search

OHDSI / WebAPI

OHDSI WebAPI contains all OHDSI services that can be called from OHDSI applications
Apache License 2.0
128 stars 166 forks source link

Upgrade to Spring Boot 2.3 #2244

Open anthonysena opened 1 year ago

anthonysena commented 1 year ago

We're behind on many library dependencies in the stack so we'd like to move to Spring Boot 2.3 per @ecruz165.

ferris-hussein1 commented 1 year ago

Hi @anthonysena, do you know when we can anticipate this upgrade? I believe 1.5.22.RELEASE is vulnerable to spring4shell

anthonysena commented 1 year ago

I don't have a firm timeline at this point - our hope amongst the Atlas Working Group is to have this for the upcoming 2.14 release. There are a number of changes required to achieve this goal and @ecruz165 is leading the development to navigate the upgrade so I'll let him add his commentary.

anthonysena commented 1 year ago

@ecruz165 - just wanted to see what other items you had in mind for the Spring Boot 2.3 upgrade?

anthonysena commented 9 months ago

@ecruz165 - just wanted to follow up here and see if this is something you can plan to implement for the v2.15 release?

konstjar commented 8 months ago

Just a note: v2.3 is not supported anymore. The latest version is v3.2

Here are details: https://endoflife.date/spring-boot

ecruz165 commented 4 months ago

@konstjar I will free up to tackle this by June and expect to wrap up before the end of June.