[ https://issues.apache.org/jira/browse/WW-5532?focusedWorklogId=958595&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-958595 ]
ASF GitHub Bot logged work on WW-5532: -------------------------------------- Author: ASF GitHub Bot Created on: 25/Feb/25 01:33 Start Date: 25/Feb/25 01:33 Worklog Time Spent: 10m Work Description: sonarqubecloud[bot] commented on PR #1232: URL: https://github.com/apache/struts/pull/1232#issuecomment-2680134015 ## [](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1232) **Quality Gate failed** Failed conditions  [7 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache_struts&pullRequest=1232&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true)  [71.3% Coverage on New Code](https://sonarcloud.io/component_measures?id=apache_struts&pullRequest=1232&metric=new_coverage&view=list) (required ≥ 80%)  [E Security Rating on New Code](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1232) (required ≥ A)  [C Reliability Rating on New Code](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1232) (required ≥ A) [See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1232) ##  Catch issues before they fail your Quality Gate with our IDE extension  [SonarQube for IDE](https://www.sonarsource.com/products/sonarlint/features/connected-mode/?referrer=pull-request) Issue Time Tracking ------------------- Worklog Id: (was: 958595) Time Spent: 1h 10m (was: 1h) > Upgrade and align various dependencies > -------------------------------------- > > Key: WW-5532 > URL: https://issues.apache.org/jira/browse/WW-5532 > Project: Struts 2 > Issue Type: Improvement > Components: Core > Affects Versions: 7.0.3 > Reporter: Kusal Kithul-Godage > Priority: Minor > Fix For: 7.1.0 > > Time Spent: 1h 10m > Remaining Estimate: 0h > > Dependencies: > * Spring: {{6.0.13}} -> {{6.2.3}} > * Hibernate-Validator: {{8.0.1.Final}} -> {{8.0.2.Final}} > Adopt BOMs: > * {{jakarta.platform:jakarta.jakartaee-bom}} > * {{org.springframework:spring-framework-bom}} > * {{org.apache.logging.log4j:log4j-bom}} > * {{com.fasterxml.jackson:jackson-bom}} > Test dependencies: > * ByteBuddy: {{1.16.1}} -> {{1.17.1}} > * Mockito: {{5.8.0}} -> {{5.15.2}} > * AssertJ: {{3.26.3}} -> {{3.27.3}} > * TestNG: {{7.5.1}} -> {{7.11.0}} > Remove or minimise usages of test dependencies: > * {{org.springframework:spring-test:4.3.0.RELEASE}} -> > {{com.github.h-thurow:simple-jndi}} > * EasyMock > * Mockobjects -- This message was sent by Atlassian Jira (v8.20.10#820010)