search

spring-cloud / spring-cloud-vault

Configuration Integration with HashiCorp Vault
http://cloud.spring.io/spring-cloud-vault/
Apache License 2.0
270 stars 151 forks source link

Any plans to create a new release for Spring Cloud Vault? #691

Closed dietzsch closed 1 year ago

dietzsch commented 1 year ago

Hello together,

the last release for Spring Cloud Vault is from end of last year. Meanwhile there are a few vulnerabilities reported, which are fixed, but not yet released.

Thank you in advance!

best regards Alex

mp911de commented 1 year ago

Spring Cloud Vault 4.0.1 was released on March, 28 2023, version 3.1.3 was released on April 27 2023. Care to elaborate on why you consider the latest release being from the end of last year?

dietzsch commented 1 year ago

Hi @mp911de

thx for the quick reply. Actually I checked on the releases documented on this repo and there 4.0.0 from Dec 2022 was the last release.

2023-06-12_09h06_42

Maybe you could update the release page.

Alex

dietzsch commented 1 year ago

One additional thing, because I was wondering why spring-vault-core version 3.0.0 is used even when in the pom.xml 3.0.2 was specified.

I found that there are two projects that define the variable spring-vault.version:

The one in spring-cloud-config-dependencies seems to be used at the end.

mp911de commented 1 year ago

Thanks for the detail. GitHub release information aren't consistently used for Spring Cloud releases. I removed the lingering release so you can see all tags by default.

Regarding Spring Vault 3.0.0 usage, please file a ticket against spring-cloud-config as the version issue must be resolved there.