Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate to Spring Boot 3.3.0 #836

Merged
merged 1 commit into from
Jun 19, 2024
Merged

Migrate to Spring Boot 3.3.0 #836

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions gradle.properties
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -286,11 +286,11 @@ slf4jLog4jApiVersion=2.0.12
# This is a dependency for HTSJDK. Force version for CVE-2023-43642
snappyJavaVersion=1.1.10.5

springBootVersion=3.2.6
springBootVersion=3.3.0
# This usually matches the Tomcat version dictated by springBootVersion
# Also, keep this in sync with apacheTomcatVersion above
springBootTomcatVersion=10.1.24

# This usually matches the Spring Framework version dictated by springBootVersion
springVersion=6.1.8

sqliteJdbcVersion=3.46.0.0
Expand Down
7 changes: 4 additions & 3 deletions server/embedded/build.gradle
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,14 +40,15 @@ dependencies {
implementation "org.springframework.boot:spring-boot-starter-web:${springBootVersion}"
implementation "org.springframework.boot:spring-boot-starter-actuator:${springBootVersion}"
implementation "org.springframework.boot:spring-boot-starter-validation:${springBootVersion}"
// implementation "org.springframework.boot:spring-boot-starter-log4j2:${springBootVersion}"
// Force to use latest springVersion for CVE-2024-22262

// Allows forcing a Spring Framework version that differs from spring-boot's version (e.g., to address CVEs)
implementation('org.springframework:spring-web') {
version {
strictly "${springVersion}"
}
}
// Force to the latest Tomcat version until Spring Boot 2.7.17 is released and we can adopt it

// Allows forcing a Tomcat version that differs from spring-boot's version (e.g., to address CVEs or test a release candidate)
implementation('org.apache.tomcat.embed:tomcat-embed-core') {
version {
strictly "${springBootTomcatVersion}"
Expand Down