This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/trunk by this push:
new 20aa6881056 HADOOP-19786. Bump org.owasp:dependency-check-maven plugin
to 12.2.2 (#8186)
20aa6881056 is described below
commit 20aa6881056fa0b3db3350fc390c6f5c54584d9e
Author: Edward Capriolo <[email protected]>
AuthorDate: Fri Jun 5 08:17:36 2026 -0400
HADOOP-19786. Bump org.owasp:dependency-check-maven plugin to 12.2.2 (#8186)
---
pom.xml | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 98f8ae0cc91..b9695aae409 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,7 +118,7 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
https://maven.apache.org/x
<lifecycle-mapping.version>1.0.0</lifecycle-mapping.version>
<maven-checkstyle-plugin.version>3.6.0</maven-checkstyle-plugin.version>
<checkstyle.version>11.1.0</checkstyle.version>
- <dependency-check-maven.version>7.1.1</dependency-check-maven.version>
+ <dependency-check-maven.version>12.2.2</dependency-check-maven.version>
<spotbugs.version>4.9.7</spotbugs.version>
<spotbugs-maven-plugin.version>4.9.7.0</spotbugs-maven-plugin.version>
<jsonschema2pojo-maven-plugin.version>1.1.1</jsonschema2pojo-maven-plugin.version>
@@ -526,6 +526,12 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
https://maven.apache.org/x
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<version>${dependency-check-maven.version}</version>
+ <configuration>
+ <!-- often misidentied native binaries as .net native binaries
then looks for .Net tooling to scan them -->
+ <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
+ <!-- requires separate sonatype account and sometimes fails if not
present -->
+ <ossindexAnalyzerEnabled>false</ossindexAnalyzerEnabled>
+ </configuration>
</plugin>
<plugin>
<groupId>com.github.spotbugs</groupId>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
