[
https://issues.apache.org/jira/browse/MEECROWAVE-337?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17821404#comment-17821404
]
Romain Manni-Bucau commented on MEECROWAVE-337:
-----------------------------------------------
Hi [~shaikezam] ,
# I guess we upgrade transitive deps in project forcing the versions so we
don't release meecrowave that often but there is no real blocker to do it
# We had the jakarta bundle
([https://repo1.maven.org/maven2/org/apache/meecrowave/meecrowave-core/1.2.15/meecrowave-core-1.2.15-jakarta.jar)]
which was covering it until the full stack migrates to jakarta, now
openwebbeans, tomcat and cxf migrated and some years passed we can likely do it
# probably check 1. which enables to be CVE free with last release
feel free to do a PR to work on 2 if you are interested?
> Migrate javax to jakarta
> ------------------------
>
> Key: MEECROWAVE-337
> URL: https://issues.apache.org/jira/browse/MEECROWAVE-337
> Project: Meecrowave
> Issue Type: Wish
> Reporter: Shai Zambrovski
> Priority: Major
>
> Hi
> 1st of all, I just want to say thanks for this great framework.
> There is a plan to:
> 1. Continue release newer versions? The last in maven repo was released on
> Jan 23
> 2. Any plan to migrate javax to jakarta namespace? It does doing some
> headache in our products.
> 3. Fix CVEs in the latest versions
> Thanks,
> Shai
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
