[ 
https://issues.apache.org/jira/browse/MSITE-828?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16683025#comment-16683025
 ] 

ASF GitHub Bot commented on MSITE-828:
--------------------------------------

michael-o commented on issue #3: [MSITE-828] Upgrade jetty to recent version. 
Update to java 1.8 (required for jetty)
URL: https://github.com/apache/maven-site-plugin/pull/3#issuecomment-437709471
 
 
   I see the point, though 9.2 is updated regularily: 9.2.26.v20180806. I don't 
mind updating per se, but I don't understand how it will improve security if 
this is testing only and not a compile/runtime dependency. In other words, it 
is never pulled by a third party.
   
   Anyway, I don't see it fixed with 
https://github.com/eclipse/jetty.project/commits/jetty-9.2.x.
   
   It seems fine to me to make this bump for 3.8. BUT I'd like to see "Upgrade 
to Java 8" with a seperate ticket and a subsequent one with Jetty. It makes the 
stuff transparent for our users.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Jdk 1.8 required / Upgrade Jetty Version 9.4.12
> -----------------------------------------------
>
>                 Key: MSITE-828
>                 URL: https://issues.apache.org/jira/browse/MSITE-828
>             Project: Maven Site Plugin
>          Issue Type: Task
>            Reporter: Olivier Lamy (*$^¨%`£)
>            Assignee: Olivier Lamy (*$^¨%`£)
>            Priority: Major
>




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to