Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Spring Boot 3 and JDK 21 #1001

Open
wants to merge 20 commits into
base: main
Choose a base branch
from

Conversation

jonasvoelcker
Copy link
Collaborator

@jonasvoelcker jonasvoelcker commented Mar 13, 2024

What this PR does / why we need it:

The OSS support for Spring Boot 2 ended in November 2023 and there are plenty of vulnerabilities which might be addressed. This change keeps compatibility to all relevant versions which were supported before and recovered the 19.0.3-legacy version as well.

Which issue this PR fixes: fixes #827 #874 #938

Special notes for your reviewer:

  • Changed Java target version and temurin to 21
  • Several dependency updates
  • Reassured compatibility with 19.0.3-legacy

Breaking

  • Upgrade to Spring Boot 3
    • This affects the capability of the path matcher

PR Readiness Checklist:

Complete these before marking the PR as ready to review:

  • the CHANGELOG.md release notes have been updated to reflect any significant (and particularly user-facing) changes introduced by this PR

Copy link

codecov bot commented Mar 13, 2024

Codecov Report

Attention: Patch coverage is 96.15385% with 3 lines in your changes are missing coverage. Please review.

Project coverage is 95.43%. Comparing base (554c4a1) to head (bbfdfb9).

Files Patch % Lines
...ak/config/service/ClientPoliciesImportService.java 75.00% 1 Missing and 2 partials ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##               main    #1001      +/-   ##
============================================
- Coverage     95.56%   95.43%   -0.14%     
+ Complexity     1370     1355      -15     
============================================
  Files            81       81              
  Lines          4400     4381      -19     
  Branches        500      502       +2     
============================================
- Hits           4205     4181      -24     
- Misses           94       96       +2     
- Partials        101      104       +3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@jonasvoelcker jonasvoelcker force-pushed the spring-boot-jdk-update branch 3 times, most recently from 8a8a67c to 34f9608 Compare March 14, 2024 10:07
@jonasvoelcker jonasvoelcker force-pushed the spring-boot-jdk-update branch 2 times, most recently from f90d737 to be90699 Compare March 14, 2024 11:17
@jonasvoelcker jonasvoelcker force-pushed the spring-boot-jdk-update branch 3 times, most recently from 756cde2 to a271a38 Compare March 14, 2024 13:58
@jonasvoelcker jonasvoelcker marked this pull request as ready for review March 14, 2024 16:53
@st3v0rr
Copy link
Member

st3v0rr commented Mar 26, 2024

Review looks good. Before we merge it...
We will drop support for any Java version besides Java 21.
Last chance for objections until tonight :-)

- KEYCLOAK_VERSION: 21.1.1
- KEYCLOAK_VERSION: 22.0.4
- KEYCLOAK_VERSION: 21.1.2
- KEYCLOAK_VERSION: 22.0.5
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jonasvoelcker since only the tests fail with this 22.0.5 version can you maybe give it a try with the old version?

@st3v0rr
Copy link
Member

st3v0rr commented Mar 28, 2024

As soon as the issue with keycloak 22 tests is fixed I will merge it and perform a release.

Copy link

sonarcloud bot commented Apr 29, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Update dependencies to fix critical and high severity vulnerabilities
2 participants