blob: f6002e45c5dbbdb1d7ad5a9883f1b9b51fc9acef [file] [log] [blame]
---
layout: post
status: PUBLISHED
published: true
title: Apache Maven 3.8.1 Released
id: 925b0283-76cb-497d-9380-f798faab6820
date: '2021-04-04 19:26:21 -0400'
categories: maven
tags:
- maven-core-release
permalink: maven/entry/apache-maven-3-8-1
---
<div class="entry-content">
<p>The Apache Maven team is pleased to announce the release of the <a href="https://maven.apache.org/ref/3.8.1/">Apache Maven 3.8.1</a></p>
<p>Apache Maven is a software project management and comprehension tool. Based on the concept<br />
of a project object model (POM), Maven can manage a project&rsquo;s build, reporting and documentation<br />
from a central piece of information.</p>
<p>Maven 3.8.1 is available via <a href="https://maven.apache.org/download.cgi">https://maven.apache.org/download.cgi</a></p>
<p>The core release is independent of plugin releases. Further releases of plugins will be made<br />
separately.</p>
<p>If you have any questions, please consult:</p>
<ul>
<li>the web site: <a href="https://maven.apache.org/">https://maven.apache.org/</a></li>
<li>the maven-user mailing list: <a href="https://maven.apache.org/mailing-lists.html">https://maven.apache.org/mailing-lists.html</a></li>
<li>the reference documentation: <a href="https://maven.apache.org/ref/3.8.1/">https://maven.apache.org/ref/3.8.1/</a></li>
</ul>
<p>RELEASE DETAILS</p>
<p>This release with CVE fixes is a result based on the findings and feedback of Jonathan Leitschuh and Olaf Flebbe.</p>
<p>One of the changes that might impact your builds is the way custom repositories defined in dependency<br />
POMs will be handled.<br />
By default external insecure repositories will now be blocked (localhost over HTTP will still work).<br />
Configuration can be adjusted via the conf/settings.xml.</p>
<p>Release Notes &ndash; Maven &ndash; Version 3.8.1</p>
<ul>
<li>
<p>Bug:</p>
<ul>
<li><a href="https://issues.apache.org/jira/browse/MNG-7128">MNG-7128</a> &ndash; improve error message when blocked repository defined in build POM</li>
</ul>
</li>
<li>
<p>New Features:</p>
<ul>
<li><a href="https://issues.apache.org/jira/browse/MNG-7116">MNG-7116</a> &ndash; Add support for mirror selector on external:<a href="http:*">http:*</a></li>
<li><a href="https://issues.apache.org/jira/browse/MNG-7117">MNG-7117</a> &ndash; Add support for blocking mirrors</li>
<li><a href="https://issues.apache.org/jira/browse/MNG-7118">MNG-7118</a> &ndash; Block external HTTP repositories by default</li>
</ul>
</li>
<li>
<p>Dependency upgrades:</p>
<ul>
<li><a href="https://issues.apache.org/jira/browse/MNG-7119">MNG-7119</a> &ndash; Upgrade Maven Wagon to 3.4.3</li>
<li><a href="https://issues.apache.org/jira/browse/MNG-7123">MNG-7123</a> &ndash; Upgrade Maven Resolver to 1.6.2</li>
</ul>
</li>
</ul>
<p>For more information read <a href="https://maven.apache.org/docs/3.8.1/release-notes.html">https://maven.apache.org/docs/3.8.1/release-notes.html</a></p>
<p>Enjoy!</p>
<ul>
<li>The Maven Team</li>
</ul>