From 2420b8052e723d0f7d76e07a21ee52d1bffdbd52 Mon Sep 17 00:00:00 2001
From: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Date: Tue, 11 Feb 2020 10:46:21 -0500
Subject: [PATCH] Use HTTPS instead of HTTP to resolve dependencies

This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
---
 sponge-legacy/pom.xml | 2 +-
 sponge/pom.xml        | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/sponge-legacy/pom.xml b/sponge-legacy/pom.xml
index 08a11479d..2267ecd6a 100644
--- a/sponge-legacy/pom.xml
+++ b/sponge-legacy/pom.xml
@@ -20,7 +20,7 @@
     <repositories>
         <repository>
             <id>sponge</id>
-            <url>http://repo.spongepowered.org/maven</url>
+            <url>https://repo.spongepowered.org/maven</url>
         </repository>
     </repositories>
 
diff --git a/sponge/pom.xml b/sponge/pom.xml
index 700982685..5d78da7ee 100644
--- a/sponge/pom.xml
+++ b/sponge/pom.xml
@@ -19,7 +19,7 @@
     <repositories>
         <repository>
             <id>sponge</id>
-            <url>http://repo.spongepowered.org/maven</url>
+            <url>https://repo.spongepowered.org/maven</url>
         </repository>
     </repositories>