From ebcddf767d9be137f3e46909ed18f04d5ca94ab0 Mon Sep 17 00:00:00 2001 From: Christoph Kuhnke Date: Wed, 16 Oct 2024 12:49:00 +0200 Subject: [PATCH] Updated dependencies (#589) * Updated dependencies * Used javax.inject.Inject See https://maven.apache.org/maven-jsr330.html#how-to-use-jsr-330-in-plugins Co-authored-by: Christoph Pirkl <4711730+kaklakariada@users.noreply.github.com> --- dependencies.md | 475 +++++++++--------- doc/changes/changelog.md | 1 + doc/changes/changes_4.3.4.md | 113 +++++ maven-project-crawler/pom.xml | 12 + .../MavenProjectCrawlerMojo.java | 12 +- parent-pom/pom.xml | 32 +- pom.xml | 12 + project-keeper-cli/pom.xml | 11 + project-keeper-maven-plugin/pom.xml | 23 + project-keeper/pom.xml | 11 + 10 files changed, 447 insertions(+), 255 deletions(-) create mode 100644 doc/changes/changes_4.3.4.md diff --git a/dependencies.md b/dependencies.md index f8c7e154..972fe7d9 100644 --- a/dependencies.md +++ b/dependencies.md @@ -5,92 +5,93 @@ ### Plugin Dependencies -| Dependency | License | -| ------------------------------------ | ------------------------------------ | -| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | -| [OpenFastTrace Maven Plugin][2] | [GNU General Public License v3.0][3] | -| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | -| [error-code-crawler-maven-plugin][5] | [MIT License][6] | +| Dependency | License | +| ------------------------------------------------------ | ------------------------------------ | +| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | +| [OpenFastTrace Maven Plugin][2] | [GNU General Public License v3.0][3] | +| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | +| [error-code-crawler-maven-plugin][5] | [MIT License][6] | +| [org.sonatype.ossindex.maven:ossindex-maven-plugin][7] | [ASL2][8] | ## Project Keeper Shared Model Classes ### Compile Dependencies -| Dependency | License | -| -------------------------------- | ------------------------------------------------------------------------------------------------------------ | -| [Jakarta JSON Processing API][7] | [Eclipse Public License 2.0][8]; [GNU General Public License, version 2 with the GNU Classpath Exception][9] | -| [JSON-B API][10] | [Eclipse Public License 2.0][8]; [GNU General Public License, version 2 with the GNU Classpath Exception][9] | -| [Yasson][11] | [Eclipse Public License v. 2.0][12]; [Eclipse Distribution License v. 1.0][13] | -| [error-reporting-java][14] | [MIT License][15] | -| [JGit - Core][16] | Eclipse Distribution License (New BSD License) | +| Dependency | License | +| -------------------------------- | -------------------------------------------------------------------------------------------------------------- | +| [Jakarta JSON Processing API][9] | [Eclipse Public License 2.0][10]; [GNU General Public License, version 2 with the GNU Classpath Exception][11] | +| [JSON-B API][12] | [Eclipse Public License 2.0][10]; [GNU General Public License, version 2 with the GNU Classpath Exception][11] | +| [Yasson][13] | [Eclipse Public License v. 2.0][14]; [Eclipse Distribution License v. 1.0][15] | +| [error-reporting-java][16] | [MIT License][17] | +| [JGit - Core][18] | Eclipse Distribution License (New BSD License) | ### Test Dependencies | Dependency | License | | ------------------------------------------ | --------------------------------- | -| [JUnit Jupiter Engine][17] | [Eclipse Public License v2.0][18] | -| [JUnit Jupiter Params][17] | [Eclipse Public License v2.0][18] | -| [Hamcrest][19] | [BSD License 3][20] | -| [JUnit5 System Extensions][21] | [Eclipse Public License v2.0][12] | -| [EqualsVerifier \| release normal jar][22] | [Apache License, Version 2.0][1] | -| [to-string-verifier][23] | [MIT License][24] | -| [mockito-core][25] | [MIT][26] | -| [SLF4J JDK14 Binding][27] | [MIT License][24] | +| [JUnit Jupiter Engine][19] | [Eclipse Public License v2.0][20] | +| [JUnit Jupiter Params][19] | [Eclipse Public License v2.0][20] | +| [Hamcrest][21] | [BSD-3-Clause][22] | +| [JUnit5 System Extensions][23] | [Eclipse Public License v2.0][14] | +| [EqualsVerifier \| release normal jar][24] | [Apache License, Version 2.0][1] | +| [to-string-verifier][25] | [MIT License][26] | +| [mockito-core][27] | [MIT][28] | +| [SLF4J JDK14 Binding][29] | [MIT License][26] | ### Plugin Dependencies -| Dependency | License | -| ------------------------------------------------------- | -------------------------------- | -| [SonarQube Scanner for Maven][28] | [GNU LGPL 3][29] | -| [Apache Maven Toolchains Plugin][30] | [Apache-2.0][1] | -| [Apache Maven Compiler Plugin][31] | [Apache-2.0][1] | -| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | -| [Maven Flatten Plugin][32] | [Apache Software Licenese][1] | -| [org.sonatype.ossindex.maven:ossindex-maven-plugin][33] | [ASL2][34] | -| [Maven Surefire Plugin][35] | [Apache-2.0][1] | -| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | -| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | -| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | -| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | -| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | -| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | -| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | -| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | -| [error-code-crawler-maven-plugin][5] | [MIT License][6] | -| [Reproducible Build Maven Plugin][46] | [Apache 2.0][34] | +| Dependency | License | +| ------------------------------------------------------ | -------------------------------- | +| [SonarQube Scanner for Maven][30] | [GNU LGPL 3][31] | +| [Apache Maven Toolchains Plugin][32] | [Apache-2.0][1] | +| [Apache Maven Compiler Plugin][33] | [Apache-2.0][1] | +| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | +| [Maven Flatten Plugin][34] | [Apache Software Licenese][1] | +| [org.sonatype.ossindex.maven:ossindex-maven-plugin][7] | [ASL2][8] | +| [Maven Surefire Plugin][35] | [Apache-2.0][1] | +| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | +| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | +| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | +| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | +| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | +| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | +| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | +| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | +| [error-code-crawler-maven-plugin][5] | [MIT License][6] | +| [Reproducible Build Maven Plugin][46] | [Apache 2.0][8] | ## Project Keeper Core ### Compile Dependencies -| Dependency | License | -| ----------------------------------------- | ---------------------------------------------- | -| [Project Keeper shared model classes][47] | [The MIT License][48] | -| [org.xmlunit:xmlunit-core][49] | [The Apache Software License, Version 2.0][34] | -| [error-reporting-java][14] | [MIT License][15] | -| [Markdown Generator][50] | [The Apache Software License, Version 2.0][34] | -| [semver4j][51] | [The MIT License][24] | -| [SnakeYAML][52] | [Apache License, Version 2.0][34] | -| [SnakeYAML Engine][53] | [Apache License, Version 2.0][34] | -| [Maven Model][54] | [Apache-2.0][1] | -| [jcabi-github][55] | [BSD][56] | +| Dependency | License | +| ----------------------------------------- | --------------------------------------------- | +| [Project Keeper shared model classes][47] | [The MIT License][48] | +| [org.xmlunit:xmlunit-core][49] | [The Apache Software License, Version 2.0][8] | +| [error-reporting-java][16] | [MIT License][17] | +| [Markdown Generator][50] | [The Apache Software License, Version 2.0][8] | +| [semver4j][51] | [The MIT License][26] | +| [SnakeYAML][52] | [Apache License, Version 2.0][8] | +| [SnakeYAML Engine][53] | [Apache License, Version 2.0][8] | +| [Maven Model][54] | [Apache-2.0][1] | +| [jcabi-github][55] | [BSD][56] | ### Test Dependencies -| Dependency | License | -| ------------------------------------------ | ---------------------------------------------- | -| [Project Keeper shared test setup][47] | [The MIT License][48] | -| [Maven Project Version Getter][57] | [MIT License][58] | -| [JUnit Jupiter Engine][17] | [Eclipse Public License v2.0][18] | -| [JUnit Jupiter Params][17] | [Eclipse Public License v2.0][18] | -| [Hamcrest][19] | [BSD License 3][20] | -| [org.xmlunit:xmlunit-matchers][49] | [The Apache Software License, Version 2.0][34] | -| [mockito-junit-jupiter][25] | [MIT][26] | -| [Maven Plugin Integration Testing][59] | [MIT License][60] | -| [EqualsVerifier \| release normal jar][22] | [Apache License, Version 2.0][1] | -| [to-string-verifier][23] | [MIT License][24] | -| [junit-pioneer][61] | [Eclipse Public License v2.0][18] | -| [SLF4J JDK14 Binding][27] | [MIT License][24] | +| Dependency | License | +| ------------------------------------------ | --------------------------------------------- | +| [Project Keeper shared test setup][47] | [The MIT License][48] | +| [Maven Project Version Getter][57] | [MIT License][58] | +| [JUnit Jupiter Engine][19] | [Eclipse Public License v2.0][20] | +| [JUnit Jupiter Params][19] | [Eclipse Public License v2.0][20] | +| [Hamcrest][21] | [BSD-3-Clause][22] | +| [org.xmlunit:xmlunit-matchers][49] | [The Apache Software License, Version 2.0][8] | +| [mockito-junit-jupiter][27] | [MIT][28] | +| [Maven Plugin Integration Testing][59] | [MIT License][60] | +| [EqualsVerifier \| release normal jar][24] | [Apache License, Version 2.0][1] | +| [to-string-verifier][25] | [MIT License][26] | +| [junit-pioneer][61] | [Eclipse Public License v2.0][20] | +| [SLF4J JDK14 Binding][29] | [MIT License][26] | ### Runtime Dependencies @@ -100,27 +101,27 @@ ### Plugin Dependencies -| Dependency | License | -| ------------------------------------------------------- | -------------------------------- | -| [SonarQube Scanner for Maven][28] | [GNU LGPL 3][29] | -| [Apache Maven Toolchains Plugin][30] | [Apache-2.0][1] | -| [Apache Maven JAR Plugin][62] | [Apache-2.0][1] | -| [Apache Maven Compiler Plugin][31] | [Apache-2.0][1] | -| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | -| [Maven Flatten Plugin][32] | [Apache Software Licenese][1] | -| [org.sonatype.ossindex.maven:ossindex-maven-plugin][33] | [ASL2][34] | -| [Maven Surefire Plugin][35] | [Apache-2.0][1] | -| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | -| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | -| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | -| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | -| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | -| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | -| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | -| [Maven Failsafe Plugin][63] | [Apache-2.0][1] | -| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | -| [error-code-crawler-maven-plugin][5] | [MIT License][6] | -| [Reproducible Build Maven Plugin][46] | [Apache 2.0][34] | +| Dependency | License | +| ------------------------------------------------------ | -------------------------------- | +| [SonarQube Scanner for Maven][30] | [GNU LGPL 3][31] | +| [Apache Maven Toolchains Plugin][32] | [Apache-2.0][1] | +| [Apache Maven JAR Plugin][62] | [Apache-2.0][1] | +| [Apache Maven Compiler Plugin][33] | [Apache-2.0][1] | +| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | +| [Maven Flatten Plugin][34] | [Apache Software Licenese][1] | +| [org.sonatype.ossindex.maven:ossindex-maven-plugin][7] | [ASL2][8] | +| [Maven Surefire Plugin][35] | [Apache-2.0][1] | +| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | +| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | +| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | +| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | +| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | +| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | +| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | +| [Maven Failsafe Plugin][63] | [Apache-2.0][1] | +| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | +| [error-code-crawler-maven-plugin][5] | [MIT License][6] | +| [Reproducible Build Maven Plugin][46] | [Apache 2.0][8] | ## Project Keeper Command Line Interface @@ -129,7 +130,7 @@ | Dependency | License | | -------------------------- | --------------------- | | [Project Keeper Core][47] | [The MIT License][48] | -| [error-reporting-java][14] | [MIT License][15] | +| [error-reporting-java][16] | [MIT License][17] | | [Maven Model][54] | [Apache-2.0][1] | ### Test Dependencies @@ -137,42 +138,42 @@ | Dependency | License | | -------------------------------------- | --------------------------------- | | [Project Keeper shared test setup][47] | [The MIT License][48] | -| [JUnit Jupiter Engine][17] | [Eclipse Public License v2.0][18] | -| [JUnit Jupiter Params][17] | [Eclipse Public License v2.0][18] | -| [Hamcrest][19] | [BSD License 3][20] | +| [JUnit Jupiter Engine][19] | [Eclipse Public License v2.0][20] | +| [JUnit Jupiter Params][19] | [Eclipse Public License v2.0][20] | +| [Hamcrest][21] | [BSD-3-Clause][22] | | [Maven Project Version Getter][57] | [MIT License][58] | ### Runtime Dependencies | Dependency | License | | ------------------------- | ----------------- | -| [SLF4J JDK14 Binding][27] | [MIT License][24] | +| [SLF4J JDK14 Binding][29] | [MIT License][26] | ### Plugin Dependencies -| Dependency | License | -| ------------------------------------------------------- | -------------------------------- | -| [SonarQube Scanner for Maven][28] | [GNU LGPL 3][29] | -| [Apache Maven Toolchains Plugin][30] | [Apache-2.0][1] | -| [Apache Maven Compiler Plugin][31] | [Apache-2.0][1] | -| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | -| [Maven Flatten Plugin][32] | [Apache Software Licenese][1] | -| [org.sonatype.ossindex.maven:ossindex-maven-plugin][33] | [ASL2][34] | -| [Maven Surefire Plugin][35] | [Apache-2.0][1] | -| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | -| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | -| [Apache Maven Assembly Plugin][64] | [Apache-2.0][1] | -| [Apache Maven JAR Plugin][62] | [Apache-2.0][1] | -| [Artifact reference checker and unifier][65] | [MIT License][66] | -| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | -| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | -| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | -| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | -| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | -| [Maven Failsafe Plugin][63] | [Apache-2.0][1] | -| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | -| [error-code-crawler-maven-plugin][5] | [MIT License][6] | -| [Reproducible Build Maven Plugin][46] | [Apache 2.0][34] | +| Dependency | License | +| ------------------------------------------------------ | -------------------------------- | +| [SonarQube Scanner for Maven][30] | [GNU LGPL 3][31] | +| [Apache Maven Toolchains Plugin][32] | [Apache-2.0][1] | +| [Apache Maven Compiler Plugin][33] | [Apache-2.0][1] | +| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | +| [Maven Flatten Plugin][34] | [Apache Software Licenese][1] | +| [org.sonatype.ossindex.maven:ossindex-maven-plugin][7] | [ASL2][8] | +| [Maven Surefire Plugin][35] | [Apache-2.0][1] | +| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | +| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | +| [Apache Maven Assembly Plugin][64] | [Apache-2.0][1] | +| [Apache Maven JAR Plugin][62] | [Apache-2.0][1] | +| [Artifact reference checker and unifier][65] | [MIT License][66] | +| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | +| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | +| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | +| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | +| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | +| [Maven Failsafe Plugin][63] | [Apache-2.0][1] | +| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | +| [error-code-crawler-maven-plugin][5] | [MIT License][6] | +| [Reproducible Build Maven Plugin][46] | [Apache 2.0][8] | ## Project Keeper Maven Plugin @@ -184,47 +185,47 @@ | [Maven Plugin Tools Java Annotations][67] | [Apache-2.0][1] | | [Maven Plugin API][68] | [Apache-2.0][1] | | [Maven Core][69] | [Apache-2.0][1] | -| [error-reporting-java][14] | [MIT License][15] | +| [error-reporting-java][16] | [MIT License][17] | ### Test Dependencies -| Dependency | License | -| -------------------------------------- | ---------------------------------------------- | -| [Maven Project Version Getter][57] | [MIT License][58] | -| [JUnit Jupiter Engine][17] | [Eclipse Public License v2.0][18] | -| [JUnit Jupiter Params][17] | [Eclipse Public License v2.0][18] | -| [Hamcrest][19] | [BSD License 3][20] | -| [org.xmlunit:xmlunit-matchers][49] | [The Apache Software License, Version 2.0][34] | -| [mockito-core][25] | [MIT][26] | -| [Maven Plugin Integration Testing][59] | [MIT License][60] | -| [SLF4J JDK14 Binding][27] | [MIT License][24] | -| [JaCoCo :: Agent][70] | [EPL-2.0][45] | +| Dependency | License | +| -------------------------------------- | --------------------------------------------- | +| [Maven Project Version Getter][57] | [MIT License][58] | +| [JUnit Jupiter Engine][19] | [Eclipse Public License v2.0][20] | +| [JUnit Jupiter Params][19] | [Eclipse Public License v2.0][20] | +| [Hamcrest][21] | [BSD-3-Clause][22] | +| [org.xmlunit:xmlunit-matchers][49] | [The Apache Software License, Version 2.0][8] | +| [mockito-core][27] | [MIT][28] | +| [Maven Plugin Integration Testing][59] | [MIT License][60] | +| [SLF4J JDK14 Binding][29] | [MIT License][26] | +| [JaCoCo :: Agent][70] | [EPL-2.0][45] | ### Plugin Dependencies -| Dependency | License | -| ------------------------------------------------------- | -------------------------------- | -| [SonarQube Scanner for Maven][28] | [GNU LGPL 3][29] | -| [Apache Maven Toolchains Plugin][30] | [Apache-2.0][1] | -| [Maven Plugin Plugin][71] | [Apache-2.0][1] | -| [Apache Maven Compiler Plugin][31] | [Apache-2.0][1] | -| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | -| [Maven Flatten Plugin][32] | [Apache Software Licenese][1] | -| [org.sonatype.ossindex.maven:ossindex-maven-plugin][33] | [ASL2][34] | -| [Maven Surefire Plugin][35] | [Apache-2.0][1] | -| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | -| [Apache Maven JAR Plugin][62] | [Apache-2.0][1] | -| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | -| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | -| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | -| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | -| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | -| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | -| [Apache Maven Dependency Plugin][72] | [Apache-2.0][1] | -| [Maven Failsafe Plugin][63] | [Apache-2.0][1] | -| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | -| [error-code-crawler-maven-plugin][5] | [MIT License][6] | -| [Reproducible Build Maven Plugin][46] | [Apache 2.0][34] | +| Dependency | License | +| ------------------------------------------------------ | -------------------------------- | +| [SonarQube Scanner for Maven][30] | [GNU LGPL 3][31] | +| [Apache Maven Toolchains Plugin][32] | [Apache-2.0][1] | +| [Maven Plugin Plugin][71] | [Apache-2.0][1] | +| [Apache Maven Compiler Plugin][33] | [Apache-2.0][1] | +| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | +| [Maven Flatten Plugin][34] | [Apache Software Licenese][1] | +| [org.sonatype.ossindex.maven:ossindex-maven-plugin][7] | [ASL2][8] | +| [Maven Surefire Plugin][35] | [Apache-2.0][1] | +| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | +| [Apache Maven JAR Plugin][62] | [Apache-2.0][1] | +| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | +| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | +| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | +| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | +| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | +| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | +| [Apache Maven Dependency Plugin][72] | [Apache-2.0][1] | +| [Maven Failsafe Plugin][63] | [Apache-2.0][1] | +| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | +| [error-code-crawler-maven-plugin][5] | [MIT License][6] | +| [Reproducible Build Maven Plugin][46] | [Apache 2.0][8] | ## Project Keeper Java Project Crawler @@ -235,78 +236,78 @@ | [Project Keeper shared model classes][47] | [The MIT License][48] | | [Maven Plugin Tools Java Annotations][67] | [Apache-2.0][1] | | [Maven Plugin API][68] | [Apache-2.0][1] | -| [error-reporting-java][14] | [MIT License][15] | -| [JGit - Core][16] | Eclipse Distribution License (New BSD License) | -| [semver4j][51] | [The MIT License][24] | +| [error-reporting-java][16] | [MIT License][17] | +| [JGit - Core][18] | Eclipse Distribution License (New BSD License) | +| [semver4j][51] | [The MIT License][26] | | [Maven Core][69] | [Apache-2.0][1] | ### Test Dependencies -| Dependency | License | -| -------------------------------------- | ---------------------------------------------- | -| [Maven Project Version Getter][57] | [MIT License][58] | -| [JUnit Jupiter Engine][17] | [Eclipse Public License v2.0][18] | -| [JUnit Jupiter Params][17] | [Eclipse Public License v2.0][18] | -| [Hamcrest][19] | [BSD License 3][20] | -| [org.xmlunit:xmlunit-matchers][49] | [The Apache Software License, Version 2.0][34] | -| [SLF4J JDK14 Binding][27] | [MIT License][24] | -| [mockito-core][25] | [MIT][26] | -| [mockito-junit-jupiter][25] | [MIT][26] | -| [Maven Plugin Integration Testing][59] | [MIT License][60] | -| [JaCoCo :: Agent][70] | [EPL-2.0][45] | +| Dependency | License | +| -------------------------------------- | --------------------------------------------- | +| [Maven Project Version Getter][57] | [MIT License][58] | +| [JUnit Jupiter Engine][19] | [Eclipse Public License v2.0][20] | +| [JUnit Jupiter Params][19] | [Eclipse Public License v2.0][20] | +| [Hamcrest][21] | [BSD-3-Clause][22] | +| [org.xmlunit:xmlunit-matchers][49] | [The Apache Software License, Version 2.0][8] | +| [SLF4J JDK14 Binding][29] | [MIT License][26] | +| [mockito-core][27] | [MIT][28] | +| [mockito-junit-jupiter][27] | [MIT][28] | +| [Maven Plugin Integration Testing][59] | [MIT License][60] | +| [JaCoCo :: Agent][70] | [EPL-2.0][45] | ### Plugin Dependencies -| Dependency | License | -| ------------------------------------------------------- | -------------------------------- | -| [SonarQube Scanner for Maven][28] | [GNU LGPL 3][29] | -| [Apache Maven Toolchains Plugin][30] | [Apache-2.0][1] | -| [Apache Maven Compiler Plugin][31] | [Apache-2.0][1] | -| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | -| [Maven Flatten Plugin][32] | [Apache Software Licenese][1] | -| [org.sonatype.ossindex.maven:ossindex-maven-plugin][33] | [ASL2][34] | -| [Maven Surefire Plugin][35] | [Apache-2.0][1] | -| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | -| [Maven Plugin Plugin][71] | [Apache-2.0][1] | -| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | -| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | -| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | -| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | -| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | -| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | -| [Apache Maven Dependency Plugin][72] | [Apache-2.0][1] | -| [Maven Failsafe Plugin][63] | [Apache-2.0][1] | -| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | -| [error-code-crawler-maven-plugin][5] | [MIT License][6] | -| [Reproducible Build Maven Plugin][46] | [Apache 2.0][34] | +| Dependency | License | +| ------------------------------------------------------ | -------------------------------- | +| [SonarQube Scanner for Maven][30] | [GNU LGPL 3][31] | +| [Apache Maven Toolchains Plugin][32] | [Apache-2.0][1] | +| [Apache Maven Compiler Plugin][33] | [Apache-2.0][1] | +| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | +| [Maven Flatten Plugin][34] | [Apache Software Licenese][1] | +| [org.sonatype.ossindex.maven:ossindex-maven-plugin][7] | [ASL2][8] | +| [Maven Surefire Plugin][35] | [Apache-2.0][1] | +| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | +| [Maven Plugin Plugin][71] | [Apache-2.0][1] | +| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | +| [Apache Maven Deploy Plugin][4] | [Apache-2.0][1] | +| [Apache Maven GPG Plugin][39] | [Apache-2.0][1] | +| [Apache Maven Source Plugin][40] | [Apache License, Version 2.0][1] | +| [Apache Maven Javadoc Plugin][41] | [Apache-2.0][1] | +| [Nexus Staging Maven Plugin][42] | [Eclipse Public License][43] | +| [Apache Maven Dependency Plugin][72] | [Apache-2.0][1] | +| [Maven Failsafe Plugin][63] | [Apache-2.0][1] | +| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | +| [error-code-crawler-maven-plugin][5] | [MIT License][6] | +| [Reproducible Build Maven Plugin][46] | [Apache 2.0][8] | ## Project Keeper Shared Test Setup ### Compile Dependencies -| Dependency | License | -| ----------------------------------------- | --------------------------------- | -| [Project Keeper shared model classes][47] | [The MIT License][48] | -| [SnakeYAML][52] | [Apache License, Version 2.0][34] | -| [Hamcrest][19] | [BSD License 3][20] | -| [Maven Model][54] | [Apache-2.0][1] | +| Dependency | License | +| ----------------------------------------- | -------------------------------- | +| [Project Keeper shared model classes][47] | [The MIT License][48] | +| [SnakeYAML][52] | [Apache License, Version 2.0][8] | +| [Hamcrest][21] | [BSD-3-Clause][22] | +| [Maven Model][54] | [Apache-2.0][1] | ### Plugin Dependencies -| Dependency | License | -| ------------------------------------------------------- | -------------------------------- | -| [SonarQube Scanner for Maven][28] | [GNU LGPL 3][29] | -| [Apache Maven Toolchains Plugin][30] | [Apache-2.0][1] | -| [Apache Maven Compiler Plugin][31] | [Apache-2.0][1] | -| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | -| [Maven Flatten Plugin][32] | [Apache Software Licenese][1] | -| [org.sonatype.ossindex.maven:ossindex-maven-plugin][33] | [ASL2][34] | -| [Maven Surefire Plugin][35] | [Apache-2.0][1] | -| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | -| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | -| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | -| [error-code-crawler-maven-plugin][5] | [MIT License][6] | -| [Reproducible Build Maven Plugin][46] | [Apache 2.0][34] | +| Dependency | License | +| ------------------------------------------------------ | -------------------------------- | +| [SonarQube Scanner for Maven][30] | [GNU LGPL 3][31] | +| [Apache Maven Toolchains Plugin][32] | [Apache-2.0][1] | +| [Apache Maven Compiler Plugin][33] | [Apache-2.0][1] | +| [Apache Maven Enforcer Plugin][0] | [Apache-2.0][1] | +| [Maven Flatten Plugin][34] | [Apache Software Licenese][1] | +| [org.sonatype.ossindex.maven:ossindex-maven-plugin][7] | [ASL2][8] | +| [Maven Surefire Plugin][35] | [Apache-2.0][1] | +| [Versions Maven Plugin][36] | [Apache License, Version 2.0][1] | +| [duplicate-finder-maven-plugin Maven Mojo][37] | [Apache License 2.0][38] | +| [JaCoCo :: Maven Plugin][44] | [EPL-2.0][45] | +| [error-code-crawler-maven-plugin][5] | [MIT License][6] | +| [Reproducible Build Maven Plugin][46] | [Apache 2.0][8] | [0]: https://maven.apache.org/enforcer/maven-enforcer-plugin/ [1]: https://www.apache.org/licenses/LICENSE-2.0.txt @@ -315,34 +316,34 @@ [4]: https://maven.apache.org/plugins/maven-deploy-plugin/ [5]: https://github.com/exasol/error-code-crawler-maven-plugin/ [6]: https://github.com/exasol/error-code-crawler-maven-plugin/blob/main/LICENSE -[7]: https://github.com/eclipse-ee4j/jsonp -[8]: https://projects.eclipse.org/license/epl-2.0 -[9]: https://projects.eclipse.org/license/secondary-gpl-2.0-cp -[10]: https://jakartaee.github.io/jsonb-api -[11]: https://projects.eclipse.org/projects/ee4j.yasson -[12]: http://www.eclipse.org/legal/epl-v20.html -[13]: http://www.eclipse.org/org/documents/edl-v10.php -[14]: https://github.com/exasol/error-reporting-java/ -[15]: https://github.com/exasol/error-reporting-java/blob/main/LICENSE -[16]: https://www.eclipse.org/jgit/ -[17]: https://junit.org/junit5/ -[18]: https://www.eclipse.org/legal/epl-v20.html -[19]: http://hamcrest.org/JavaHamcrest/ -[20]: http://opensource.org/licenses/BSD-3-Clause -[21]: https://github.com/itsallcode/junit5-system-extensions -[22]: https://www.jqno.nl/equalsverifier -[23]: https://github.com/jparams/to-string-verifier -[24]: http://www.opensource.org/licenses/mit-license.php -[25]: https://github.com/mockito/mockito -[26]: https://opensource.org/licenses/MIT -[27]: http://www.slf4j.org -[28]: http://sonarsource.github.io/sonar-scanner-maven/ -[29]: http://www.gnu.org/licenses/lgpl.txt -[30]: https://maven.apache.org/plugins/maven-toolchains-plugin/ -[31]: https://maven.apache.org/plugins/maven-compiler-plugin/ -[32]: https://www.mojohaus.org/flatten-maven-plugin/ -[33]: https://sonatype.github.io/ossindex-maven/maven-plugin/ -[34]: http://www.apache.org/licenses/LICENSE-2.0.txt +[7]: https://sonatype.github.io/ossindex-maven/maven-plugin/ +[8]: http://www.apache.org/licenses/LICENSE-2.0.txt +[9]: https://github.com/eclipse-ee4j/jsonp +[10]: https://projects.eclipse.org/license/epl-2.0 +[11]: https://projects.eclipse.org/license/secondary-gpl-2.0-cp +[12]: https://jakartaee.github.io/jsonb-api +[13]: https://projects.eclipse.org/projects/ee4j.yasson +[14]: http://www.eclipse.org/legal/epl-v20.html +[15]: http://www.eclipse.org/org/documents/edl-v10.php +[16]: https://github.com/exasol/error-reporting-java/ +[17]: https://github.com/exasol/error-reporting-java/blob/main/LICENSE +[18]: https://www.eclipse.org/jgit/ +[19]: https://junit.org/junit5/ +[20]: https://www.eclipse.org/legal/epl-v20.html +[21]: http://hamcrest.org/JavaHamcrest/ +[22]: https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE +[23]: https://github.com/itsallcode/junit5-system-extensions +[24]: https://www.jqno.nl/equalsverifier +[25]: https://github.com/jparams/to-string-verifier +[26]: http://www.opensource.org/licenses/mit-license.php +[27]: https://github.com/mockito/mockito +[28]: https://opensource.org/licenses/MIT +[29]: http://www.slf4j.org +[30]: http://sonarsource.github.io/sonar-scanner-maven/ +[31]: http://www.gnu.org/licenses/lgpl.txt +[32]: https://maven.apache.org/plugins/maven-toolchains-plugin/ +[33]: https://maven.apache.org/plugins/maven-compiler-plugin/ +[34]: https://www.mojohaus.org/flatten-maven-plugin/ [35]: https://maven.apache.org/surefire/maven-surefire-plugin/ [36]: https://www.mojohaus.org/versions/versions-maven-plugin/ [37]: https://basepom.github.io/duplicate-finder-maven-plugin @@ -362,7 +363,7 @@ [51]: https://github.com/vdurmont/semver4j [52]: https://bitbucket.org/snakeyaml/snakeyaml [53]: https://bitbucket.org/snakeyaml/snakeyaml-engine -[54]: https://maven.apache.org/ref/3.9.7/maven-model/ +[54]: https://maven.apache.org/ref/3.9.9/maven-model/ [55]: https://www.jcabi.com/jcabi-github [56]: https://www.jcabi.com/LICENSE.txt [57]: https://github.com/exasol/maven-project-version-getter/ @@ -376,8 +377,8 @@ [65]: https://github.com/exasol/artifact-reference-checker-maven-plugin/ [66]: https://github.com/exasol/artifact-reference-checker-maven-plugin/blob/main/LICENSE [67]: https://maven.apache.org/plugin-tools/maven-plugin-annotations -[68]: https://maven.apache.org/ref/3.9.7/maven-plugin-api/ -[69]: https://maven.apache.org/ref/3.9.7/maven-core/ +[68]: https://maven.apache.org/ref/3.9.9/maven-plugin-api/ +[69]: https://maven.apache.org/ref/3.9.9/maven-core/ [70]: https://www.eclemma.org/jacoco/index.html [71]: https://maven.apache.org/plugin-tools/maven-plugin-plugin [72]: https://maven.apache.org/plugins/maven-dependency-plugin/ diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md index 7b849ebb..e08afa3a 100644 --- a/doc/changes/changelog.md +++ b/doc/changes/changelog.md @@ -1,5 +1,6 @@ # Changes +* [4.3.4](changes_4.3.4.md) * [4.3.3](changes_4.3.3.md) * [4.3.2](changes_4.3.2.md) * [4.3.1](changes_4.3.1.md) diff --git a/doc/changes/changes_4.3.4.md b/doc/changes/changes_4.3.4.md new file mode 100644 index 00000000..04d0b15e --- /dev/null +++ b/doc/changes/changes_4.3.4.md @@ -0,0 +1,113 @@ +# Project Keeper 4.3.4, released 2024-??-?? + +Code name: Fix vulnerabilities + +## Summary + +This release fixes vulnerability CVE-2024-47554 in transitive test dependency `commons-io:commons-io` via `com.exasol:maven-plugin-integration-testing:1.1.2` and `com.jcabi:jcabi-github:1.8.0` + +The release ignores vulnerability CVE-2023-7272 in transitive runtime dependency `org.glassfish:javax.json:1.1.4` via `com.jcabi:jcabi-github:jar:1.9.1` as this is accepted for accessing exasol json documents on GitHub. + +### Security + +* #586: Fixed vulnerability CVE-2024-47554 in test dependency `commons-io:commons-io:2.11.0` +* #587: Fixed vulnerability CVE-2024-47554 in test dependency `commons-io:commons-io:2.13.0` +* #588: Ignore vulnerability CVE-2023-7272 in runtime dependency `org.glassfish:javax.json:1.1.4` + +## Dependency Updates + +### Project Keeper Root Project + +#### Plugin Dependency Updates + +* Added `org.sonatype.ossindex.maven:ossindex-maven-plugin:3.2.0` + +### Project Keeper Shared Model Classes + +#### Compile Dependency Updates + +* Updated `org.eclipse:yasson:3.0.3` to `3.0.4` + +#### Test Dependency Updates + +* Updated `nl.jqno.equalsverifier:equalsverifier:3.16.1` to `3.17.1` +* Updated `org.hamcrest:hamcrest:2.2` to `3.0` +* Updated `org.itsallcode:junit5-system-extensions:1.2.0` to `1.2.2` +* Updated `org.junit.jupiter:junit-jupiter-engine:5.10.2` to `5.11.2` +* Updated `org.junit.jupiter:junit-jupiter-params:5.10.2` to `5.11.2` +* Updated `org.mockito:mockito-core:5.12.0` to `5.14.1` + +### Project Keeper Core + +#### Compile Dependency Updates + +* Updated `com.exasol:project-keeper-shared-model-classes:4.3.3` to `4.3.4` +* Updated `com.jcabi:jcabi-github:1.8.0` to `1.9.1` +* Updated `org.snakeyaml:snakeyaml-engine:2.7` to `2.8` +* Updated `org.yaml:snakeyaml:2.2` to `2.3` + +#### Runtime Dependency Updates + +* Updated `com.exasol:project-keeper-java-project-crawler:4.3.3` to `4.3.4` + +#### Test Dependency Updates + +* Updated `com.exasol:maven-plugin-integration-testing:1.1.2` to `1.1.3` +* Updated `com.exasol:project-keeper-shared-test-setup:4.3.3` to `4.3.4` +* Updated `nl.jqno.equalsverifier:equalsverifier:3.16.1` to `3.17.1` +* Updated `org.hamcrest:hamcrest:2.2` to `3.0` +* Updated `org.junit-pioneer:junit-pioneer:2.2.0` to `2.3.0` +* Updated `org.junit.jupiter:junit-jupiter-engine:5.10.2` to `5.11.2` +* Updated `org.junit.jupiter:junit-jupiter-params:5.10.2` to `5.11.2` +* Updated `org.mockito:mockito-junit-jupiter:5.12.0` to `5.14.1` + +### Project Keeper Command Line Interface + +#### Compile Dependency Updates + +* Updated `com.exasol:project-keeper-core:4.3.3` to `4.3.4` +* Updated `org.apache.maven:maven-model:3.9.7` to `3.9.9` + +#### Test Dependency Updates + +* Updated `com.exasol:project-keeper-shared-test-setup:4.3.3` to `4.3.4` +* Updated `org.hamcrest:hamcrest:2.2` to `3.0` +* Updated `org.junit.jupiter:junit-jupiter-engine:5.10.2` to `5.11.2` +* Updated `org.junit.jupiter:junit-jupiter-params:5.10.2` to `5.11.2` + +### Project Keeper Maven Plugin + +#### Compile Dependency Updates + +* Updated `com.exasol:project-keeper-core:4.3.3` to `4.3.4` + +#### Test Dependency Updates + +* Updated `com.exasol:maven-plugin-integration-testing:1.1.2` to `1.1.3` +* Updated `org.hamcrest:hamcrest:2.2` to `3.0` +* Updated `org.junit.jupiter:junit-jupiter-engine:5.10.2` to `5.11.2` +* Updated `org.junit.jupiter:junit-jupiter-params:5.10.2` to `5.11.2` +* Updated `org.mockito:mockito-core:5.12.0` to `5.14.1` + +### Project Keeper Java Project Crawler + +#### Compile Dependency Updates + +* Updated `com.exasol:project-keeper-shared-model-classes:4.3.3` to `4.3.4` + +#### Test Dependency Updates + +* Updated `com.exasol:maven-plugin-integration-testing:1.1.2` to `1.1.3` +* Updated `org.hamcrest:hamcrest:2.2` to `3.0` +* Updated `org.junit.jupiter:junit-jupiter-engine:5.10.2` to `5.11.2` +* Updated `org.junit.jupiter:junit-jupiter-params:5.10.2` to `5.11.2` +* Updated `org.mockito:mockito-core:5.12.0` to `5.14.1` +* Updated `org.mockito:mockito-junit-jupiter:5.12.0` to `5.14.1` + +### Project Keeper Shared Test Setup + +#### Compile Dependency Updates + +* Updated `com.exasol:project-keeper-shared-model-classes:4.3.3` to `4.3.4` +* Updated `org.hamcrest:hamcrest:2.2` to `3.0` +* Updated `org.yaml:snakeyaml:2.2` to `2.3` diff --git a/maven-project-crawler/pom.xml b/maven-project-crawler/pom.xml index 2050a79b..8c5c681b 100644 --- a/maven-project-crawler/pom.xml +++ b/maven-project-crawler/pom.xml @@ -113,6 +113,18 @@ about.html + + + + org.codehaus.plexus + plexus-utils + + + + org.codehaus.plexus + plexus-xml + + diff --git a/maven-project-crawler/src/main/java/com/exasol/projectkeeper/MavenProjectCrawlerMojo.java b/maven-project-crawler/src/main/java/com/exasol/projectkeeper/MavenProjectCrawlerMojo.java index 2fad996c..5d1b55ba 100644 --- a/maven-project-crawler/src/main/java/com/exasol/projectkeeper/MavenProjectCrawlerMojo.java +++ b/maven-project-crawler/src/main/java/com/exasol/projectkeeper/MavenProjectCrawlerMojo.java @@ -1,5 +1,6 @@ package com.exasol.projectkeeper; +import javax.inject.Inject; import java.io.File; import java.util.HashMap; import java.util.Map; @@ -25,18 +26,25 @@ */ @Mojo(name = "crawl", requiresProject = false) public class MavenProjectCrawlerMojo extends AbstractMojo { + private static final String PROPERTY_PROJECTS_TO_CRAWL = "projectsToCrawl"; - @Component + RepositorySystem repositorySystem; @Parameter(property = PROPERTY_PROJECTS_TO_CRAWL, required = true) private String projectsToCrawl; - @Component private ProjectBuilder mavenProjectBuilder; + @Parameter(defaultValue = "${session}", readonly = true) private MavenSession session; + @Inject + MavenProjectCrawlerMojo(RepositorySystem repositorySystem, ProjectBuilder mavenProjectBuilder) { + this.repositorySystem = repositorySystem; + this.mavenProjectBuilder = mavenProjectBuilder; + } + // [impl -> dsn~eclipse-prefs-java-version~1] @Override public void execute() { diff --git a/parent-pom/pom.xml b/parent-pom/pom.xml index c501826d..6bc60dcd 100644 --- a/parent-pom/pom.xml +++ b/parent-pom/pom.xml @@ -28,14 +28,14 @@ - 4.3.3 + 4.3.4 17 - 3.9.7 + 3.9.9 3.6.3 - 5.10.2 + 5.11.2 2.10.0 - 5.12.0 + 5.14.1 UTF-8 UTF-8 true @@ -78,18 +78,18 @@ org.eclipse yasson - 3.0.3 + 3.0.4 org.eclipse.parsson parsson - 1.1.6 + 1.1.7 org.apache.maven.plugin-tools maven-plugin-annotations - 3.13.1 + 3.15.0 provided @@ -128,17 +128,17 @@ org.yaml snakeyaml - 2.2 + 2.3 org.snakeyaml snakeyaml-engine - 2.7 + 2.8 com.jcabi jcabi-github - 1.8.0 + 1.9.1 @@ -175,7 +175,7 @@ org.hamcrest hamcrest - 2.2 + 3.0 test @@ -205,7 +205,7 @@ com.exasol maven-plugin-integration-testing - 1.1.2 + 1.1.3 test @@ -224,19 +224,19 @@ org.itsallcode junit5-system-extensions - 1.2.0 + 1.2.2 test org.junit-pioneer junit-pioneer - 2.2.0 + 2.3.0 test nl.jqno.equalsverifier equalsverifier - 3.16.1 + 3.17.1 test @@ -248,7 +248,7 @@ org.itsallcode hamcrest-auto-matcher - 0.7.0 + 0.8.1 test diff --git a/pom.xml b/pom.xml index 7f0a7c1d..278b134a 100644 --- a/pom.xml +++ b/pom.xml @@ -88,6 +88,18 @@ + + org.sonatype.ossindex.maven + ossindex-maven-plugin + 3.2.0 + + + + CVE-2023-7272 + + + diff --git a/project-keeper-cli/pom.xml b/project-keeper-cli/pom.xml index 425b69f0..cb717c20 100644 --- a/project-keeper-cli/pom.xml +++ b/project-keeper-cli/pom.xml @@ -104,6 +104,17 @@ true + + org.sonatype.ossindex.maven + ossindex-maven-plugin + + + + CVE-2023-7272 + + + https://github.com/exasol/project-keeper/ diff --git a/project-keeper-maven-plugin/pom.xml b/project-keeper-maven-plugin/pom.xml index 237c7410..143f6af4 100644 --- a/project-keeper-maven-plugin/pom.xml +++ b/project-keeper-maven-plugin/pom.xml @@ -125,6 +125,29 @@ about.html + + + + org.codehaus.plexus + plexus-utils + + + + org.codehaus.plexus + plexus-xml + + + + + + org.sonatype.ossindex.maven + ossindex-maven-plugin + + + + CVE-2023-7272 + diff --git a/project-keeper/pom.xml b/project-keeper/pom.xml index 1dba2a9d..88dbc2ec 100644 --- a/project-keeper/pom.xml +++ b/project-keeper/pom.xml @@ -148,6 +148,17 @@ + + org.sonatype.ossindex.maven + ossindex-maven-plugin + + + + CVE-2023-7272 + + +