Re: [SECURITY] Dependency Confusion

2021-02-22 Thread Michael Brohl
Hi Jacques, all, we should try to publish the Gradle Wrapper to Maven Central, right? Regards, Michael Brohl ecomify GmbH - www.ecomify.de Am 22.02.21 um 14:08 schrieb Jacques Le Roux: Hi, I created https://issues.apache.org/jira/browse/OFBIZ-12186 for that. It's much more simple that I

Re: [SECURITY] Dependency Confusion

2021-02-22 Thread Jacques Le Roux
Hi, I created https://issues.apache.org/jira/browse/OFBIZ-12186 for that. It's much more simple that I feared. I'll soon commit the attached verification-metadata.xml file there, if nobody oppose. We will later need to update it when updating dependencies. So I'll also update

Re: JFrog to shut down jcenter

2021-02-22 Thread Michael Brohl
Hi everyone, please help testing the jCenter to mavenCentral migration for trunk and release branches r17.12/r18.12. See https://issues.apache.org/jira/browse/OFBIZ-12171 and the linked pull requests there. Testing with different environments helps finding potential issues. If there are no