Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update pom.xml #4326

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

naga2222
Copy link

@naga2222 naga2222 commented May 9, 2024

updated the Jython version in update pom.xm file, this is helpful to avoid vulnerabilities

Signed-off-by: Doppalapudi, Nagababu <Nagababu.Doppalapudi@fmr.com>
@CLAassistant
Copy link

CLAassistant commented May 9, 2024

CLA assistant check
All committers have signed the CLA.

@tasso94 tasso94 self-requested a review May 13, 2024 14:41
@tasso94
Copy link
Member

tasso94 commented May 13, 2024

Hi @naga2222,

Thank you for your contribution. We only use Jython as a test dependency and don't ship it with the product. Therefore, it doesn't pose any security risk for end users. What is your motivation for raising this PR?

Best,
Tassilo

@naga2222
Copy link
Author

Hi Tassilo, Thanks for your reply. My motivation is changing the Jython version upto date or latest version. So I have updated either testing purpose or end users.

Regards
Naga

@tasso94
Copy link
Member

tasso94 commented May 17, 2024

Hi @naga2222,

You can just drop the Jython version of your choice into your application server/runtime.
This dependency is just for testing purposes and won't be shipped to users.

Best,
Tassilo

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants