You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@struts.apache.org by "Lukasz Lenart (Jira)" <ji...@apache.org> on 2026/09/23 04:15:00 UTC

[jira] [Updated] (WW-5750) Bump org.hibernate:hibernate-core from 5.6.15.Final to 6.6.58.Final

     [ https://issues.apache.org/jira/browse/WW-5750?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Lukasz Lenart updated WW-5750:
------------------------------
    Description: 
Bump org.hibernate:hibernate-core from 5.6.15.Final to 6.6.58.Final

The dependency is optional in struts2-core and used only to recognise Hibernate proxies in ProxyUtil and StrutsProxyService. Hibernate 6.6 keeps the two API points those classes use (HibernateProxy, Hibernate.unproxy) unchanged. The one adjustment is in a test fixture: Hibernate.unproxy now goes through the default method HibernateProxy.asHibernateProxy(), which the JDK dynamic proxy in SecurityMemberAccessTest must dispatch to its default implementation instead of forwarding to the target object.

Supersedes Dependabot PR #1953, which fails only on that test.

  was:
Bump org.hibernate:hibernate-core from 5.6.15.Final to 6.6.57.Final

The dependency is optional in struts2-core and used only to recognise Hibernate proxies in ProxyUtil and StrutsProxyService. Hibernate 6.6 keeps the two API points those classes use (HibernateProxy, Hibernate.unproxy) unchanged. The one adjustment is in a test fixture: Hibernate.unproxy now goes through the default method HibernateProxy.asHibernateProxy(), which the JDK dynamic proxy in SecurityMemberAccessTest must dispatch to its default implementation instead of forwarding to the target object.

Supersedes Dependabot PR #1953, which fails only on that test.


> Bump org.hibernate:hibernate-core from 5.6.15.Final to 6.6.58.Final
> -------------------------------------------------------------------
>
>                 Key: WW-5750
>                 URL: https://issues.apache.org/jira/browse/WW-5750
>             Project: Struts 2
>          Issue Type: Dependency
>          Components: Core
>            Reporter: Lukasz Lenart
>            Priority: Trivial
>             Fix For: 7.5.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> Bump org.hibernate:hibernate-core from 5.6.15.Final to 6.6.58.Final
> The dependency is optional in struts2-core and used only to recognise Hibernate proxies in ProxyUtil and StrutsProxyService. Hibernate 6.6 keeps the two API points those classes use (HibernateProxy, Hibernate.unproxy) unchanged. The one adjustment is in a test fixture: Hibernate.unproxy now goes through the default method HibernateProxy.asHibernateProxy(), which the JDK dynamic proxy in SecurityMemberAccessTest must dispatch to its default implementation instead of forwarding to the target object.
> Supersedes Dependabot PR #1953, which fails only on that test.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)