[java-opensaml] branch main updated: OSJ-350 - Reference to vulnerable version of org.postgresql:postgresql

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-opensaml.

View the commit online:
http://git.shibboleth.net/view/?p=java-opensaml.git;a=commit;h=966556fdd5cc363bd34c7231ff91278a16d35a15

The following commit(s) were added to refs/heads/main by this push:
     new 966556fdd OSJ-350 - Reference to vulnerable version of org.postgresql:postgresql
966556fdd is described below

commit 966556fdd5cc363bd34c7231ff91278a16d35a15
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Feb 4 12:29:51 2022 -0500

    OSJ-350 - Reference to vulnerable version of org.postgresql:postgresql
    
    https://shibboleth.atlassian.net/browse/OSJ-350
    
    Commented out both specific test dependencies.
    Beans are lazy-init, so left alone.
---
 opensaml-storage-impl/pom.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/opensaml-storage-impl/pom.xml b/opensaml-storage-impl/pom.xml
index 82f204a1d..02b742ed5 100644
--- a/opensaml-storage-impl/pom.xml
+++ b/opensaml-storage-impl/pom.xml
@@ -135,6 +135,8 @@
             <scope>test</scope>
         </dependency>
 
+        <!-- Uncomment for local testing with specific databases. -->
+        <!--
         <dependency>
             <groupId>org.postgresql</groupId>
             <artifactId>postgresql</artifactId>
@@ -148,6 +150,7 @@
             <version>8.0.19</version>
             <scope>test</scope>
         </dependency>
+        -->
 
         <dependency>
             <groupId>org.springframework</groupId>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.