Skip to content

Commit b2d24ba

Browse files
committed
Fixup master merge conflict. Whoops.
2 parents 3b2b132 + c18b239 commit b2d24ba

File tree

1 file changed

+10
-3
lines changed

1 file changed

+10
-3
lines changed

pom.xml

Lines changed: 10 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,13 @@
6868
</distributionManagement>
6969

7070
<dependencies>
71+
<!-- Transitive dependencies include 3.0.10, which contains an injection CVE. -->
72+
<dependency>
73+
<groupId>org.codehaus.plexus</groupId>
74+
<artifactId>plexus-utils</artifactId>
75+
<version>3.0.24</version>
76+
</dependency>
77+
7178
<dependency>
7279
<groupId>org.apache.maven</groupId>
7380
<artifactId>maven-core</artifactId>
@@ -88,17 +95,17 @@
8895
<dependency>
8996
<groupId>org.apache.maven.scm</groupId>
9097
<artifactId>maven-scm-api</artifactId>
91-
<version>1.9.5</version>
98+
<version>1.11.1</version>
9299
</dependency>
93100
<dependency>
94101
<groupId>org.apache.maven.scm</groupId>
95102
<artifactId>maven-scm-manager-plexus</artifactId>
96-
<version>1.9.5</version>
103+
<version>1.11.1</version>
97104
</dependency>
98105
<dependency>
99106
<groupId>org.apache.maven.scm</groupId>
100107
<artifactId>maven-scm-provider-gitexe</artifactId>
101-
<version>1.9.5</version>
108+
<version>1.11.1</version>
102109
</dependency>
103110
<dependency>
104111
<groupId>org.apache.maven.plugin-tools</groupId>

0 commit comments

Comments
 (0)