Replies: 1 comment
-
Resolved the issue problem was in exclusion |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello,
I am using serenity version 4.1.3 .which uses “ org.apache.commons:commons-compress:jar:1.25.0” .
Looks like 1.25.0 has security vulnerability
I added project dependency management to download compress version 1.26 and exclusion under serenity-core.
Script runs fine but when it tries to create the report using aggregate it try’s to download org.apache.commons:commons-compress:jar:1.25.0 and it errors out since that version is quarantined by nexus .
How can i force aggregate to use compress version 1.26 instead of 1.25
ERROR] Failed to execute goal net.serenity-bdd.maven.plugins:serenity-maven-plugin:4.1.3:aggregate (serenity-reports) on project :Execution serenity-reports of goal net.serenity-bdd.maven.plugins:serenity-maven-plugin:4.1.3:aggregate failed: Plugin net.serenity-bdd.maven.plugins:serenity-maven-plugin:4.1.3 or one of its dependencies could not be resolved: Could not transfer artifact org.apache.commons:commons-compress:jar:1.25.0 from/to nexus.
Beta Was this translation helpful? Give feedback.
All reactions