adoroszlai opened a new pull request, #9311: URL: https://github.com/apache/ozone/pull/9311
## What changes were proposed in this pull request? `plexus-archiver` is a transitive build-time dependency via `maven-dependency-plugin`. Ozone has been using 4.2.2 due to a change in behavior on case-insensitive filesystems. However, 4.7.1 and earlier have vulnerability. With the root cause of case-insensitive conflict fixed in beac3271cc174989490dc8390bf8a0ea2f6651e9, using old version is no longer necessary. Let build pick up the version used by `maven-dependency-plugin` ([4.10.0 as of 3.8.1](https://github.com/apache/maven-dependency-plugin/blob/maven-dependency-plugin-3.8.1/pom.xml#L96)). https://issues.apache.org/jira/browse/HDDS-13947 ## How was this patch tested? Successful build on Mac: https://github.com/adoroszlai/ozone/actions/runs/19426505143/job/55576412036 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
