[
https://issues.apache.org/jira/browse/WW-5532?focusedWorklogId=958595&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-958595
]
ASF GitHub Bot logged work on WW-5532:
--------------------------------------
Author: ASF GitHub Bot
Created on: 25/Feb/25 01:33
Start Date: 25/Feb/25 01:33
Worklog Time Spent: 10m
Work Description: sonarqubecloud[bot] commented on PR #1232:
URL: https://github.com/apache/struts/pull/1232#issuecomment-2680134015
## [](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1232)
**Quality Gate failed**
Failed conditions
 [7 Security
Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache_struts&pullRequest=1232&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true)
 [71.3% Coverage on New
Code](https://sonarcloud.io/component_measures?id=apache_struts&pullRequest=1232&metric=new_coverage&view=list)
(required ≥ 80%)
 [E Security Rating on New
Code](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1232)
(required ≥ A)
 [C Reliability Rating on New
Code](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1232)
(required ≥ A)
[See analysis details on SonarQube
Cloud](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1232)
##
 Catch issues before they fail your Quality Gate with our IDE extension
 [SonarQube for
IDE](https://www.sonarsource.com/products/sonarlint/features/connected-mode/?referrer=pull-request)
Issue Time Tracking
-------------------
Worklog Id: (was: 958595)
Time Spent: 1h 10m (was: 1h)
> Upgrade and align various dependencies
> --------------------------------------
>
> Key: WW-5532
> URL: https://issues.apache.org/jira/browse/WW-5532
> Project: Struts 2
> Issue Type: Improvement
> Components: Core
> Affects Versions: 7.0.3
> Reporter: Kusal Kithul-Godage
> Priority: Minor
> Fix For: 7.1.0
>
> Time Spent: 1h 10m
> Remaining Estimate: 0h
>
> Dependencies:
> * Spring: {{6.0.13}} -> {{6.2.3}}
> * Hibernate-Validator: {{8.0.1.Final}} -> {{8.0.2.Final}}
> Adopt BOMs:
> * {{jakarta.platform:jakarta.jakartaee-bom}}
> * {{org.springframework:spring-framework-bom}}
> * {{org.apache.logging.log4j:log4j-bom}}
> * {{com.fasterxml.jackson:jackson-bom}}
> Test dependencies:
> * ByteBuddy: {{1.16.1}} -> {{1.17.1}}
> * Mockito: {{5.8.0}} -> {{5.15.2}}
> * AssertJ: {{3.26.3}} -> {{3.27.3}}
> * TestNG: {{7.5.1}} -> {{7.11.0}}
> Remove or minimise usages of test dependencies:
> * {{org.springframework:spring-test:4.3.0.RELEASE}} ->
> {{com.github.h-thurow:simple-jndi}}
> * EasyMock
> * Mockobjects
--
This message was sent by Atlassian Jira
(v8.20.10#820010)