As current maintainer (who's seeking co-maintainers https://groups.google.com/g/jenkinsci-dev/c/WtNZKVWVlJ0/m/Zbd7SH_GFAAJ) I'd be happy to review a fix and release it, but won't be able to undertake the change.
Regarding adoption /co-maintaining, I'd be happy for you to get involved, as I'm currently not able to balance this (which I unfortunately no longer use for work, nor do I do much JVM stuff in recent years) but note that there's a long backlog of fixes and enhancements raised by the community. I'd got through a few of them when I started maintaining, but there's still quite a few things to do. Don't mean to put you off, just want to make sure you're aware going into it! On Thu, 8 Aug 2024, 07:54 'Michael Kriese' via Jenkins Developers, < jenkinsci-dev@googlegroups.com> wrote: > I think the easiest solution is to directly reference a fixed ant version, > that should override the inherited version > > https://mvnrepository.com/artifact/org.apache.ant/ant > > jer...@gmail.com schrieb am Mittwoch, 7. August 2024 um 15:57:59 UTC+2: > >> Hello, >> >> I recently created the following ticket to address a CVE with the >> job-dsl-plugin. I'm considering adopting the plugin in order to address the >> CVE, but would like to get some input on whether this will be a relatively >> simple undertaking or if I will be getting into "dependency hell" because >> this plugin relies on an older version of groovy and spock. Are there any >> videos or other resources that I could access to get up to speed on the >> code base? I have a fair amount of experience working with pipelines in >> groovy, but have never worked with the java-side of jenkins. >> >> https://issues.jenkins.io/browse/JENKINS-73463 >> >> I also created this post in the google group but no response(s) so far. >> >> https://groups.google.com/g/job-dsl-plugin/c/dkRLK4JxAVk >> >> Thanks, >> Jerico >> > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Developers" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to jenkinsci-dev+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-dev/2a0e475e-19d8-4f16-a62c-8ed8f048a3d0n%40googlegroups.com > <https://groups.google.com/d/msgid/jenkinsci-dev/2a0e475e-19d8-4f16-a62c-8ed8f048a3d0n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAP-iWuSfmwjVXx3PMaYCWdRApzoYb0p95FUCZtggdqatPhMaNw%40mail.gmail.com.
