search

MarcGiffing / wicket-spring-boot

Spring Boot starter for Apache Wicket
151 stars 61 forks source link

upgrade project to spring boot 2.6.2 #187

Closed saraminto closed 1 year ago

saraminto commented 2 years ago

older versions of spring boot (up to 2.6.2) have a dependency on vulnerable log4j2 library version, but after the release of 2.6.2 spring boot updated its dependency of log4j2 dependency to 2.17.0 version. Could you, please, upgrade wicket-spring-boot version to use spring boot dependency 2.6.2?

mskopp commented 2 years ago

Let's go to spring boot 2.6.3 - I have a gradle wicket-spring-boot 3.1.6 project already running with 2.6.3 (2.6.1 overwritten by gradle config) nicely.

build.gradle simply starts like this:

plugins {
    id 'org.springframework.boot' version '2.6.3'
    ..
mskopp commented 2 years ago

Update: meanwhile the 3.1.5 release works nicely here in one project with spring boot 2.6.6 and also with Wicket 9.9.0

id 'org.springframework.boot' version '2.6.6'