Skip to content

Commit ad8d319

Browse files
Flossyclaude
andcommitted
fix: Downgrade OWASP dependency-check to 10.0.2 to avoid database lock bug
Version 10.0.4 has a known bug (Issue #7030) causing 25+ minute hangs with database locks. Version 10.0.2 works correctly without this issue. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
1 parent 87cb2f2 commit ad8d319

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

pom.xml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -302,8 +302,9 @@
302302
<plugin>
303303
<groupId>org.owasp</groupId>
304304
<artifactId>dependency-check-maven</artifactId>
305-
<version>10.0.4</version>
305+
<version>10.0.2</version>
306306
<configuration>
307+
<autoUpdate>false</autoUpdate>
307308
<failBuildOnCVSS>7</failBuildOnCVSS>
308309
<suppressionFile>dependency-check-suppressions.xml</suppressionFile>
309310
<!-- Disable OSS Index analyzer to avoid credential errors -->
@@ -470,7 +471,7 @@
470471
<plugin>
471472
<groupId>org.owasp</groupId>
472473
<artifactId>dependency-check-maven</artifactId>
473-
<version>10.0.4</version>
474+
<version>10.0.2</version>
474475
<reportSets>
475476
<reportSet>
476477
<reports>

0 commit comments

Comments
 (0)