Bugs
[#280] The 3.0.1 jar was corrupt (thanks @eugene-sadovsky for reporting this!).
Enhancements
- [#279] Fix CVE-2023-42503.
Potentially breaking changes
None.
Notes
The CVE fixed were related to dependencies of the plugin. While I haven't done an analysis of whether they were exploitable (since this is a Maven plugin and not an application), it seems unlikely.
Contributors
eugene-sadovsky