Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Uplift plexus-build-api to 1.2.0 with updated groupId #720

Closed
greatmastermario opened this issue Mar 18, 2024 · 1 comment
Closed

Uplift plexus-build-api to 1.2.0 with updated groupId #720

greatmastermario opened this issue Mar 18, 2024 · 1 comment
Labels
dependencies Pull requests that update a dependency file
Milestone

Comments

@greatmastermario
Copy link

Describe the idea (required)

The plugin is currently using a very old version of plexus-build-api (0.0.7) which is unsupported. The latest version is part of a different groupId and has recent builds. I have validated that the plugin still works with the updated version by adjusting the version locally, so I can open a PR if approved. This should not be a breaking change based on my testing since the code still compiles and runs successfully with no changes.

Tell us about the expected behaviour (required)

Currently, I am running into build failures due to a CVE in a transitive dependency, so I need to manually override the version of plexus-build-api to get past this CVE. I expect that I should be able to use git-commit-id-maven-plugin without having to override transitive dependencies.

Context (optional)

No response

@TheSnoozer
Copy link
Collaborator

Thanks for the ticket, closing as duplicate of #717

@TheSnoozer TheSnoozer added dependencies Pull requests that update a dependency file and removed enhancement to-triage labels Mar 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

No branches or pull requests

2 participants