[ https://issues.apache.org/jira/browse/OMID-252?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17777872#comment-17777872 ]
Nihal Jain commented on OMID-252: --------------------------------- Created the Jira for same. Also had identified changes for following maven plugins {code:java} <!-- Maven Plugin Versioning --> - <maven-assembly-plugin-version>3.1.1</maven-assembly-plugin-version> + <maven-assembly-plugin-version>3.6.0</maven-assembly-plugin-version> <maven-coveralls-plugin.version>4.1.0</maven-coveralls-plugin.version> <maven-cobertura-plugin.version>2.7</maven-cobertura-plugin.version> <maven-license-plugin.version>4.3</maven-license-plugin.version> - <maven-pmd-plugin.version>3.4</maven-pmd-plugin.version> - <maven-checkstyle-plugin.version>2.17</maven-checkstyle-plugin.version> - <maven-jxr-plugin.version>2.3</maven-jxr-plugin.version> - <maven-findbugs-maven-plugin.version>3.0.1</maven-findbugs-maven-plugin.version> - <maven-owasp-plugin.version>6.5.3</maven-owasp-plugin.version> - <surefire.version>3.0.0</surefire.version> + <maven-pmd-plugin.version>3.21.0</maven-pmd-plugin.version> + <maven-checkstyle-plugin.version>3.3.0</maven-checkstyle-plugin.version> + <maven-jxr-plugin.version>3.3.0</maven-jxr-plugin.version> + <maven-findbugs-maven-plugin.version>3.0.5</maven-findbugs-maven-plugin.version> + <maven-owasp-plugin.version>8.4.0</maven-owasp-plugin.version> <!-- Code coverage properties --> - <maven-clover-plugin.version>4.4.1</maven-clover-plugin.version> - <maven-sonar-plugin.version>3.9.1.2184</maven-sonar-plugin.version> + <maven-clover-plugin.version>4.5.0</maven-clover-plugin.version> + <maven-sonar-plugin.version>3.10.0.2594</maven-sonar-plugin.version> {code} Will create a Jira for bumping them as well. May be outside this ticket or should I keep them here itself? > Analyse and fix possible vulnerabilities for 1.1.1 release > ---------------------------------------------------------- > > Key: OMID-252 > URL: https://issues.apache.org/jira/browse/OMID-252 > Project: Phoenix Omid > Issue Type: Task > Reporter: Nihal Jain > Assignee: Nihal Jain > Priority: Major > > Here will try and analysis any vulnerabilities which can be fixed before > 1.1.1 release. Will create sub tasks as i identiffy them! > CC: [~stoty] [~rajeshbabu] [~vjasani] -- This message was sent by Atlassian Jira (v8.20.10#820010)