breautek commented on issue #1028:
URL: 
https://github.com/apache/cordova-android/issues/1028#issuecomment-658177089


   In general, it's always nice to keep up to date with the latest patch so I 
give my :+1: and I'll support a PR that upgrades gradle to 6.5.1 but a couple 
of notes:
   
   Cordova generally doesn't support experimental features, so I don't foresee 
us interfacing with this feature at this time. Of course, this doesn't mean 
that the end-user cannot enable the feature themselves once 6.5.1 is used.
   
   The security fix mentioned in 6.5.1 actually landed in 6.5, which you can 
see if you click on the link for more details at 
https://docs.gradle.org/6.5.1/release-notes.html#security or by viewing the 
actual 
[CVE](https://github.com/gradle/gradle/security/advisories/GHSA-ww7h-4fx5-8c2j),
 so `cordova-android@9` is already using the patched gradle version.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to