struts STRUTS_6_8_0

What’s Changed

• WW-5544 Marks ReflectionContextFactory as deprecated and uses ActionContext instead by @lukaszlenart in https://github.com/apache/struts/pull/1254
• WW-5546 Fixes NPE when uploaded file is empty by @lukaszlenart in https://github.com/apache/struts/pull/1262
• Cleans up all uploaded files by @lukaszlenart in https://github.com/apache/struts/pull/1306
• WW-5524 Fixup StrutsConverterFactory - Struts 6 by @lukaszlenart in https://github.com/apache/struts/pull/1316
• WW-5511 Removes deprecated addCspHeaders method by @lukaszlenart in https://github.com/apache/struts/pull/1317
• WW-5564 Upgrades commons-fileupload to version 1.6.0 by @lukaszlenart in https://github.com/apache/struts/pull/1328
• WW-5567 Bump log4j2.version from 2.24.1 to 2.25.1 by @dependabot[bot] in https://github.com/apache/struts/pull/1330 https://github.com/apache/struts/pull/1337
• WW-5568 Bump jackson.version from 2.18.0 to 2.20.0 by @dependabot[bot] in https://github.com/apache/struts/pull/1334
• WW-5570 Bump org.apache.commons:commons-collections4 from 4.4 to 4.5.0 by @dependabot[bot] in https://github.com/apache/struts/pull/1342
• WW-5571 Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 by @dependabot[bot] in https://github.com/apache/struts/pull/1344
• WW-5504 Allows to use request instead of session attribute to store nonce by @lukaszlenart in https://github.com/apache/struts/pull/1174

Dependencies

• Bump slf4j.version from 2.0.16 to 2.0.17 by @dependabot[bot] in https://github.com/apache/struts/pull/1335
• Bump org.apache.maven.plugins:maven-wrapper-plugin from 3.3.2 to 3.3.3 by @dependabot[bot] in
• Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.7.0 to 3.9.0 by @dependabot[bot] in https://github.com/apache/struts/pull/1343
• Bump org.assertj:assertj-core from 3.26.3 to 3.27.4 by @dependabot[bot] in https://github.com/apache/struts/pull/1345

Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_7_4…STRUTS_6_8_0

---

Source apache/struts · STRUTS_6_8_0 · 2025-09-15 · upstream release

Mirrored verbatim for indexing. All rights belong to the upstream project.