From c95578e24e7bdcf799b33e6ab4a0a69af728f901 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 15 Mar 2024 15:32:30 +0000
Subject: [PATCH] fix: tooling/karaf-maven-plugin/pom.xml to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-6254296
---
 tooling/karaf-maven-plugin/pom.xml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tooling/karaf-maven-plugin/pom.xml b/tooling/karaf-maven-plugin/pom.xml
index b48e47655e1..f089366b90b 100644
--- a/tooling/karaf-maven-plugin/pom.xml
+++ b/tooling/karaf-maven-plugin/pom.xml
@@ -34,9 +34,9 @@
 
     <properties>
         <appendedResourcesDirectory>${basedir}/../../etc/appended-resources</appendedResourcesDirectory>
-        <mvn.opts />
-        <invoker.skip />
-        <compiler.fork />
+        <mvn.opts/>
+        <invoker.skip/>
+        <compiler.fork/>
         <jacoco-class-line-covered-ratio>0.00</jacoco-class-line-covered-ratio>
         <jacoco-class-instruction-covered-ratio>0.00</jacoco-class-instruction-covered-ratio>
         <jacoco-class-missed-count-maximum>1</jacoco-class-missed-count-maximum>
@@ -252,7 +252,7 @@
         <dependency>
             <groupId>org.codehaus.plexus</groupId>
             <artifactId>plexus-archiver</artifactId>
-            <version>3.5</version>
+            <version>4.9.2</version>
         </dependency>
         <dependency>
             <groupId>org.apache.felix</groupId>