conjurdemos / pet-store-demo

Tiny pet store app suitable for use in demos, tutorials, and POCs
Apache License 2.0
4 stars 24 forks source link

Update Spring Boot to 2.5.3 to address multiple high & critical security issues #37

Closed andytinkham closed 3 years ago

andytinkham commented 3 years ago

This PR addresses ~60 issues that privy was flagging in the build process. Addressing those issues required updating Spring Framework from the 1.5.10 version we were using up to 2.5.3. That required a code change - findOne became findById and needed an "OrElseThrow()" method call. I also had to add an explicit dependency since the javax.validators.* are no longer implicitly included in the Spring web starter. This PR should probably be squashed and merged.