TOMEE-3965 - Update the Apache MyFaces and Apache DeltaSpike

[jrxxjr]

Update the Apache MyFaces to version 4.0.2, and update Apache DeltaSpike to version 2.0.0

[amckeown123]

Hello Richard I have been following this project on GITHUB for some time and have downloaded the source and been compiling it to test it out. But what I have noticed is the dependencies tend to be years out of date. For instance the commons dependencies all seem to predate the org.apache.commons project. I myself have gone into the POM files on my own computer and changed them to the org.apache.commons project and point to the latest release that is available for the JDK for the particular project. So far I have not experienced any need to modify the java source that is in your repository on GITHUB. So my main question that I have is why has no one considered upgrading the dependencies that are years out of date? I know there is some logical explanation but it escapes me. Andrew McKeown

…

On Tue, Jul 2, 2024 at 5:36 AM Richard Zowalla ***@***.***> wrote: Merged #1218 <#1218> into main. — Reply to this email directly, view it on GitHub <#1218 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BCLGB6VEF5QVDEYAAYKHRB3ZKJYBLAVCNFSM6AAAAABKEQEQRWVHI2DSMVQWIX3LMV45UABCJFZXG5LFIV3GK3TUJZXXI2LGNFRWC5DJN5XDWMJTGM3DEOJZGE4TKOI> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[rzo1]

@amckeown123 I think the explanation can be found indirectly in this list thread: https://lists.apache.org/thread/hszo5gf4f88wnho137294cn3vbnffjtl - limited time and volunteer activity results in fewer resources working on updating things in the docs or examples section. A lot of the current examples depend on old libraries and may not even work when run on a modern TomEE (which you won't find because some examples tend not to have unit tests). In a perfect world we would have a lot of time to work on TomEE, but the reason is that most people work on TomEE in their spare time, and updating versions, checking the CI status after an update, debugging issues introduced by a minor version bump (toggling unit or TCK tests) is really time consuming. Since we're currently short of resources, having the most up-to-date dependencies is not a top priority. The good thing is that since TomEE 10 is now on a Java 17 baseline, we can upgrade some things that weren't possible before (due to Java 8 / Java 11 constraints). To cut a long story short: If you feel you have some time and resources to contribute, feel free to join our mailing list and/or start providing small PRs with related updates. We will be happy to trigger CI runs for you.