Re: Struts Jar and Use of Maven Versions Set Plugin.

2021-11-29 Thread Karl Heinz Marbaise
Hi, On 29.11.21 02:00, Warren Bates wrote: Hi Dev Community – Hoping someone maybe able to provide some information around use of struts when invoking Maven Versions Set plugin. e.g., command: mvn -DnewVersion=1.0.5 versions:set . We found that it retrieves the dependency struts-core-1.3.8.j

Re: Struts Jar and Use of Maven Versions Set Plugin.

2021-11-29 Thread Bertrand Delacretaz
Hi, On Mon, Nov 29, 2021 at 9:22 AM Warren Bates wrote: > ...We would like to know if there are any security concerns with the 1.3.8 > version of struts jar > in relation to this particular use case (Maven Versions Set plugin)?.. That's a question for the Struts project, http://struts.apache.or

Struts Jar and Use of Maven Versions Set Plugin.

2021-11-29 Thread Warren Bates
Hi Dev Community – Hoping someone maybe able to provide some information around use of struts when invoking Maven Versions Set plugin. e.g., command: mvn -DnewVersion=1.0.5 versions:set . We found that it retrieves the dependency struts-core-1.3.8.jar into our local repo. The reason for highl