(axis-axis2-java-rampart) 08/10: RAMPART-454 Refresh stale POM comment about OpenSAML xacml-saml pin

[ro...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

robertlazarski pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/axis-axis2-java-rampart.git

commit d24a319834993d4460e43fff5add37a3c3f126ca
Author: Robert Lazarski <ro...@gmail.com>
AuthorDate: Mon Apr 13 05:55:06 2026 -1000

    RAMPART-454 Refresh stale POM comment about OpenSAML xacml-saml pin
    
    The "Override stale 4.x transitive deps pulled by WSS4J 3.0.3" comment
    predates both upgrades: we're on WSS4J 4.0.1 and OpenSAML 5.2.1 now.
    Reword it to describe what the block actually does -- keep the xacml-saml
    api/impl artifacts pinned to ${opensaml.version} so the whole OpenSAML
    5.x set stays in lockstep regardless of what a transitive dependency
    prefers.
---
 pom.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 5d3fe236..d1d8eed1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -557,7 +557,8 @@
                 <artifactId>opensaml-core-impl</artifactId>
                 <version>${opensaml.version}</version>
             </dependency>
-            <!-- Override stale 4.x transitive deps pulled by WSS4J 3.0.3 -->
+            <!-- Pin the OpenSAML xacml-saml artifacts to the same version
+                 as the rest of the OpenSAML 5.x set. -->
             <dependency>
                 <groupId>org.opensaml</groupId>
                 <artifactId>opensaml-xacml-saml-impl</artifactId>