I think there is one more dependency that needs to be checked - OpenWebBeans is with a snapshot version, which makes the build not reproducible.
2017-07-03 15:11 GMT+03:00 Romain Manni-Bucau <rmannibu...@gmail.com>: > Hi Svetlin, > > as soon as this cglib issue is fixed/merged and we reviewed the dependency > stack (no other "leak") we can release IMO. Build was fixed last week so we > are all good. > > > Romain Manni-Bucau > @rmannibucau <https://twitter.com/rmannibucau> | Blog > <https://blog-rmannibucau.rhcloud.com> | Old Blog > <http://rmannibucau.wordpress.com> | Github <https://github.com/ > rmannibucau> | > LinkedIn <https://www.linkedin.com/in/rmannibucau> | JavaEE Factory > <https://javaeefactory-rmannibucau.rhcloud.com> > > 2017-07-03 14:09 GMT+02:00 Svetlin Zarev <svetlin.angelov.za...@gmail.com > >: > > > Hi, > > > > Are there any plans for releasing 7.0.4 ? It has quite a lot of important > > fixes and it would be great to have them GA. Also tomcat in 7.0.3 is > quite > > old (8.5.11) and there have been several security fixes in tomcat since > > then [1][2]. > > > > > > [1] https://tomcat.apache.org/security-8.html#Fixed_in_ > > Apache_Tomcat_8.5.13 > > [2] https://tomcat.apache.org/security-8.html#Fixed_in_ > > Apache_Tomcat_8.5.15 > > > > Kind regards, > > Svetlin > > >
