| --- |
| layout: post |
| title: Apache Maven 3.8.1 Released |
| date: '2021-04-04T19:26:21+00:00' |
| permalink: apache-maven-3-8-1 |
| --- |
| <div class="entry-content"><p>The Apache Maven team is pleased to announce the release of the <a href="https://maven.apache.org/ref/3.8.1/">Apache Maven 3.8.1</a></p>
|
|
|
| <p>Apache Maven is a software project management and comprehension tool. Based on the concept
|
| of a project object model (POM), Maven can manage a project’s build, reporting and documentation
|
| from a central piece of information.</p>
|
|
|
| <p>Maven 3.8.1 is available via <a href="https://maven.apache.org/download.cgi">https://maven.apache.org/download.cgi</a></p>
|
|
|
| <p>The core release is independent of plugin releases. Further releases of plugins will be made
|
| separately.</p>
|
|
|
| <p>If you have any questions, please consult:</p>
|
|
|
| <ul>
|
| <li>the web site: <a href="https://maven.apache.org/">https://maven.apache.org/</a></li>
|
| <li>the maven-user mailing list: <a href="https://maven.apache.org/mailing-lists.html">https://maven.apache.org/mailing-lists.html</a></li>
|
| <li>the reference documentation: <a href="https://maven.apache.org/ref/3.8.1/">https://maven.apache.org/ref/3.8.1/</a></li>
|
| </ul>
|
|
|
|
|
| <p>RELEASE DETAILS</p>
|
|
|
| <p>This release with CVE fixes is a result based on the findings and feedback of Jonathan Leitschuh and Olaf Flebbe.</p>
|
|
|
| <p>One of the changes that might impact your builds is the way custom repositories defined in dependency
|
| POMs will be handled.
|
| By default external insecure repositories will now be blocked (localhost over HTTP will still work).
|
| Configuration can be adjusted via the conf/settings.xml.</p>
|
|
|
| <p>Release Notes – Maven – Version 3.8.1</p>
|
|
|
| <ul>
|
| <li><p>Bug:</p>
|
|
|
| <ul>
|
| <li><a href="https://issues.apache.org/jira/browse/MNG-7128">MNG-7128</a> – improve error message when blocked repository defined in build POM</li>
|
| </ul>
|
| </li>
|
| <li><p>New Features:</p>
|
|
|
| <ul>
|
| <li><a href="https://issues.apache.org/jira/browse/MNG-7116">MNG-7116</a> – Add support for mirror selector on external:<a href="http:*">http:*</a></li>
|
| <li><a href="https://issues.apache.org/jira/browse/MNG-7117">MNG-7117</a> – Add support for blocking mirrors</li>
|
| <li><a href="https://issues.apache.org/jira/browse/MNG-7118">MNG-7118</a> – Block external HTTP repositories by default</li>
|
| </ul>
|
| </li>
|
| <li><p>Dependency upgrades:</p>
|
|
|
| <ul>
|
| <li><a href="https://issues.apache.org/jira/browse/MNG-7119">MNG-7119</a> – Upgrade Maven Wagon to 3.4.3</li>
|
| <li><a href="https://issues.apache.org/jira/browse/MNG-7123">MNG-7123</a> – Upgrade Maven Resolver to 1.6.2</li>
|
| </ul>
|
| </li>
|
| </ul>
|
|
|
|
|
| <p>For more information read <a href="https://maven.apache.org/docs/3.8.1/release-notes.html">https://maven.apache.org/docs/3.8.1/release-notes.html</a></p>
|
|
|
| <p>Enjoy!</p>
|
|
|
| <ul>
|
| <li>The Maven Team</li>
|
| </ul>
|