Skip to content

Upgrade Spring Boot demo to 3.5.12 and Java 17#734

Merged
hectorcast-db merged 5 commits intomainfrom
update-example
Mar 27, 2026
Merged

Upgrade Spring Boot demo to 3.5.12 and Java 17#734
hectorcast-db merged 5 commits intomainfrom
update-example

Conversation

@pietern
Copy link
Copy Markdown
Contributor

@pietern pietern commented Mar 24, 2026

Summary

  • Upgrade Spring Boot from 2.6.4 to 3.5.12 and Java from 1.8 to 17
  • Migrate from javax to jakarta namespace for Spring Boot 3.x compatibility
  • Update SDK usage for 0.103.0: explicit OIDC endpoint discovery, required scopes, and CreateCustomAppIntegration request object
  • Override transitive jackson-bom version to fix known CVE
  • Remove unused ObjectMapper bean and jackson-datatype-jsr310 dependency

Test plan

  • Built and ran the example locally against an AWS staging workspace
  • Verified full OAuth U2M flow: app registration, consent, token exchange, and cluster listing
  • Ran Trivy scan confirming zero vulnerabilities in the example
  • Ran mvn spotless:check confirming formatting compliance

This pull request was AI-assisted by Isaac.

pietern added 2 commits March 24, 2026 15:48
Upgrade from Spring Boot 2.6.4 (79 CVEs) to 3.5.12 (0 CVEs):
- Java 1.8 -> 17, javax.servlet -> jakarta.servlet
- Add jackson-bom and commons-lang3 version overrides for remaining CVEs
- Remove unused jackson-datatype-jsr310 dependency and ObjectMapper bean
- Add CSRF disable for Spring Security 6.x compatibility
- Update customAppIntegration().create() to use request object
- Add explicit OIDC endpoint discovery and scope configuration
- Replace token display with authentication status indicator

Co-authored-by: Isaac
@hectorcast-db hectorcast-db merged commit 662a5b0 into main Mar 27, 2026
@hectorcast-db hectorcast-db deleted the update-example branch March 27, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants