From 01b3622c51ade4f4ed05c9c39e6d9e29d6f574df Mon Sep 17 00:00:00 2001
From: Keegan Witt <keeganwitt@gmail.com>
Date: Tue, 23 May 2023 16:37:32 -0400
Subject: [PATCH] Remove overridden dependencies no longer needed

---
 pom.xml | 20 +++-----------------
 1 file changed, 3 insertions(+), 17 deletions(-)

diff --git a/pom.xml b/pom.xml
index 921d9866..2aa7cda0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -54,11 +54,6 @@
       <version>${mavenVersion}</version>
       <scope>provided</scope>
     </dependency>
-    <dependency>
-      <groupId>org.apache.maven.shared</groupId>
-      <artifactId>file-management</artifactId>
-      <version>3.1.0</version>
-    </dependency>
     <dependency>
       <groupId>org.apache.maven.plugin-tools</groupId>
       <artifactId>maven-plugin-annotations</artifactId>
@@ -71,26 +66,17 @@
       <version>3.6.0</version>
     </dependency>
     <dependency>
-      <!-- this is needed to be able to use maven-archiver >= 3.5 -->
       <groupId>org.apache.maven.shared</groupId>
-      <artifactId>maven-shared-utils</artifactId>
-      <version>3.4.2</version>
-      <scope>runtime</scope>
+      <artifactId>file-management</artifactId>
+      <version>3.1.0</version>
     </dependency>
     <dependency>
-      <!-- this is needed to be able to use maven-archiver >= 3.5 -->
+      <!-- fix CVE-2022-4244 and CVE-2022-4245 vulnerabilities transitively coming from org.apache.maven:maven-artifact -->
       <groupId>org.codehaus.plexus</groupId>
       <artifactId>plexus-utils</artifactId>
       <version>3.5.1</version>
       <scope>runtime</scope>
     </dependency>
-    <dependency>
-      <!-- fix CVE-2021-29425 -->
-      <groupId>commons-io</groupId>
-      <artifactId>commons-io</artifactId>
-      <version>2.12.0</version>
-      <scope>runtime</scope>
-    </dependency>
     <dependency>
       <!-- this is to support use of Groovysh (Groovy jars don't include) -->
       <groupId>org.fusesource.jansi</groupId>