commit 6b55656b25cacf0d88cf44d9d802ce46dfaadc83
author Ryan Skraba <ryan@skraba.com> Fri Jun 19 15:14:43 2020 +0200
committer Ismaël Mejía <iemejia@gmail.com> Mon Jun 22 15:28:48 2020 +0200
tree 6cc2bdcd6f6073b787cbb5f2dccadea8563b61af
parent 07b92907ad091bdb0181dceb521e2fca9776e050

AVRO-2865: Actually bump the jar.

lang/java/maven-plugin/pom.xml

diff --git a/lang/java/maven-plugin/pom.xml b/lang/java/maven-plugin/pom.xml
index e787223..394dd89 100644
--- a/lang/java/maven-plugin/pom.xml
+++ b/lang/java/maven-plugin/pom.xml
@@ -61,6 +61,14 @@
       <artifactId>maven-core</artifactId>
       <version>${maven.version}</version>
     </dependency>
+    <!-- Bump this to a higher version while maven 3.3.9 still uses 3.0.22 with a -->
+    <!-- XML injection vulnerability. -->
+    <dependency>
+      <groupId>org.codehaus.plexus</groupId>
+      <artifactId>plexus-utils</artifactId>
+      <version>3.0.24</version>
+      <scope>provided</scope>
+    </dependency>
     <dependency>
       <groupId>org.apache.maven.shared</groupId>
       <artifactId>file-management</artifactId>