eclipse / steady

Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/
Apache License 2.0
517 stars 123 forks source link

Updated org.apache.maven dependencies from 3.8.1 to 3.8.2 #497

Closed henrikplate closed 3 years ago

henrikplate commented 3 years ago

Updated org.apache.maven:* dependencies from 3.8.1 to 3.8.2, ant from 1.10.10 to 1.10.11, and soot-infoflow from 2.8 to 2.9.0.

The update of org.apache.maven resulted in a new dependency on org.codehaus.plexus:plexus-cipher 1.8, which replaces org.sonatype.plexus:plexus-cipher (a transitive dependency of org.apache.maven:maven-core 3.8.1 that has been removed with version 3.8.2).