slachiewicz opened a new pull request, #1014: URL: https://github.com/apache/maven-wagon/pull/1014
Bumps `plexus-utils` to 3.6.1 (GHSA-6fmv-xxpf-w3cw) and manages the test-only transitives `mina-core` 2.2.10 (via ftpserver), `bcprov`, `bcpg`, `bcpkix` and `bcutil` 1.85 (via sshd-git), and `plexus-archiver` 4.8.0 (via the maven-scm test harness). `plexus-utils` is a compile dependency of the providers and reaches the published artifacts; the other four are test scope only. Jetty 9.4.58 stays: the fixed 9.4.60 and later are not on Maven Central, and the only releases that fix it on Central are Jetty 10 and later, which would need the Jakarta migration. Verified: `mvn verify` over all modules → green for api, file, ftp, http, lightweight-http, scm (git), ssh-common and webdav. The svn and external-scp tests need `svn` and a known host key and cannot run here; the wagon-ssh scp test blocks on a host key prompt. Part of apache/maven#13755 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
