3.0.0-M1 Removals

[fabapp2]

https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.0.0-M1-Release-Notes#miscellaneous

Apart from the changes listed above, there have also been some minor tweaks and improvements including:

• Support for Java’s SecurityManager has been removed following its deprecation in the JDK
• Support for Spring Framework’s CommonsMultipartResolver has been removed following its removal in Spring Framework 6

What needs to be done

• [x] How to find out if SecurityManager is used?
• [x] How to find out if CommonsMultipartResolver is used?

SecurityManager

Finder

Find System.getSecurityManager() or AccessControlException (potential contribution)

Implementation

• Implement the Finder as OpenRewriteRecipe adding Markers to the matching locations
• Let the `Sbm30_Finder´ implementation use the finder recipe

Recipe

None

Report

Inform the user about the potential usage of SecurityManager and that this class was removed.

CommonsMultipartResolver

Finder

Find bean definitions of type CommonsMultipartResolver

Implementation

• Create a new OpenRewrite Finder recipe that finds/marks Spring bean declarations by type (potential contribution)
• Let the `Sbm30_Finder´ implementation use the finder recipe
• Create a ProjectResourceFinder delegating to the recipe to find Spring bean declarations by type using the ProjectContext

Recipe

Remove beans of type CommonsMultipartResolver

Implementation

• Create OpenRewrite recipe RemoveCommonsMultipartResolverBeanDeclarations that uses the finder and removes bean declaration methods (potential contribution)
• Link the recipe as named recipe in the upgrade recipe yaml

Report

Suggest to remove CommonsMultipartResolver bean and relying on Spring Boot auto-configuration

[sanagaraj-pivotal]

CommonsMultipartResolver Deprecation part is not done, possible partial implementation for SecurityManager Deprecation

[BoykoAlex]

Anyone knows what is recommended to use instead of CommonsMultipartResolver? Other than having a TODO comment over the corresponding bean definition i have no idea what to do...

[fabapp2]

Hi @BoykoAlex, the API states

The common alternative is StandardServletMultipartResolver, delegating to the Servlet container's own multipart parser, with configuration to happen at the container level and potentially with container-specific limitations.

Not sure what this means for the recipe though.

[fabapp2]

CommonsMultipartResolver Deprecation part is not done, possible partial implementation for SecurityManager Deprecation

@sanagaraj-pivotal where to find it?

[fabapp2]

@BoykoAlex I clarified with the team, see my updated description.

[john17797]

Can anyone tell me about the alternative solution for CommonsMultipartResolver? I have this bean in my project, and I need to replace after I upgraded the spring-web dependency.