Skip to content

Upgrade springboot to fix security issue #627

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Feb 28, 2020

Conversation

smyrick
Copy link
Contributor

@smyrick smyrick commented Feb 28, 2020

📝 Description

Spring Boot 2.2.5 was released which includes a fix for a security issue in netty. See: https://spring.io/blog/2020/02/27/spring-boot-2-2-5-released

🔗 Related Issues

Fixes #625

Spring Boot 2.2.5 was released which includes a fix for a security issue in netty. See: https://spring.io/blog/2020/02/27/spring-boot-2-2-5-released
@smyrick smyrick added changes: patch Changes require a patch version type: dependency changes Dependency change which doesn't affect our library usage labels Feb 28, 2020
@@ -5,7 +5,7 @@ val graphQLJavaVersion: String by project
val jacksonVersion: String by project
val kotlinVersion: String by project
val kotlinCoroutinesVersion: String by project
val rxjavaVersion = "3.0.0"
val rxjavaVersion: String by project
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe we should update our tests to create custom Reactor Monad and drop RxJava altogether?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

*just a side note for future

Copy link
Contributor Author

@smyrick smyrick Feb 28, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we have it as an official example in our documentation I like having it included in our test dependencies.

But as you mentioned we could just edit our docs and examples to just use reactor/spring wrappers and comment that they can work for any custom wrappers you want to include

Let's make that a separate PR

@smyrick smyrick merged commit bf5e6ea into ExpediaGroup:master Feb 28, 2020
@smyrick smyrick deleted the spring-2-2-5 branch February 28, 2020 17:44
dariuszkuc pushed a commit to dariuszkuc/graphql-kotlin that referenced this pull request Aug 5, 2022
Spring Boot 2.2.5 was released which includes a fix for a security issue in netty. See: https://spring.io/blog/2020/02/27/spring-boot-2-2-5-released
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
changes: patch Changes require a patch version type: dependency changes Dependency change which doesn't affect our library usage
Development

Successfully merging this pull request may close these issues.

Some dependencies contain CVEs
2 participants