As current maintainer (who's seeking co-maintainers https://groups.google.com/g/jenkinsci-dev/c/WtNZKVWVlJ0/m/Zbd7SH_GFAAJ) I'd be happy to review a fix and release it, but won't be able to undertake the change.
Regarding adoption /co-maintaining, I'd be happy for you to get involved, as I'm currently not able to balance this (which I unfortunately no longer use for work, nor do I do much JVM stuff in recent years) but note that there's a long backlog of fixes and enhancements raised by the community. I'd got through a few of them when I started maintaining, but there's still quite a few things to do. Don't mean to put you off, just want to make sure you're aware going into it! On Thu, 8 Aug 2024, 07:54 'Michael Kriese' via Jenkins Developers, < [email protected]> wrote: > I think the easiest solution is to directly reference a fixed ant version, > that should override the inherited version > > https://mvnrepository.com/artifact/org.apache.ant/ant > > [email protected] schrieb am Mittwoch, 7. August 2024 um 15:57:59 UTC+2: > >> Hello, >> >> I recently created the following ticket to address a CVE with the >> job-dsl-plugin. I'm considering adopting the plugin in order to address the >> CVE, but would like to get some input on whether this will be a relatively >> simple undertaking or if I will be getting into "dependency hell" because >> this plugin relies on an older version of groovy and spock. Are there any >> videos or other resources that I could access to get up to speed on the >> code base? I have a fair amount of experience working with pipelines in >> groovy, but have never worked with the java-side of jenkins. >> >> https://issues.jenkins.io/browse/JENKINS-73463 >> >> I also created this post in the google group but no response(s) so far. >> >> https://groups.google.com/g/job-dsl-plugin/c/dkRLK4JxAVk >> >> Thanks, >> Jerico >> > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Developers" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-dev/2a0e475e-19d8-4f16-a62c-8ed8f048a3d0n%40googlegroups.com > <https://groups.google.com/d/msgid/jenkinsci-dev/2a0e475e-19d8-4f16-a62c-8ed8f048a3d0n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAP-iWuSfmwjVXx3PMaYCWdRApzoYb0p95FUCZtggdqatPhMaNw%40mail.gmail.com.
