CFP for ApacheCon 2021 closes in ONE WEEK

2021-04-23 Thread Rich Bowen
[You are receiving this because you're subscribed to one or more dev@ mailing lists for an Apache project, or the ApacheCon Announce list.] Time is running out to submit your talk for ApacheCon 2021. The Call for Presentations for ApacheCon @Home 2021, focused on Europe and North America time zo

CVE-2021-26291: Apache Maven: block repositories using http by default

2021-04-23 Thread Brian Fox
Apache Maven may follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Mav

[VOTE] Release Apache Maven Plugin Tools version 3.6.1

2021-04-23 Thread Robert Scholte
Hi, We solved 14 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317820&version=12344365&styleName=Text There are still a couple of issues left in JIRA: https://issues.apache.org/jira/issues/?jql=project%20%3D%2012317820%20AND%20resolution%20%3D%20Unresolved%20ORDER%20B