[
https://issues.apache.org/jira/browse/WW-5750?focusedWorklogId=1045320&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1045320
]
ASF GitHub Bot logged work on WW-5750:
--------------------------------------
Author: ASF GitHub Bot
Created on: 02/Oct/26 06:03
Start Date: 02/Oct/26 06:03
Worklog Time Spent: 10m
Work Description: lukaszlenart commented on PR #1970:
URL: https://github.com/apache/struts/pull/1970#issuecomment-5946462145
Closing — the Hibernate proxy break starts at 6.x, not 7.x: all five `Build
and Test` jobs fail on `classInclusion_hibernateProxy_allowProxyObjectAccess`
in `SecurityMemberAccessTest` and `ExternalSecurityMemberAccessTest`
(`IllegalArgumentException: object is not an instance of declaring class`), the
same failure as the 7.x bump in #1905. Moving off Hibernate 5.6 needs
`ProxyUtil` / `StrutsProxyService` work, which is folded into the 8.0.0
Hibernate upgrade tracked as
[WW-5722](https://issues.apache.org/jira/browse/WW-5722).
@dependabot ignore this major version
Issue Time Tracking
-------------------
Worklog Id: (was: 1045320)
Time Spent: 0.5h (was: 20m)
> Bump org.hibernate:hibernate-core from 5.6.15.Final to 6.6.58.Final
> -------------------------------------------------------------------
>
> Key: WW-5750
> URL: https://issues.apache.org/jira/browse/WW-5750
> Project: Struts 2
> Issue Type: Dependency
> Components: Core
> Reporter: Lukasz Lenart
> Priority: Trivial
> Fix For: 7.5.0
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> Bump org.hibernate:hibernate-core from 5.6.15.Final to 6.6.58.Final
> The dependency is optional in struts2-core and used only to recognise
> Hibernate proxies in ProxyUtil and StrutsProxyService. Hibernate 6.6 keeps
> the two API points those classes use (HibernateProxy, Hibernate.unproxy)
> unchanged. The one adjustment is in a test fixture: Hibernate.unproxy now
> goes through the default method HibernateProxy.asHibernateProxy(), which the
> JDK dynamic proxy in SecurityMemberAccessTest must dispatch to its default
> implementation instead of forwarding to the target object.
> Supersedes Dependabot PR #1953, which fails only on that test.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
