Vaadin Framework 8.14.1 is a maintenance release with the following fixes :
fix: Add MPR UI id request parameter(part of Warranty fix in MPR project)
fix: VaadinService.reinitializeSession fails if there are multiple VaadinSession in the HTTP session
fix: ConcurrentModificationException in vaadin-shared on karaf-4.2.x
Behavior breaking changes
fix: Add row limit of 500 to DataCommunicator row data requests to avoid denial of service attacks (CVE-2021-33609) There will be method to override this behavior in upcoming versions.
Internal Changes
deprecate the vaadin-snapshot usage in Framework project, deploy snapshot release to vaadin-prerelease
Vaadin Framework 8.14.0.beta1 is a pre-release for evaluating a number of new features and bug fixes. The API in this beta version is not considered final and may change based on user feedback.
#Enhancements
#12357 Reworked and cleaned up client-side TabSheet and Accordion.
#Fixes
#12355 fix: Prevent deadlock in findOrCreateVaadinSession
Vaadin Framework 8.14.0.alpha1 is a pre-release for evaluating a number of new features and bug fixes. The API in this beta version is not considered final and may change based on user feedback.
#Enhancements
#12357 Reworked and cleaned up client-side TabSheet and Accordion.
#Fixes
#12355 fix: Prevent deadlock in findOrCreateVaadinSession
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vzwingma/gestion-budget-ihm-legacy/network/alerts).
Bumps vaadin-server from 8.12.3 to 8.14.1.
Release notes
Sourced from vaadin-server's releases.
... (truncated)
Commits
c30450fupdate release note templateab775a38.14 cherry-picks (#12418)2b2028eImprove thread safety (#12395) (#12417)2e285e3deprecate vaadin-snasphots repo (#12405) (#12406)938c523Update release note template4806947Applied save actions to compatibility Grid client-side classes. (#12389)c83f6bfchore: Update liferay kernel version (#12387)b6ece49Fix compatibility Grid column reorder with partially hidden joined cells (#12...5144101Cleaned out old references to removed buildhelpers and widgets modules. (#12383)c019c5dUpdate to Jsoup 1.14.2 (#12381)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vzwingma/gestion-budget-ihm-legacy/network/alerts).