[ 
https://issues.apache.org/jira/browse/WW-5837?focusedWorklogId=1052348&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1052348
 ]

ASF GitHub Bot logged work on WW-5837:
--------------------------------------

                Author: ASF GitHub Bot
            Created on: 04/Nov/26 06:38
            Start Date: 04/Nov/26 06:38
    Worklog Time Spent: 10m 
      Work Description: lukaszlenart opened a new pull request, #2107:
URL: https://github.com/apache/struts/pull/2107

   Fixes [WW-5837](https://issues.apache.org/jira/browse/WW-5837)
   
   Bumps `ognl:ognl` from 3.4.16 to 3.4.17. Supersedes #2103.
   
   OGNL 3.4.17 matches property names exactly in `OgnlRuntime.getReadMethod` / 
`getWriteMethod`. A mis-cased name no longer resolves to an accessor spelled 
differently. 
`OgnlSetPossiblePropertyTest.testWriteMethodValueDontAssignWhenWriteMethodIsNotAccessible`
 asserted the old case-insensitive answer (`setexcludedfieldstring` for 
`excludedFieldString`) and failed with an NPE on #2103. It now expects no write 
method; the assertion that the value stays unassigned is unchanged.
   
   Core tests pass locally against 3.4.17 (4752 run, 0 failures).
   
   🤖 Generated with [Claude Code](https://claude.com/claude-code)




Issue Time Tracking
-------------------

            Worklog Id:     (was: 1052348)
    Remaining Estimate: 0h
            Time Spent: 10m

> Upgrade OGNL to version 3.4.17
> ------------------------------
>
>                 Key: WW-5837
>                 URL: https://issues.apache.org/jira/browse/WW-5837
>             Project: Struts 2
>          Issue Type: Dependency
>          Components: Core
>            Reporter: Lukasz Lenart
>            Assignee: Lukasz Lenart
>            Priority: Major
>             Fix For: 7.5.0
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Bump {{ognl:ognl}} from 3.4.16 to 3.4.17.
> OGNL 3.4.17 matches property names exactly in {{OgnlRuntime.getReadMethod}} / 
> {{getWriteMethod}}; a mis-cased name no longer resolves to an accessor of a 
> different spelling. One test fixture in {{OgnlSetPossiblePropertyTest}} 
> relied on the case-insensitive lookup and needs updating alongside the bump.
> Supersedes Dependabot PR [#2103|https://github.com/apache/struts/pull/2103].



--
This message was sent by Atlassian Jira
(v10.3.26#10030026)

Reply via email to