This is an automated email from the ASF dual-hosted git repository. cschneider pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/aries-journaled-events.git
The following commit(s) were added to refs/heads/master by this push: new c297a41 Use HTTPS instead of HTTP to resolve dependencies (#22) c297a41 is described below commit c297a412e9d865f4f914ee389ea8905474caf5bd Author: Jonathan Leitschuh <jonathan.leitsc...@gmail.com> AuthorDate: Wed Mar 4 03:24:22 2020 -0500 Use HTTPS instead of HTTP to resolve dependencies (#22) This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh <jonathan.leitsc...@gmail.com> --- pom.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index 6366297..9094ea9 100644 --- a/pom.xml +++ b/pom.xml @@ -274,7 +274,7 @@ <repository> <id>apache.snapshots</id> <name>Apache Maven Snapshot Repository</name> - <url>http://repository.apache.org/content/groups/snapshots/</url> + <url>https://repository.apache.org/content/groups/snapshots/</url> <releases> <enabled>false</enabled> </releases> @@ -289,7 +289,7 @@ <pluginRepository> <id>apache.snapshots</id> <name>Apache Maven Snapshot Repository</name> - <url>http://repository.apache.org/content/groups/snapshots/</url> + <url>https://repository.apache.org/content/groups/snapshots/</url> <layout>default</layout> <snapshots> <enabled>true</enabled>