[
https://issues.apache.org/jira/browse/WW-5604?focusedWorklogId=1031326&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1031326
]
ASF GitHub Bot logged work on WW-5604:
--------------------------------------
Author: ASF GitHub Bot
Created on: 20/Jul/26 18:34
Start Date: 20/Jul/26 18:34
Worklog Time Spent: 10m
Work Description: lukaszlenart commented on code in PR #1796:
URL: https://github.com/apache/struts/pull/1796#discussion_r3616659258
##########
plugins/cdi/pom.xml:
##########
@@ -39,6 +39,13 @@
<scope>provided</scope>
</dependency>
+ <dependency>
+ <groupId>org.jboss.weld</groupId>
+ <artifactId>weld-api</artifactId>
+ <version>6.0.Final</version>
+ <scope>provided</scope>
+ </dependency>
Review Comment:
Thanks — this one doesn't apply. `weld-api` has its own version line,
independent of `weld-core`/`weld-se`: `org.jboss.weld:weld-api:6.0.4.Final`
does not exist (404 on Maven Central), and `weld-core-impl:6.0.4.Final` itself
depends on `weld-api:6.0.Final`. So there is no API/impl mismatch here —
`6.0.Final` *is* the matching API version for Weld 6.0.4.Final, and aligning it
to `${weld.version}` would pin a nonexistent artifact.
To make that intent explicit, this has since been moved to a documented
`<weld-api.version>` property noting it is deliberately distinct from
`${weld.version}`.
Issue Time Tracking
-------------------
Worklog Id: (was: 1031326)
Time Spent: 1h 10m (was: 1h)
> CDI proxies won't be recognized as proxy in SecurityMemberAccess
> ----------------------------------------------------------------
>
> Key: WW-5604
> URL: https://issues.apache.org/jira/browse/WW-5604
> Project: Struts 2
> Issue Type: Bug
> Components: Plugin - CDI
> Affects Versions: 7.1.1
> Reporter: [email protected]
> Assignee: Lukasz Lenart
> Priority: Major
> Fix For: 7.3.0
>
> Time Spent: 1h 10m
> Remaining Estimate: 0h
>
> ProxyUtil should also handle CDI proxies or the cdi-plugin provides an
> extended SecurityMemberAccess which handles the proxies.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
