[
https://issues.apache.org/jira/browse/MCHANGES-455?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17908737#comment-17908737
]
Slawomir Jaranowski commented on MCHANGES-455:
----------------------------------------------
* xmlrpc-common - is needed by Trac integration - there is no newer version
.... by the way Trac is deprecated and I would like to delete it MCHANGES-454
* maven-core is a provided dependencies - not use by plugin in runtime -
current executing Maven by user is used
> Freshly released plugin contains CVE-warnings
> ---------------------------------------------
>
> Key: MCHANGES-455
> URL: https://issues.apache.org/jira/browse/MCHANGES-455
> Project: Maven Changes Plugin
> Issue Type: Dependency upgrade
> Affects Versions: 3.0.0-M1
> Reporter: Philipp Ottlinger
> Priority: Major
>
> I was happy to find the new RC 3.0.0-M1 ... when I had a look at
>
> [https://mvnrepository.com/artifact/org.apache.maven.plugins/maven-changes-plugin/3.0.0-M1]
> I already saw 2 CVE-warnings. Not sure how easy these can be fixed in the
> next release cycle.
>
> Thanks for all your work and help
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
