struts STRUTS_6_11_0

What’s Changed

• Prepare for a new development cycle of Struts 6.11.0 by @lukaszlenart in https://github.com/apache/struts/pull/1739
• WW-5630 - Performance Issue SecurityMemberAccess (#1721) - Cherrypick to 6.x.x by @brianandle in https://github.com/apache/struts/pull/1736
• WW-5630 Streamline ConfigParseUtilTest and convert to JUnit 4 (6.x) by @lukaszlenart in https://github.com/apache/struts/pull/1741
• build(deps): WW-5648 bump jackson.version from 2.21.4 to 2.22.0 by @dependabot[bot] in https://github.com/apache/struts/pull/1746
• build(deps-dev): WW-5649 bump commons-logging:commons-logging from 1.3.6 to 1.4.0 by @dependabot[bot] in https://github.com/apache/struts/pull/1763
• WW-5666 Apply input length limits consistently when reading request bodies (6.x) by @lukaszlenart in https://github.com/apache/struts/pull/1822
• WW-5668 Make the localized-text provider caches size-bounded and align request-locale resolution (6.x) by @lukaszlenart in https://github.com/apache/struts/pull/1823

Dependencies

• build(deps): bump maven-surefire-plugin.version from 3.5.5 to 3.5.6 by @dependabot[bot] in https://github.com/apache/struts/pull/1748
• build(deps-dev): bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by @dependabot[bot] in https://github.com/apache/struts/pull/1750
• build(deps): bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 by @dependabot[bot] in https://github.com/apache/struts/pull/1754
• build(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6 by @dependabot[bot] in https://github.com/apache/struts/pull/1764
• build(deps): bump log4j2.version from 2.26.0 to 2.26.1 by @dependabot[bot] in https://github.com/apache/struts/pull/1772
• build(deps): bump jackson.version from 2.22.0 to 2.22.1 by @dependabot[bot] in https://github.com/apache/struts/pull/1790

Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_10_0…STRUTS_6_11_0

---

Source apache/struts · STRUTS_6_11_0 · 2026-08-01 · upstream release

Mirrored verbatim for indexing. All rights belong to the upstream project.