[ https://issues.apache.org/jira/browse/WW-5068?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17086838#comment-17086838 ]
ASF subversion and git services commented on WW-5068: ----------------------------------------------------- Commit a5728a295311f724f1f25bfb4b65916ae8a0fd1d in struts's branch refs/heads/master from Lukasz Lenart [ https://gitbox.apache.org/repos/asf?p=struts.git;h=a5728a2 ] Merge pull request #403 from JCgH4164838Gh792C124B5/WW-5068-26x Proposed WW-5068 change > Update multiple Struts 2.6.x libraries / Maven build plugin versions > -------------------------------------------------------------------- > > Key: WW-5068 > URL: https://issues.apache.org/jira/browse/WW-5068 > Project: Struts 2 > Issue Type: Dependency > Components: Build Management, Other > Affects Versions: 2.6 > Environment: All > Reporter: James Chaplin > Priority: Minor > Fix For: 2.6 > > > Hello Apache Struts Team. > This Jira is to track proposed introduction of newer (believed to be > compatible) library versions for the Struts 2.6.x line, as well as newer > (believed to be compatible) Maven build plugin versions for the build. > Modifications to some pom.xml build files will be all that is required. > As no code changes are involved, the risk should be pretty low and if > back-levelling is required it can take place before 2.6.x is released. If any > Maven build plugin version change presents an issue it can be easily reverted > in the PR. > The proposed list of library version updates is: > ------ > cdi-api 1.0-SP4 -> 1.2 > weld-core 1.0.1-SP4 -> 2.2.16.SP1 > weld-se 1.0.1-Final -> weld-se-core 2.2.16.SP1 > htmlunit 2.37.0 -> 2.39.0 > slf4j-api 1.7.29 -> 1.7.30 > slf4j-simple 1.7.29 -> 1.7.30 > log4j2 2.12.1 - > 2.13.1 > jackson 2.10.1 -> 2.10.3 > ognl 3.2.12 -> 3.2.14 > asm 7.2 -> 7.3.1 > spring 4.3.25.RELEASE -> 4.3.26.RELEASE > fluido-skin 1.8 -> 1.9 > freemarker 2.3.28 -> 2.3.30 > org.apache.felix.main 4.6.1 -> 6.0.3 > velocity 2.1 -> 2.2 > junit 4.12 -> 4.13 > easymock 3.5.1 -> 4.2 > javax.el 3.0.1-b10 -> 3.0.1-b11 > jstl 1.1.2 -> 1.2 > tomcat-jasper 8.5.37 -> 8.5.53 > tomcat-api 8.5.37 -> 8.5.53 > tomcat-juli 8.5.37 -> 8.5.53 > commons-lang3 3.9 -> 3.10 > assertj-core 2.9.1 -> 3.15.0 > mockito-core 2.23.0 -> 3.3.3 > testng 5.14.10 -> 7.1.0 > juneau-marshall 7.2.2 -> 8.1.3 > validation-api 1.1.0.Final -> 2.0.1.Final > hibernate-validator 5.4.3.Final -> 6.1.2.Final > jaxb-impl 2.3.1 -> 2.3.2 > ------ > The proposed list of Maven plugin version updates is: > ------ > maven-project-info-reports-plugin 2.7 -> 3.0.0 > updateimpact-maven-plugin 1.0.10 -> 1.0.12 > maven-surefire-plugin 2.22.2 -> 3.0.0-M4 > jacoco-maven-plugin 0.8.4 - > 0.8.5 > maven-war-plugin 3.2.2 -> 3.2.3 > maven-bundle-plugin 3.5.0 -> 4.2.1 > maven-dependency-plugin 3.1.1 -> 3.1.2 > dependency-check-maven 5.2.4 -> 5.3.2 > maven-enforcer-plugin 3.0.0-M2 -> 3.0.0-M3 > maven-failsafe-plugin 2.22.2 -> 3.0.0-M4 > maven-site-plugin 3.8.2 -> 3.9.0 > doxia-core 1.9 -> 1.9.1 > doxia-module-markdown 1.9 -> 1.9.1 > ------ > A PR for this proposal should be available shortly for review. -- This message was sent by Atlassian Jira (v8.3.4#803005)