I think the easiest solution is to directly reference a fixed ant version, 
that should override the inherited version

https://mvnrepository.com/artifact/org.apache.ant/ant

[email protected] schrieb am Mittwoch, 7. August 2024 um 15:57:59 UTC+2:

> Hello,
>
> I recently created the following ticket to address a CVE with the 
> job-dsl-plugin. I'm considering adopting the plugin in order to address the 
> CVE, but would like to get some input on whether this will be a relatively 
> simple undertaking or if I will be getting into "dependency hell" because 
> this plugin relies on an older version of groovy and spock. Are there any 
> videos or other resources that I could access to get up to speed on the 
> code base? I have a fair amount of experience working with pipelines in 
> groovy, but have never worked with the java-side of jenkins.
>
> https://issues.jenkins.io/browse/JENKINS-73463
>
> I also created this post in the google group but no response(s) so far.
>
> https://groups.google.com/g/job-dsl-plugin/c/dkRLK4JxAVk
>
> Thanks,
> Jerico
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/2a0e475e-19d8-4f16-a62c-8ed8f048a3d0n%40googlegroups.com.

Reply via email to