slawekjaranowski commented on PR #268: URL: https://github.com/apache/maven-dependency-plugin/pull/268#issuecomment-1336558063
@elharo , @slachiewicz It was added in order to override transitive version, now we have version 1.7.0 - please examine dependency tree Why we need newer version ... because of CVE ... Probably better place will be dependencyManagement for such case. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
