struts

struts copied to clipboard

Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.11 to 0.8.12. Release notes Sourced from org.jacoco:jacoco-maven-plugin's releases. 0.8.12 New Features JaCoCo now officially supports Java 22 (GitHub #1596). Experimental support for Java 23 class files...

dependabot[bot]

Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method

1

According to the documentation at https://struts.apache.org/core-developers/constant-configuration it should be possible to use both system and environment variables in the constants section. Currently environment variables are ignored if a default value...

stefansielaff

Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.2.5 to 3.3.0. Release notes Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases. 3.3.0 Release Notes - Maven Surefire - Version 3.3.0 What's Changed Bump org.htmlunit:htmlunit from 3.9.0 to 3.10.0 by...

dependabot[bot]

Bumps org.apache.tomcat:tomcat-juli from 8.5.53 to 10.1.25. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps `spring.platformVersion` from 5.3.31 to 6.1.10. Updates `org.springframework:spring-core` from 5.3.31 to 6.1.10 Release notes Sourced from org.springframework:spring-core's releases. v6.1.10 :star: New Features Defensive PersistenceExceptionTranslator bean retrieval in PersistenceExceptionTranslationInterceptor on shutdown...

dependabot[bot]

Bumps [org.easymock:easymock](https://github.com/easymock/easymock) from 5.2.0 to 5.3.0. Release notes Sourced from org.easymock:easymock's releases. 5.3.0 Add support for Java 22. Stop shading ByteBuddy and ASM to help support of new versions. Change...

dependabot[bot]

Bumps org.apache.tomcat:tomcat-api from 8.5.53 to 10.1.25. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set

3

WW-5428 -- The OGNL allowlist capability cannot resolve proxy objects and thus will not work in applications where proxy objects such as Spring beans and Hibernate entities are accessed via...

kusalk

WW-3714 Deprecate and repackage common APIs part 6

1

WW-3714 -- This PR deprecates and provides repackaged replacements for the following APIs, ahead of their permanent migration in Struts 7.0: - `com.opensymphony.xwork2.interceptor.AliasInterceptor` - `com.opensymphony.xwork2.interceptor.ChainingInterceptor` - `com.opensymphony.xwork2.interceptor.ConversionErrorInterceptor` - `com.opensymphony.xwork2.interceptor.DefaultWorkflowInterceptor` -...

kusalk

WW-3714 Deprecate and repackage common APIs part 5

1

WW-3714 -- This PR deprecates and provides repackaged replacements for the following APIs, ahead of their permanent migration in Struts 7.0: - `com.opensymphony.xwork2.ActionSupport` - `com.opensymphony.xwork2.interceptor.AbstractInterceptor` - `com.opensymphony.xwork2.interceptor.MethodFilterInterceptor` - `com.opensymphony.xwork2.interceptor.MethodFilterInterceptorUtil` I've...

kusalk