Well. From the spec and the actual method validation APIs PoV, you are selecting Default.class as the validated group except that this group is converted to Update for that specific parameter myBean.
You don't see the call to method validation but that's what Spring, CDI or any other interception tech does.