[java-sig-commits] [Bug 1955739] New: CVE-2021-26291 maven: Block repositories using http by default