On Tue, Mar 13, 2018 at 1:47 PM, Rob Tompkins <chtom...@gmail.com> wrote:
> > > > On Mar 13, 2018, at 3:20 PM, Gary Gregory <garydgreg...@gmail.com> > wrote: > > > > I just updated in svn trunk the dependency Apache Commons BeanUtils from > > 1.9.2 to 1.9.3. > > > > My hope is to see the community: > > > > - Release Apache Commons Release Maven Pplugin 1.1 (this one is DONE :-) > > - Release Apache Commons Parent 45 (referencing Apache Commons Release > > plugin 1.1) > > - Release other Apache Commons components like Validator. > > My plan is to test run commons-parent 45 on the next release. I’m > indifferent over whether it’s Commons Text or Commons Validator. Is there a > preference? > Selfishly, I have a need for new Commons Text sooner rather than later. Gary > > -Rob > > > > > Gary > > > > > > On Wed, Feb 14, 2018 at 2:11 PM, Jon Champlin <jon.champl...@gmail.com> > > wrote: > > > >> We have an internal product that we use that includes the > >> commons-validator package from the central Maven repository and when > >> running a third-party library scanner (Black Duck) on the jar file it > >> flagged commons-beanutils and commons-collections as having security > >> vulnerabilities. I was wondering if there were plans in the near > future to > >> release a new version of commons-validator that had the latest version > of > >> compile dependencies for commons-beanutils, commons-collections and > >> commons-digester? > >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: user-unsubscr...@commons.apache.org > For additional commands, e-mail: user-h...@commons.apache.org > >
