Hi, Since Tomcat enhanced InstanceManager I guess we can upgrade and decrease a lot the hacks/reflection we used by the past. Only open point on my side is: is it worth having a tomcat integration? I know very few users of that but generally speaking the web integration is really sufficient so do we want to keep it or let tomcat handle it - https://github.com/apache/tomcat/tree/main/modules/owb?
Romain Manni-Bucau @rmannibucau <https://twitter.com/rmannibucau> | Blog <https://rmannibucau.metawerx.net/> | Old Blog <http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> | LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book <https://www.packtpub.com/application-development/java-ee-8-high-performance> Le mar. 24 mai 2022 à 13:09, Jean-Louis Monteiro <jlmonte...@tomitribe.com> a écrit : > Hi, > > I was doing some dependency updates on OpenWebBeans and wanted to do a > release and I noticed we still have Tomcat 7.x in OWB. > > Shouldn't we try to move to the latest javax compatible version (aka 9.x)? > Tomcat 7.x is EOL and has many CVEs. > > What do you think? > -- > Jean-Louis Monteiro > http://twitter.com/jlouismonteiro > http://www.tomitribe.com >