Branch: refs/heads/master

  Home:   https://github.com/jenkinsci/github-autostatus-plugin

  Commit: 563cb11276e8d2a2588db2fda77624fe0fbe4080

      
https://github.com/jenkinsci/github-autostatus-plugin/commit/563cb11276e8d2a2588db2fda77624fe0fbe4080

  Author: René Scheibe <rene.sche...@gmail.com>

  Date:   2019-10-19 (Sat, 19 Oct 2019)



  Changed paths:

    M pom.xml



  Log Message:

  -----------

  Optimize dependency declaration (#67)



* Optimize dependency declaration



Extract declaring dependency versions required for upper bound management

with the maven-enforcer-plugin to the `<dependencyManagement>` element.

This just defines the versions but not the actual dependencies. Only

direct dependencies should and are now declared in the `<dependencies>`

element. This provides a better overview what is actually required.

It also significantly reduces the size of the HPI file as less JAR files

are packaged now.



* Overwrite jackson-databind version



It was upgraded in commit f689b2e3b96efdae3472b411f32b2d8af6763ac7

to get the latest security patches.



Even not beeing a direct but a transitive dependency, overwrite

its version for security reasons as stated above.





-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-commits+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-commits/jenkinsci/github-autostatus-plugin/push/refs/heads/master/9bb245-563cb1%40github.com.

Reply via email to