| --- |
| layout: post |
| status: PUBLISHED |
| published: true |
| title: Apache Maven 3.8.1 Released |
| id: 925b0283-76cb-497d-9380-f798faab6820 |
| date: '2021-04-04 19:26:21 -0400' |
| categories: maven |
| tags: |
| - maven-core-release |
| permalink: maven/entry/apache-maven-3-8-1 |
| --- |
| <div class="entry-content"> |
| <p>The Apache Maven team is pleased to announce the release of the <a href="https://maven.apache.org/ref/3.8.1/">Apache Maven 3.8.1</a></p> |
| <p>Apache Maven is a software project management and comprehension tool. Based on the concept<br /> |
| of a project object model (POM), Maven can manage a project’s build, reporting and documentation<br /> |
| from a central piece of information.</p> |
| <p>Maven 3.8.1 is available via <a href="https://maven.apache.org/download.cgi">https://maven.apache.org/download.cgi</a></p> |
| <p>The core release is independent of plugin releases. Further releases of plugins will be made<br /> |
| separately.</p> |
| <p>If you have any questions, please consult:</p> |
| <ul> |
| <li>the web site: <a href="https://maven.apache.org/">https://maven.apache.org/</a></li> |
| <li>the maven-user mailing list: <a href="https://maven.apache.org/mailing-lists.html">https://maven.apache.org/mailing-lists.html</a></li> |
| <li>the reference documentation: <a href="https://maven.apache.org/ref/3.8.1/">https://maven.apache.org/ref/3.8.1/</a></li> |
| </ul> |
| <p>RELEASE DETAILS</p> |
| <p>This release with CVE fixes is a result based on the findings and feedback of Jonathan Leitschuh and Olaf Flebbe.</p> |
| <p>One of the changes that might impact your builds is the way custom repositories defined in dependency<br /> |
| POMs will be handled.<br /> |
| By default external insecure repositories will now be blocked (localhost over HTTP will still work).<br /> |
| Configuration can be adjusted via the conf/settings.xml.</p> |
| <p>Release Notes – Maven – Version 3.8.1</p> |
| <ul> |
| <li> |
| <p>Bug:</p> |
| <ul> |
| <li><a href="https://issues.apache.org/jira/browse/MNG-7128">MNG-7128</a> – improve error message when blocked repository defined in build POM</li> |
| </ul> |
| </li> |
| <li> |
| <p>New Features:</p> |
| <ul> |
| <li><a href="https://issues.apache.org/jira/browse/MNG-7116">MNG-7116</a> – Add support for mirror selector on external:<a href="http:*">http:*</a></li> |
| <li><a href="https://issues.apache.org/jira/browse/MNG-7117">MNG-7117</a> – Add support for blocking mirrors</li> |
| <li><a href="https://issues.apache.org/jira/browse/MNG-7118">MNG-7118</a> – Block external HTTP repositories by default</li> |
| </ul> |
| </li> |
| <li> |
| <p>Dependency upgrades:</p> |
| <ul> |
| <li><a href="https://issues.apache.org/jira/browse/MNG-7119">MNG-7119</a> – Upgrade Maven Wagon to 3.4.3</li> |
| <li><a href="https://issues.apache.org/jira/browse/MNG-7123">MNG-7123</a> – Upgrade Maven Resolver to 1.6.2</li> |
| </ul> |
| </li> |
| </ul> |
| <p>For more information read <a href="https://maven.apache.org/docs/3.8.1/release-notes.html">https://maven.apache.org/docs/3.8.1/release-notes.html</a></p> |
| <p>Enjoy!</p> |
| <ul> |
| <li>The Maven Team</li> |
| </ul> |