[GitHub] [maven-resources-plugin] patpatpat123 commented on pull request #12: Bump commons-io from 2.6 to 2.11.0
patpatpat123 commented on PR #12: URL: https://github.com/apache/maven-resources-plugin/pull/12#issuecomment-504266 Thank you @slachiewicz :) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [maven-resources-plugin] patpatpat123 commented on pull request #12: Bump commons-io from 2.6 to 2.11.0
patpatpat123 commented on PR #12: URL: https://github.com/apache/maven-resources-plugin/pull/12#issuecomment-1094073265 I gave it a go, but my level is very beginner in Java. This is quite technically difficult for me, as I am more of a "happy user" of this project rather than someone who can do meaningful code commit. Crossing my fingers someone with better coding skill bump into this. Again, thank you guys a lot -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [maven-resources-plugin] patpatpat123 commented on pull request #12: Bump commons-io from 2.6 to 2.11.0
patpatpat123 commented on PR #12: URL: https://github.com/apache/maven-resources-plugin/pull/12#issuecomment-1093942577 Understood @slawekjaranowski, and thank you for taking the time answering. Would it be possible to consider the migration up to java 8 (or above) of this project please? Looking at this table: https://endoflife.date/java I believe it will be beneficial for this project to use a supported Java version. This project is widely used, hopefully this is possible. Again, thank you -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [maven-resources-plugin] patpatpat123 commented on pull request #12: Bump commons-io from 2.6 to 2.11.0
patpatpat123 commented on PR #12: URL: https://github.com/apache/maven-resources-plugin/pull/12#issuecomment-1093530217 Hello Team, Is it possible to help on this one please? **commons-io-2.6.jar** is known to **carry the vulnerability CVE-2021-29425** Having this bump will ensure a safer version of this widely used plugin. Thank you -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
