Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[AAE-16572] - upgrade spring-boot to 3.1.3 and spring-cloud to 2022.0.4 to fix vulnerability in spring-kafka 3.0.8 #1205

Conversation

jsokolowskii
Copy link
Contributor

@jsokolowskii jsokolowskii commented Sep 18, 2023

Activiti/Activiti#4427
By bumping spring-boot and spring-cloud we bump also spring-kafka vulnerable version (3.0.8) to a fixed one (3.0.10).

@CLAassistant
Copy link

CLAassistant commented Sep 18, 2023

CLA assistant check
All committers have signed the CLA.

…ng-boot to 3.1.3 and spring-cloud to 2022.0.4
@jsokolowskii jsokolowskii force-pushed the AAE-16572-upgrade-spring-boot-and-cloud-dev-jsokolowski-preview branch from 267b9cd to e99cef6 Compare September 19, 2023 06:52
@sonarcloud
Copy link

sonarcloud bot commented Sep 19, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@@ -87,10 +87,5 @@
<artifactId>mockito-core</artifactId>
<scope>test</scope>
</dependency>
<dependency>
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

mockito-inline is now part of mockito-core

@jsokolowskii
Copy link
Contributor Author

@jsokolowskii jsokolowskii marked this pull request as ready for review September 19, 2023 09:16
Copy link
Contributor

@matteo4diani matteo4diani left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍🏼

@matteo4diani matteo4diani merged commit 974fcc7 into develop Sep 20, 2023
19 checks passed
@matteo4diani matteo4diani deleted the AAE-16572-upgrade-spring-boot-and-cloud-dev-jsokolowski-preview branch September 20, 2023 08:55
wojciech-piotrowiak pushed a commit that referenced this pull request Dec 14, 2023
….4 to fix vulnerability in spring-kafka 3.0.8 (#1205)

* AAE-16572 - fix vulnerability in spring-kafka 3.0.8 by upgrading spring-boot to 3.1.3 and spring-cloud to 2022.0.4

* AAE-16572 - remove deprecated mockito-inline
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants