hazendaz opened a new pull request #49: URL: https://github.com/apache/maven-pmd-plugin/pull/49
Maven core artifacts should be in provided scope. While bumped to 3.1.1 in master, maven-pmd-plugin 3.15.0 leaks old asm due to incorrect scope while stating in pom exclusion elsewhere for same leak concern (on maven-embedder). I believe there are more that should be set to provided but kept this as small as possible to match when it was applied in release 3.15.0. The original diff shows where issue was introduced [here](https://github.com/apache/maven-pmd-plugin/commit/3ffd4d3762028b1b0a8f714297a21de37d0c5649). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
