From 17cf6ecc4b6d55d95862c09986bb82a20c82aebf Mon Sep 17 00:00:00 2001
From: Aurimas Liutikas <aurimas@google.com>
Date: Fri, 22 Jul 2022 23:23:31 +0000
Subject: [PATCH] Upgrade asm to point to org.ow2:ow2:1.5.1

org.ow2:ow2:1.5 has unsigned artifacts, which forces users of asm that
have signature verification on to allowlist
ow2. This change upgrades the dependency to 1.5.1
which is signed.

Compare (see .asc files):
https://repo1.maven.org/maven2/org/ow2/ow2/1.5.1/
vs
https://repo1.maven.org/maven2/org/ow2/ow2/1.5/
---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 85d3918e7..ce6a73b6f 100644
--- a/build.gradle
+++ b/build.gradle
@@ -373,7 +373,7 @@ configure([rootProject] + subprojects.findAll { it.provides }) {
           def parent = asNode().appendNode('parent')
           parent.appendNode('groupId', 'org.ow2')
           parent.appendNode('artifactId', 'ow2')
-          parent.appendNode('version', '1.5')
+          parent.appendNode('version', '1.5.1')
         }
         pom {
           name = artifactId
-- 
GitLab