Re: what will be 1.8.0 from git clone has several CVEs including one from ant-plugin

Sorry to say it bluntly, but I think this means that the tool you are using is completely braindead. It sees "ant" and "1.8.0" in the JAR file name and believes the artifact is Ant 1.8.0 [1]. Same for taglibs-standard-impl-1.2.5.jar: it sees "tag" and "1.2.5" and then spits out CVEs for https://git

Re: build error with JDK8 to do with permissions

This should be fixed now. Andreas On Wed, Mar 10, 2021 at 1:50 PM Andrew Marlow wrote: > Hello everyone, > > I just did a git clone to get the latest (what will presumably become > 1.8.0) and tried "mvn install". I got the error shown below. I don't get it > when I run the build as root but IMO

[GitHub] [axis-axis2-java-core] veithen merged pull request #128: Bump hermetic-maven-plugin from 0.5.3 to 0.5.4

veithen merged pull request #128: URL: https://github.com/apache/axis-axis2-java-core/pull/128 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL abov

[GitHub] [axis-axis2-java-core] dependabot[bot] opened a new pull request #128: Bump hermetic-maven-plugin from 0.5.3 to 0.5.4

dependabot[bot] opened a new pull request #128: URL: https://github.com/apache/axis-axis2-java-core/pull/128 Bumps [hermetic-maven-plugin](https://github.com/veithen/hermetic-maven-plugin) from 0.5.3 to 0.5.4. Commits https://github.com/veithen/hermetic-maven-plugin/commit/19