slachiewicz opened a new pull request, #1722: URL: https://github.com/apache/maven-dependency-plugin/pull/1722
Jetty was a test-only dependency serving a Basic-auth repository for three `TestGetMojo` tests. Jetty 9.4 has no patched release on Central for GHSA-2fvj-hgj9-j2gr and GHSA-7p3p-8qv8-m2vh, and Jetty 10+ needs Java 11, so the tests now use `com.sun.net.httpserver.HttpServer`, and the three Jetty dependencies and their Dependabot ignore rule are removed. Verified: the auth test with a wrong password in settings → `401 Unauthorized`, so the server still enforces authentication. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
