Hi, Thanks for that response, very helpful. It's just sometimes our code may need to use a later version of a library that struts also uses, based on this, I think we will need to do a risk benefit analysis on such occasion.
Just curious though, according to this pom file http://repo1.maven.org/maven2/org/apache/struts/struts2-core/2.3.15.3/struts2-core-2.3.15.3.pom It doesn't specify which versions of libraries to use. For example ognl, wouldn't it use ognl-3.0.8 (the latest in http://mvnrepository.com/artifact/ognl/ognl), which is different from the bundled/included ognl-3.0.6 ? On Tue, Dec 3, 2013 at 8:14 PM, Lukasz Lenart <[email protected]>wrote: > If you want to use the latest libraries it is better to register a > JIRA ticket with request to update such. > > > Regards > -- > Łukasz > + 48 606 323 122 http://www.lenart.org.pl/ > > 2013/12/3 foo bar <[email protected]>: > > Hi all, > > > > I'm using the latest struts-2.3.15.3 on our web application. > > Is it fine to use the latest third party libraries other than what's > > included in the distribution (struts-2.3.15.3-lib.zip and > > struts-2.3.15.3-all.zip) ? > > > > For example > > Is it fine to use > > > > javassist-3.18.0-GA, > > commons-io-2.4, > > freemarker-2.3.20, > > commons-beanutils-1.8.3, > > commons-validator-1.4.0 > > > > rather than the included > > > > javassist-3.11.0.GA, > > commons-io-2.0.1, > > freemarker-2.3.19, > > commons-beanutils-1.8.0, > > commons-validator-1.3.1 > > > > I'm excluding libraries that are not simple drop-in replacements, like > > commons-collections4-4.0 is not a simple drop-in replacement for > > commons-collections-3.1. > > > > Basically I'm asking whether struts-2.3.15.3 is sort of "certified" to be > > working properly with the bundled libraries ? > > Is there a high degree of something breaking if I use the latest > libraries ? > > (Are the libraries there because developers haven't gotten the time to > > update them or because they are the versions that are known to be "rock > > solid" so I should stick with them ?) > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
