Merge pull request #675 from camille-hdl/feature/upgrade-maven-assemb…

…ly-plugin-from-develop Upgrade maven-assembly-plugin to 3.7.1 - CVE-2023-37460 (replaces #674)
cantaloupe-project · Jul 31, 2024 · a6ec5c3 · a6ec5c3
2 parents 5166598 + 58018db
commit a6ec5c3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -371,7 +371,7 @@
         <dependency>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-assembly-plugin</artifactId>
-            <version>3.6.0</version>
+            <version>3.7.1</version>
             <type>maven-plugin</type>
         </dependency>
         <!-- Used by S3Source & S3Cache -->
@@ -503,7 +503,7 @@
             <!-- Assemble the JAR into a release package. -->
             <plugin>
                 <artifactId>maven-assembly-plugin</artifactId>
-                <version>3.6.0</version>
+                <version>3.7.1</version>
                 <executions>
                     <execution>
                         <phase>package</phase>