Skip to content

Commit

Permalink
Merge pull request #305 from spdx/databinddepend
Browse files Browse the repository at this point in the history
Remove unused Jackson databind from dependencies
  • Loading branch information
goneall authored Aug 22, 2022
2 parents 668d95a + d9810cb commit 3fea716
Showing 1 changed file with 1 addition and 7 deletions.
8 changes: 1 addition & 7 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -46,12 +46,6 @@
<dependencies>
<!-- JENA -->
<dependency>
<!-- Force the dependency version to 2.10.0.pr1 so the JSON-LD will work. This can be removed once https://github.com/jsonld-java/jsonld-java/commit/0f251f203649a04faf053c52beddab1d8865be5b is released -->
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.10.0.pr1</version>
</dependency>
<dependency>
<!-- Force the dependency version to 1.18 for Jena - resolves vulnerability -->
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
Expand Down Expand Up @@ -243,7 +237,7 @@
<plugin>
<groupId>org.spdx</groupId>
<artifactId>spdx-maven-plugin</artifactId>
<version>0.5.3</version>
<version>0.5.5</version>
<executions>
<execution>
<id>build-spdx</id>
Expand Down

0 comments on commit 3fea716

Please sign in to comment.