-
Notifications
You must be signed in to change notification settings - Fork 304
Closed
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency file
Milestone
Description
Describe the idea (required)
The plugin is currently using a very old version of plexus-build-api (0.0.7) which is unsupported. The latest version is part of a different groupId and has recent builds. I have validated that the plugin still works with the updated version by adjusting the version locally, so I can open a PR if approved. This should not be a breaking change based on my testing since the code still compiles and runs successfully with no changes.
Tell us about the expected behaviour (required)
Currently, I am running into build failures due to a CVE in a transitive dependency, so I need to manually override the version of plexus-build-api to get past this CVE. I expect that I should be able to use git-commit-id-maven-plugin without having to override transitive dependencies.
Context (optional)
No response
Metadata
Metadata
Assignees
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency file