[GitHub] [maven] michael-o commented on pull request #462: [MNG-7134] Backport security fix in 3.6.x branch

2021-04-02 Thread GitBox 


michael-o commented on pull request #462:
URL: https://github.com/apache/maven/pull/462#issuecomment-812507500


   @rmannibucau You can go with a new Resolver 1.4.x first.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [maven] michael-o commented on pull request #462: [MNG-7134] Backport security fix in 3.6.x branch

2021-04-02 Thread GitBox 


michael-o commented on pull request #462:
URL: https://github.com/apache/maven/pull/462#issuecomment-812503634


   Using Maven Resolver 1.6.x in a patch release is wrong. Too much has changed 
there. It should be another 1.4.x if you need to.
   I also do not understand the purpose of this because 3.8.x is a drop-in 
replacement except the new mirror handling.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org