AVRO-2865: Actually bump the jar.

apache · Jun 22, 2020 · 6b55656 · 6b55656
1 parent 07b9290
commit 6b55656
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/lang/java/maven-plugin/pom.xml b/lang/java/maven-plugin/pom.xml
@@ -61,6 +61,14 @@
       <artifactId>maven-core</artifactId>
       <version>${maven.version}</version>
     </dependency>
+    <!-- Bump this to a higher version while maven 3.3.9 still uses 3.0.22 with a -->
+    <!-- XML injection vulnerability. -->
+    <dependency>
+      <groupId>org.codehaus.plexus</groupId>
+      <artifactId>plexus-utils</artifactId>
+      <version>3.0.24</version>
+      <scope>provided</scope>
+    </dependency>
     <dependency>
       <groupId>org.apache.maven.shared</groupId>
       <artifactId>file-management</artifactId>