Hi Francesco, I removed Xalan. It causes one system test to fail, but I just ignored it.
Colm. On Tue, Sep 6, 2022 at 1:53 PM Francesco Chicchiriccò <[email protected]> wrote: > > Hi all, > I am receiving weekly notifications from GitHub [1] about Xalan. > > Question: would it be enough to remove [2] from parent/pom.xml? Do we need > that at all, being compatibility set for JDK 11? > > Regards. > > [1] https://github.com/apache/cxf/security/dependabot/11 > [2] https://github.com/apache/cxf/blob/main/parent/pom.xml#L1259-L1269 > > -- > Francesco Chicchiriccò > > Tirasa - Open Source Excellence > http://www.tirasa.net/ > > Member at The Apache Software Foundation > Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail > http://home.apache.org/~ilgrosso/ >
