This is an automated email from the ASF dual-hosted git repository. pottlinger pushed a commit to branch update-doxia-tools in repository https://gitbox.apache.org/repos/asf/creadur-rat.git
commit 73952b52b5c62c0fd8464fa00ffa6c0c65d31cfb Author: P. Ottlinger <[email protected]> AuthorDate: Wed Dec 22 22:49:53 2021 +0100 RAT-275: do not use deprecated method to copyResources --- apache-rat-plugin/pom.xml | 2 +- apache-rat-plugin/src/main/java/org/apache/rat/mp/RatReportMojo.java | 3 ++- src/changes/changes.xml | 3 +++ 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/apache-rat-plugin/pom.xml b/apache-rat-plugin/pom.xml index 7be7991..b3e28d8 100644 --- a/apache-rat-plugin/pom.xml +++ b/apache-rat-plugin/pom.xml @@ -34,7 +34,7 @@ </prerequisites> <properties> <currentVersion>${project.version}</currentVersion> - <doxiaVersion>1.9.1</doxiaVersion> + <doxiaVersion>1.10</doxiaVersion> <doxiaSitetoolsVersion>1.9.2</doxiaSitetoolsVersion> </properties> <build> diff --git a/apache-rat-plugin/src/main/java/org/apache/rat/mp/RatReportMojo.java b/apache-rat-plugin/src/main/java/org/apache/rat/mp/RatReportMojo.java index 04da245..cf2833f 100644 --- a/apache-rat-plugin/src/main/java/org/apache/rat/mp/RatReportMojo.java +++ b/apache-rat-plugin/src/main/java/org/apache/rat/mp/RatReportMojo.java @@ -149,7 +149,8 @@ public class RatReportMojo extends AbstractRatMojo implements MavenReport { siteRenderer.generateDocument(writer, sink, siteContext); - siteRenderer.copyResources(siteContext, new File(getProject().getBasedir(), "src/site/resources"), + + siteRenderer.copyResources(siteContext, new File(getProject().getBasedir() + "/src/site/resources"), outputDirectory); } catch (IOException | RendererException | MavenReportException e) { throw new MojoExecutionException(e.getMessage(), e); diff --git a/src/changes/changes.xml b/src/changes/changes.xml index f9e6a44..3273e96 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -55,6 +55,9 @@ The <action> type attribute can be add,update,fix,remove. <body> <release version="0.14-SNAPSHOT" date="2020-xx-xx" description="Current SNAPSHOT - to be done"> + <action issue="RAT-275" type="fix" dev="pottlinger"> + Update httpclient to fix CVE-2020-13956 after a new doxia-core is out. + </action> <action issue="RAT-289" type="add" dev="pottlinger"> Enable dependabot integration - write access is forbidden, but email alerts and pull requests should be ok. </action>
