(bookkeeper) branch branch-4.17 updated: Correct Configuration Error in OWASP Dependency Check Plugin Setup

[shoothzj]

This is an automated email from the ASF dual-hosted git repository.

shoothzj pushed a commit to branch branch-4.17
in repository https://gitbox.apache.org/repos/asf/bookkeeper.git


The following commit(s) were added to refs/heads/branch-4.17 by this push:
     new cb38506bdf Correct Configuration Error in OWASP Dependency Check 
Plugin Setup
cb38506bdf is described below

commit cb38506bdf81dc938058981e1abc4b80c7ebbfab
Author: ZhangJian He <shoot...@gmail.com>
AuthorDate: Thu May 30 14:17:49 2024 +0800

    Correct Configuration Error in OWASP Dependency Check Plugin Setup
    
    Signed-off-by: ZhangJian He <shoot...@gmail.com>
---
 pom.xml | 19 ++-----------------
 1 file changed, 2 insertions(+), 17 deletions(-)

diff --git a/pom.xml b/pom.xml
index 8bfa0c8ed6..fe14ff5936 100644
--- a/pom.xml
+++ b/pom.xml
@@ -190,7 +190,7 @@
     <maven-checkstyle-plugin.version>3.3.1</maven-checkstyle-plugin.version>
     <maven-compiler-plugin.version>3.12.1</maven-compiler-plugin.version>
     <maven-surefire-plugin.version>3.2.5</maven-surefire-plugin.version>
-    <dependency-check-maven.version>8.0.2</dependency-check-maven.version>
+    <dependency-check-maven.version>9.2.0</dependency-check-maven.version>
     <nar-maven-plugin.version>3.10.1</nar-maven-plugin.version>
     <os-maven-plugin.version>1.4.1.Final</os-maven-plugin.version>
     <protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version>
@@ -1095,6 +1095,7 @@
             <groupId>org.owasp</groupId>
             <artifactId>dependency-check-maven</artifactId>
             <version>${dependency-check-maven.version}</version>
+            <inherited>false</inherited>
             <configuration>
               <suppressionFiles>
                 
<suppressionFile>src/owasp-dependency-check-suppressions.xml</suppressionFile>
@@ -1124,22 +1125,6 @@
           </plugin>
         </plugins>
       </build>
-      <reporting>
-        <plugins>
-          <plugin>
-            <groupId>org.owasp</groupId>
-            <artifactId>dependency-check-maven</artifactId>
-            <version>${dependency-check-maven.version}</version>
-            <reportSets>
-              <reportSet>
-                <reports>
-                  <report>aggregate</report>
-                </reports>
-              </reportSet>
-            </reportSets>
-          </plugin>
-        </plugins>
-      </reporting>
     </profile>
     <profile>
       <id>delombok</id>