee my local attempts to get rid of the deprecated maven-artifact-transfer (https://github.com/apache/maven-artifact-transfer?tab=readme-ov-file#deprecation) as something that could likely trigger a new major (as it would be a good time to further cleanup/refactoring of the maven plugin amongst others addressing the plugin-dependencies-scope issue).

Hope to spend some serious time on that the week after ascension day.

@jeremylong
Copy link
CollaboratorAuthor

@aikebah I'm fine holding off on publishing this so we can combine a few breaking changes. I don't see this PR as too high of a priority.

Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment
Reviewers

@aikebahaikebahaikebah approved these changes

@nhumblotnhumblotnhumblot approved these changes

Assignees
No one assigned
Labels
antchanges to antclichanges to the clicorechanges to coredocumentationsite documentationmavenchanges to the maven pluginutilschanges to utils
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Pulling in old vulnerable version of maven-core
3 participants
@jeremylong@aikebah@nhumblot

[8]ページ先頭

©2009-2025 Movatter.jp