Re: upgrade to struts 2.5.12 + commons-lang3

2017-07-14 Thread Stefaan Dutry
Ɓukasz, That will probably work. What happens when a dependency gets updated multiple times in a release? Will it be listed multiple times (since it shows all issues with that type)? My reasoning was: * When you need to do a quick upgrade due to a fixed vulnerability you just want a quick checkl

Re: upgrade to struts 2.5.12 + commons-lang3

2017-07-14 Thread Lukasz Lenart
2017-07-14 9:04 GMT+02:00 Stefaan Dutry : > What happens when a dependency gets updated multiple times in a > release? Will it be listed multiple times (since it shows all issues > with that type)? It will allow me (or anybody other) quickly figure out the duplication and I can just leave info abo

Re: upgrade to struts 2.5.12 + commons-lang3

2017-07-14 Thread Stefaan Dutry
> To sum up: only the latest version of a dependency will be listed in > the version notes Great. > but in this case (if the vulnerability can have large impact) we are > preparing a fast track release (e.g. 2.5.10.1) - in this case the list > of changes is none or very minimal True, those chang

Re: Documentation

2017-07-14 Thread Ken McWilliams
That page looks pretty good, it is quite clear and well formatted. And covers an exceptional range from hello-world with view only action, all the way to overrides at the end. Two very small errors: 1) A line which reads: The Convention Plugin will pre-configure all of you action classes when Stru