force upgrade to dependency of a dependency to fix CVE-2023-37460 (#50)…

… (#51) Co-authored-by: Mark Brophy <[email protected]>
windup · Oct 20, 2023 · 74adb4b · 74adb4b
1 parent 509ad88
commit 74adb4b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -199,6 +199,13 @@
             <scope>test</scope>
         </dependency>
 
+        <dependency>
+            <groupId>org.codehaus.plexus</groupId>
+            <artifactId>plexus-archiver</artifactId>
+            <version>4.8.0</version>
+            <scope>test</scope>
+        </dependency>
+
         <dependency>
             <groupId>org.eclipse.platform</groupId>
             <artifactId>org.eclipse.core.resources</artifactId>