search

juananmora / accenture-springone

This is accenture-springone
0 stars 0 forks source link

Update dependency io.github.lognet:grpc-spring-boot-starter to v4 - autoclosed #4

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
io.github.lognet:grpc-spring-boot-starter compile major 3.5.1 -> 4.8.1

By merging this PR, the issue #3 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2022-1471
Critical Critical 9.8 CVE-2022-22965
High High 7.8 CVE-2022-27772
High High 7.7 WS-2021-0419
High High 7.5 CVE-2017-18640
High High 7.5 CVE-2020-11612
High High 7.5 CVE-2021-37136
High High 7.5 CVE-2021-37137
High High 7.5 CVE-2022-25647
High High 7.5 CVE-2022-25857
High High 7.5 CVE-2022-3171
High High 7.5 CVE-2022-3509
High High 7.5 CVE-2023-20883
High High 7.4 WS-2020-0408
Medium Medium 6.6 CVE-2021-42550
Medium Medium 6.6 CVE-2021-42550
Medium Medium 6.5 CVE-2021-43797
Medium Medium 6.5 CVE-2022-22950
Medium Medium 6.5 CVE-2022-38749
Medium Medium 6.5 CVE-2022-38751
Medium Medium 6.5 CVE-2022-38752
Medium Medium 6.5 CVE-2022-41854
Medium Medium 6.5 CVE-2023-20861
Medium Medium 6.5 CVE-2023-20863
Medium Medium 6.5 CVE-2023-34462
Medium Medium 5.9 CVE-2021-21295
Medium Medium 5.9 CVE-2021-21295
Medium Medium 5.9 CVE-2021-21409
Medium Medium 5.5 CVE-2021-21290
Medium Medium 5.5 CVE-2021-21290
Medium Medium 5.5 CVE-2021-22569
Medium Medium 5.5 CVE-2022-38750
Medium Medium 5.3 CVE-2022-22968
Medium Medium 5.3 CVE-2022-22970
Medium Medium 5.3 CVE-2022-22970
Medium Medium 4.3 CVE-2021-22060
Medium Medium 4.3 CVE-2021-22096
Low Low 3.3 CVE-2020-8908

Release Notes

LogNet/grpc-spring-boot-starter ### [`v4.8.1`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-481) #### :hammer: Dependency Upgrades - Upgrade Spring boot to 2.7.3 [#​307](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/307) - Upgrade grpc to 1.49 [#​305](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/305) ### [`v4.8.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-480) #### :star: New Features - Support multiple GRpcServerBuilderConfigurer beans [#​284](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/284) #### :hammer: Dependency Upgrades - Spring boot 2.7.x suppport [#​299](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/299) ### [`v4.7.1`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-471) #### :star: New Features - Security API enhancements [#​296](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/296) #### :lady_beetle: Bug Fixes - Class ConsulDiscoveryProperties is not found when accessing /configprops [#​295](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/295) #### :hammer: Dependency Upgrades - Support spring boot 2.6.8 [#​298](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/298) - Upgrade grpc to 1.47.0 [#​297](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/297) ### [`v4.7.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-470) #### :hammer: Dependency Upgrades - Upgrade grpc to 1.45.1 [#​294](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/294) - Support Spring Boot 2.6.6 [#​293](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/293) - Upgrade grpc to 1.45.0 [#​291](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/291) - Add suport for spring boot 2.6.4 [#​285](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/285) ### [`v4.6.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-460) #### :star: New Features - Enable users to configure the error handling interceptor precedence [#​276](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/276) #### :lady_beetle: Bug Fixes - Upgrade io.netty:netty-tcnative-boringssl-static to compatible version [#​279](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/279) - Cannot boot if there is no GRpcService [#​264](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/264) #### :hammer: Dependency Upgrades - Upgrade grpc to 1.43.x [#​271](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/271) - Add support for Spring Boot 2.6 [#​270](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/270) - Upgrade protoc compiler to 3.19.2 [#​262](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/262) ### [`v4.5.10`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-4510) #### :star: New Features - Expose grpc health indicator under /actuator/health [#​259](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/259) - Expose /actuator/grpc endpoint [#​258](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/258) - kubernetes healthcheck [#​98](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/98) #### :lady_beetle: Bug Fixes - Application with configured grpc.consul.xxx properties fails to start if no consul in classpath [#​256](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/256) #### :hammer: Dependency Upgrades - Upgrade protobuf-gradle-plugin to 0.8.17 [#​261](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/261) - Upgrade grpc to 1.42.0 [#​260](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/260) ### [`v4.5.9`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-459) #### :star: New Features - Support separate consul discovery properties for grpc and http services [#​250](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/250) - Add metadata to consul service discovery [#​249](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/249) - Spring security SPEL expressions support (`@PreAuthorize` and `@PostAuthorize`) [#​175](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/175) #### :lady_beetle: Bug Fixes - Circular bean dependency since 4.5.8 [#​253](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/253) #### :hammer: Dependency Upgrades - Upgrade spring boot to 2.5.6 [#​255](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/255) ### [`v4.5.8`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-458) #### :star: New Features - Support NOOP consul registration strategy [#​251](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/251) - Global error handling support [#​223](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/223) #### :hammer: Dependency Upgrades - Upgrade grpc to 1.41.0 [#​252](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/252) #### :watch: Deprecations - `GRpcErrorHandler` is deprecated in favor of `@GRpcServiceAdvice` and `@GRpcExceptionHandler` annotations. ### [`v4.5.7`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-457) #### :star: New Features - Support RequestAwareGRpcMetricsTagsContributor for Multiary Calls [#​244](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/244) - Custom service health check support [#​242](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/242) - Support [various consul registrations and checks modes](https://togithub.com/LogNet/grpc-spring-boot-starter#​9-consul-integration) #### :beetle: Bug Fixes - Interceptors do not block onHalfClose if they block the message [#​240](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/240) - Potential race condition when reporting running status of grpc server [#​238](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/238) #### :hammer: Dependency Upgrades - Upgrade grpc to v1.40.1 [#​243](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/243) ### [`v4.5.6`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-456) #### :star: New Features - Propagate Authentication to SecurityContextHolder [#​234](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/234) #### :beetle: Bug Fixes - grpc boot gradle plugin configures wrong generated source dir [#​237](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/237) - SecurityInterceptor rewrites the status and double-closes if other Interceptors close the call [#​231](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/231) - SecurityInterceptor does not consult the GRpcErrorHandler for auth scheme selection errors [#​229](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/229) #### :hammer: Dependency Upgrades - Upgrade to grpc 1.40.0 [#​235](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/235) ### [`v4.5.5`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-455) #### :beetle: Bug Fixes - grpc-kotlin-stub version is not same grpc version [#​224](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/224) #### :hammer: Dependency Upgrades - Upgrade grpc to 1.39.0 [#​227](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/227) ### [`v4.5.4`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-454) #### :star: New Features - Introduce grpc-spring-boot-starter-gradle-plugin [#​222](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/222) #### :notebook_with_decorative_cover: Documentation - Document GRPC starter + Kafka Stream usage [#​219](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/219) ### [`v4.5.3`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-453) - Requires JRE `1.8` and higher. #### :beetle: Bug Fixes - Failed to run the app with jre 1.8 [#​218](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/218) ### [`v4.5.2`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-452) #### :beetle: Bug Fixes - Can't download version `4.5.1` from maven central [#​217](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/217) - fixed by setting jar classifier to empty string : Gradle dependencies { compile 'io.github.lognet:grpc-spring-boot-starter:4.5.2' } Maven io.github.lognet grpc-spring-boot-starter 4.5.2 - Requires JRE `1.9` and higher. ### [`v4.5.1`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-4510) #### :star: New Features - Expose grpc health indicator under /actuator/health [#​259](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/259) - Expose /actuator/grpc endpoint [#​258](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/258) - kubernetes healthcheck [#​98](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/98) #### :lady_beetle: Bug Fixes - Application with configured grpc.consul.xxx properties fails to start if no consul in classpath [#​256](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/256) #### :hammer: Dependency Upgrades - Upgrade protobuf-gradle-plugin to 0.8.17 [#​261](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/261) - Upgrade grpc to 1.42.0 [#​260](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/260) ### [`v4.5.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-450) #### :beetle: Bug Fixes - How to disable Grpc Security [#​206](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/206) #### :hammer_and_wrench: Migration from 4.4.x Please use standard `@Configuration` instead of `@EnableGrpcSecurity` : Before (4.4.x): ```java @​EnableGrpcSecurity public class GrpcSecurityConfiguration extends GrpcSecurityConfigurerAdapter{ } ``` After (4.5.0) : ```java @​Configuration public class GrpcSecurityConfiguration extends GrpcSecurityConfigurerAdapter{ } ``` or ```java @​Configuration public class MyAppConfiguration { public class GrpcSecurityConfiguration extends GrpcSecurityConfigurerAdapter { } @​Bean public GrpcSecurityConfigurerAdapter grpcConfig(){ return new GrpcSecurityConfiguration(); } } ``` ### [`v4.4.7`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-447) #### :star: New Features - grpc-netty dependency support [#​203](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/203) #### :beetle: Bug Fixes - GrpcSecurityConfigurerAdapter initialization failure without spring-security-oauth2-resource-server [#​176](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/176) ### [`v4.4.6`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-446) #### :star: New Features - Support Springs `@Ordered` Annotation on GRpcServerRunner [#​126](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/126) #### :notebook_with_decorative_cover: Documentation - Document `@Transactional` usage [#​195](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/195) #### :hammer: Dependency Upgrades - Bump gRPC to 1.37.0 and spring-boot to 2.4.5 [#​202](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/202) ### [`v4.4.5`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-445) #### :star: New Features - Enable users to configure the built-in interceptor precedence [#​193](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/193) - Allow to add custom tag to the MonitoringServerInterceptor [#​191](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/191) - Allow to pass custom metadata during authentication failure [#​189](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/189) #### :hammer: Dependency Upgrades - Upgrade to grpc 1.36.0 [#​194](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/194) ### [`v4.4.4`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-444) - Fixes [https://github.com/LogNet/grpc-spring-boot-starter/issues/181](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/181)\[181] ### [`v4.4.3`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-443) - Fixes [https://github.com/LogNet/grpc-spring-boot-starter/issues/178](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/178)\[178] - Fixes [https://github.com/LogNet/grpc-spring-boot-starter/issues/117](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/117)\[117] - Fixes [https://github.com/LogNet/grpc-spring-boot-starter/issues/180](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/180)\[180] - gRPC response status set to `PERMISSION_DENIED` when user has insufficient privileges to invoke gRPC method. - gRPC version upgraded to `1.35.0` ### [`v4.4.2`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-442) - Spring Boot `2.4.1` - Spring Cloud `2020.0.0` ### [`v4.4.1`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-441) - If more than 1 port is exposed, add `address` tag to Micrometer's `timer` ### [`v4.4.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-440) - gRPC server metrics support via https://micrometer.io\[micrometer.io] integration ### [`v4.3.1`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-431) - Fixes [https://github.com/LogNet/grpc-spring-boot-starter/issues/169](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/169)\[169] ### [`v4.3.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-430) - Spring Validation (Java Beans) support - gRPC version upgraded to 1.34.1 ### [`v4.2.3`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-423) - gRPC version upgraded to 1.33.1 - Support `authenticate only` when role list is empty , `@Secured({})` (credits to https://github.com/CleverUnderDog\[[@​CleverUnderDog](https://togithub.com/CleverUnderDog)]) ### [`v4.2.2`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-422) - Fixes [https://github.com/LogNet/grpc-spring-boot-starter/issues/162](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/162)\[162] ### [`v4.2.1`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-421) - Configure bind address and other netty settings (fixes [https://github.com/LogNet/grpc-spring-boot-starter/issues/82](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/82)\[82]) - When overriding default GRPC security configuration, `@Secured` annotation is enabled by default. ##### Breaking changes - The starter brings now `io.grpc:grpc-netty-shaded` instead of `io.grpc:grpc-netty` as transitive dependency (fixes [https://github.com/LogNet/grpc-spring-boot-starter/issues/108](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/108)\[108]). + This means that all classes from `io.grpc.netty` package should be imported from `io.grpc.netty.shaded.io.grpc.netty` ### [`v4.2.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-420) - gRPC version upgraded to 1.33.0 - Fixed the issue with default method-level `@Secured` annotation (see [#​159](https://togithub.com/LogNet/grpc-spring-boot-starter/issues/159)) ### [`v4.1.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-410) - gRPC version upgraded to 1.32.2 - Fixed the issue with obtaining `Authentication` details in secured method implementation. - Fixed the issue with providing client-side user credentials. ### [`v4.0.0`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-400) - Spring Security framework integration - gRPC version upgraded to 1.32.1 - Spring Boot 2.3.3 \[IMPORTANT] Please use `4.1.0` version, `4.0.0` has issue with obtaining Authentication details in secured object implementation. ### [`v3.5.7`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-357) - gRPC version upgraded to 1.31.1 ### [`v3.5.6`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-356) - gRPC version upgraded to 1.30.2 ### [`v3.5.5`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-355) - gRPC version upgraded to 1.30.0 - Consul health check support for GRPC service (credits to https://github.com/evk1986\[[@​evk1986](https://togithub.com/evk1986)]) ### [`v3.5.4`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-354) - gRPC version upgraded to 1.29.0 ### [`v3.5.3`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-353) - gRPC version upgraded to 1.28.0 ### [`v3.5.2`](https://togithub.com/LogNet/grpc-spring-boot-starter/blob/HEAD/ReleaseNotes.md#Version-352) - gRPC version upgraded to 1.27.2 - Gradle 5.6.3