This is an automated email from the ASF dual-hosted git repository.
kaspersor pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/metamodel.git
The following commit(s) were added to refs/heads/master by this push:
new f643356 Use HTTPS instead of HTTP to resolve dependencies
new 66cf5a3 Merge pull request #238 from
JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies
f643356 is described below
commit f643356c2fa76c8bdea488075f5f78284bfb2709
Author: Jonathan Leitschuh <jonathan.leitsc...@gmail.com>
AuthorDate: Mon Feb 10 19:45:24 2020 -0500
Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <jonathan.leitsc...@gmail.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 41acc8c..0502d5c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -190,7 +190,7 @@ under the License.
<repositories>
<repository>
<id>apache.snapshots</id>
- <url>http://repository.apache.org/snapshots/</url>
+ <url>https://repository.apache.org/snapshots/</url>
<name>Apache Snapshot Repo</name>
<snapshots>
<enabled>true</enabled>
