I'm sorry for duplicate mails. Microsoft's outlook services was down yesterday! while I thought there is a problem with me :)
Bruce, I had experience with migrating from 2.3 to 2.5. Its time commitment is not high. I did a few small steps manually but for rest, I could do them by a regular expression enabled replace. Then I tested converted one against our JMeter functional tests and all of them passed. The only thing that I saw a few users complain, is when they want to access something which is excluded in new version due to security fixes. If any, then we can help you here. Sincerely Yours, Yasser. On 9/18/2017 8:21 PM, Yasser Zamani wrote: > > > On 9/18/2017 7:35 PM, Phillips, Bruce A wrote: >> We still have a couple of web apps that are using Struts version 2.3.32 >> >> We want to update those web apps to the latest version of Struts but >> I’m not sure what version to update to. >> >> I see a 2.5.13 and a 2.3.34 – both tags seem to be recently created. >> >> Should I update to 2.5.13 or should I stay on the 2.3.X line? >> >> Why are there different production tags (2.5.X and 2.3.X) ? >> > > Because The 2.5.x series introduced some breaking changes, so the > development is now branching, as 2.3.x is still supported. Basically we > backport some security fixes to 2.3.x without breaking things. > > So you can update to 2.3.34 without any needed change but you will not > get any further bug fixes but only security fixes. But if you update to > 2.5.13, then you need to do a few migration steps at [1], and then you > will get future both security and bug fixes. > > I recommend updating to 2.5.13 as I already test [1] on our app and all > of our JMeter functional tests pass in it also. > > Hope this helps. > > [1] https://struts.apache.org/docs/struts-23-to-25-migration.html > >> Thank You, >> >> Bruce Phillips >>
