Branch: refs/heads/master

  Home:   https://github.com/jenkinsci/github-autostatus-plugin

  Commit: 563cb11276e8d2a2588db2fda77624fe0fbe4080

      
https://github.com/jenkinsci/github-autostatus-plugin/commit/563cb11276e8d2a2588db2fda77624fe0fbe4080

  Author: René Scheibe <[email protected]>

  Date:   2019-10-19 (Sat, 19 Oct 2019)



  Changed paths:

    M pom.xml



  Log Message:

  -----------

  Optimize dependency declaration (#67)



* Optimize dependency declaration



Extract declaring dependency versions required for upper bound management

with the maven-enforcer-plugin to the `<dependencyManagement>` element.

This just defines the versions but not the actual dependencies. Only

direct dependencies should and are now declared in the `<dependencies>`

element. This provides a better overview what is actually required.

It also significantly reduces the size of the HPI file as less JAR files

are packaged now.



* Overwrite jackson-databind version



It was upgraded in commit f689b2e3b96efdae3472b411f32b2d8af6763ac7

to get the latest security patches.



Even not beeing a direct but a transitive dependency, overwrite

its version for security reasons as stated above.





-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-commits/jenkinsci/github-autostatus-plugin/push/refs/heads/master/9bb245-563cb1%40github.com.

Reply via email to