On Tue, May 24, 2022 at 2:10 PM Romain Manni-Bucau <rmannibu...@gmail.com> wrote: > > Hi, > > Since Tomcat enhanced InstanceManager I guess we can upgrade and decrease a > lot the hacks/reflection we used by the past. > Only open point on my side is: is it worth having a tomcat integration? I > know very few users of that but generally speaking the web integration is > really sufficient so do we want to keep it or let tomcat handle it - > https://github.com/apache/tomcat/tree/main/modules/owb?
No problem, I'll keep on doing it (just in case someone comes along wanting something that depends on cdi). For sure you should immediately remove any code that depends on or supports Tomcat 7. Rémy > Romain Manni-Bucau > @rmannibucau <https://twitter.com/rmannibucau> | Blog > <https://rmannibucau.metawerx.net/> | Old Blog > <http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> | > LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book > <https://www.packtpub.com/application-development/java-ee-8-high-performance> > > > Le mar. 24 mai 2022 à 13:09, Jean-Louis Monteiro <jlmonte...@tomitribe.com> > a écrit : > > > Hi, > > > > I was doing some dependency updates on OpenWebBeans and wanted to do a > > release and I noticed we still have Tomcat 7.x in OWB. > > > > Shouldn't we try to move to the latest javax compatible version (aka 9.x)? > > Tomcat 7.x is EOL and has many CVEs. > > > > What do you think? > > -- > > Jean-Louis Monteiro > > http://twitter.com/jlouismonteiro > > http://www.tomitribe.com > >
