This is an automated email from the ASF dual-hosted git repository. rmannibucau pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/openwebbeans-meecrowave-examples.git
The following commit(s) were added to refs/heads/master by this push: new c60d5a3 Use HTTPS instead of HTTP to resolve dependencies new a76187b Merge pull request #8 from JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies c60d5a3 is described below commit c60d5a3220eb98e47336892807ee5dc87df8d30a Author: Jonathan Leitschuh <jonathan.leitsc...@gmail.com> AuthorDate: Mon Feb 10 19:05:34 2020 -0500 Use HTTPS instead of HTTP to resolve dependencies This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh <jonathan.leitsc...@gmail.com> --- servlet-vaadin-v10/pom.xml | 4 ++-- servlet-vaadin-vxx/pom.xml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/servlet-vaadin-v10/pom.xml b/servlet-vaadin-v10/pom.xml index bc78a9a..38964d8 100644 --- a/servlet-vaadin-v10/pom.xml +++ b/servlet-vaadin-v10/pom.xml @@ -47,13 +47,13 @@ <!--Releases--> <repository> <id>vaadin-addons</id> - <url>http://maven.vaadin.com/vaadin-addons</url> + <url>https://maven.vaadin.com/vaadin-addons</url> </repository> <!--Pre-Releases--> <repository> <id>vaadin-prereleases</id> - <url>http://maven.vaadin.com/vaadin-prereleases</url> + <url>https://maven.vaadin.com/vaadin-prereleases</url> </repository> </repositories> diff --git a/servlet-vaadin-vxx/pom.xml b/servlet-vaadin-vxx/pom.xml index 6135454..710675b 100644 --- a/servlet-vaadin-vxx/pom.xml +++ b/servlet-vaadin-vxx/pom.xml @@ -28,13 +28,13 @@ <!--Releases--> <repository> <id>vaadin-addons</id> - <url>http://maven.vaadin.com/vaadin-addons</url> + <url>https://maven.vaadin.com/vaadin-addons</url> </repository> <!--Pre-Releases--> <repository> <id>vaadin-prereleases</id> - <url>http://maven.vaadin.com/vaadin-prereleases</url> + <url>https://maven.vaadin.com/vaadin-prereleases</url> </repository> </repositories>