ben-manes / gradle-versions-plugin

Gradle plugin to discover dependency updates
Apache License 2.0
3.86k stars 199 forks source link

Fail the build when an insecure XML parser is detected #827

Closed ben-manes closed 8 months ago

ben-manes commented 8 months ago

As described in a prior release and in (gradle/gradle#26672, the insecure parser causes confusing build errors. Thanks @hvisser for the idea to check upfront to give users a clearer error message and point them towards a fix.