You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openwebbeans.apache.org by "Romain Manni-Bucau (Jira)" <ji...@apache.org> on 2024/02/27 20:28:00 UTC

[jira] [Commented] (MEECROWAVE-337) Migrate javax to jakarta

    [ https://issues.apache.org/jira/browse/MEECROWAVE-337?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17821404#comment-17821404 ] 

Romain Manni-Bucau commented on MEECROWAVE-337:
-----------------------------------------------

Hi [~shaikezam] ,
 # I guess we upgrade transitive deps in project forcing the versions so we don't release meecrowave that often but there is no real blocker to do it
 # We had the jakarta bundle ([https://repo1.maven.org/maven2/org/apache/meecrowave/meecrowave-core/1.2.15/meecrowave-core-1.2.15-jakarta.jar)] which was covering it until the full stack migrates to jakarta, now openwebbeans, tomcat and cxf migrated and some years passed we can likely do it
 # probably check 1. which enables to be CVE free with last release

feel free to do a PR to work on 2 if you are interested?

> Migrate javax to jakarta
> ------------------------
>
>                 Key: MEECROWAVE-337
>                 URL: https://issues.apache.org/jira/browse/MEECROWAVE-337
>             Project: Meecrowave
>          Issue Type: Wish
>            Reporter: Shai Zambrovski
>            Priority: Major
>
> Hi
> 1st of all, I just want to say thanks for this great framework.
> There is a plan to:
> 1. Continue release newer versions? The last in maven repo was released on Jan 23
> 2. Any plan to migrate javax to jakarta namespace? It does doing some headache in our products.
> 3. Fix CVEs in the latest versions
> Thanks,
> Shai



--
This message was sent by Atlassian Jira
(v8.20.10#820010)