From commits-return-19623-archive-asf-public=cust-asf.ponee.io@jackrabbit.apache.org Tue Feb 20 15:08:21 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 45DDA180654 for ; Tue, 20 Feb 2018 15:08:21 +0100 (CET) Received: (qmail 25609 invoked by uid 500); 20 Feb 2018 14:08:20 -0000 Mailing-List: contact commits-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@jackrabbit.apache.org Delivered-To: mailing list commits@jackrabbit.apache.org Received: (qmail 25600 invoked by uid 99); 20 Feb 2018 14:08:20 -0000 Received: from Unknown (HELO svn01-us-west.apache.org) (209.188.14.144) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 20 Feb 2018 14:08:20 +0000 Received: from svn01-us-west.apache.org (localhost [127.0.0.1]) by svn01-us-west.apache.org (ASF Mail Server at svn01-us-west.apache.org) with ESMTP id 38D233A0166 for ; Tue, 20 Feb 2018 14:08:18 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r1824886 - /jackrabbit/site/trunk/src/site/markdown/creating-releases.md Date: Tue, 20 Feb 2018 14:08:17 -0000 To: commits@jackrabbit.apache.org From: reschke@apache.org X-Mailer: svnmailer-1.0.9 Message-Id: <20180220140819.38D233A0166@svn01-us-west.apache.org> Author: reschke Date: Tue Feb 20 14:08:17 2018 New Revision: 1824886 URL: http://svn.apache.org/viewvc?rev=1824886&view=rev Log: new version of dependency-check plugin Modified: jackrabbit/site/trunk/src/site/markdown/creating-releases.md Modified: jackrabbit/site/trunk/src/site/markdown/creating-releases.md URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/src/site/markdown/creating-releases.md?rev=1824886&r1=1824885&r2=1824886&view=diff ============================================================================== --- jackrabbit/site/trunk/src/site/markdown/creating-releases.md (original) +++ jackrabbit/site/trunk/src/site/markdown/creating-releases.md Tue Feb 20 14:08:17 2018 @@ -57,7 +57,7 @@ Release management tasks ### Part I: up to the release vote 1. Consider checking the CVE database for vulnerabilities in dependencies, - using `mvn org.owasp:dependency-check-maven:3.0.2:aggregate` (first run will be slow because CVE + using `mvn org.owasp:dependency-check-maven:3.1.1:aggregate` (first run will be slow because CVE databases are downloaded and parsed). If dependencies need action, open tickets and make sure they are marked as candidate backports where applicable. 2. Make sure that an appropriate version for the release is entered in Jira