search

jhipster / generator-jhipster

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures.
https://www.jhipster.tech
Apache License 2.0
21.53k stars 4.02k forks source link

Release 8.3.0 with vulnerabilities fixed in Spring Boot 3.2.4 #25717

Closed mraible closed 6 months ago

mraible commented 6 months ago
Overview of the issue

I upgraded my jhipster8-demo project to 8.2.1 and added it to Snyk to scan for vulnerabilities. It found several in Spring Boot 3.2.3.

Screenshot 2024-04-02 at 1 48 54 PM
Motivation for or Use Case

If we have security vulnerabilities in our last release that are fixed, we should do a new release with the fixes.

Reproduce the error

Let me know if you'd like an invite link to my Snyk project.

Suggest a Fix
Screenshot 2024-04-02 at 1 50 06 PM
JHipster Version(s)

8.2.1

mshima commented 6 months ago

Next release should be 8.3.0. There are big changes in dependency management.

mraible commented 6 months ago

OK, I updated the title to be 8.3.0.

@mshima @DanielFran @qmonmert Are there any issues that should be fixed before the release? I'd like to do it this weekend or Monday at the latest.

qmonmert commented 6 months ago

@mraible nothing for me

DanielFran commented 6 months ago

OK, I updated the title to be 8.3.0.

@mshima @DanielFran @qmonmert Are there any issues that should be fixed before the release? I'd like to do it this weekend or Monday at the latest.

Nothing on my side

mshima commented 6 months ago

No blocker.

mraible commented 6 months ago

I proposed a vote on the mailing list: https://groups.google.com/g/jhipster-dev/c/9cw8FsVd-ck

I think we should also update our upgrade guide to mention the migrate blueprint. I was able to upgrade my 21-Points Health application to 7.9.4 and 8.2.1 using this blueprint, so I'm happy to review a PR or create one myself.

mraible commented 6 months ago

Here's a PR for the upgrade guide: https://github.com/jhipster/jhipster.github.io/pull/1341.