Bump vaadin-server from 8.17.0 to 8.20.0

[dependabot]

Bumps vaadin-server from 8.17.0 to 8.20.0.

Release notes

Sourced from vaadin-server's releases.

Vaadin Framework 8.20.0

Changes in this version:

• Moved vaadin-portlet package contents from com.vaadin.server to com.vaadin.portlet namespace. This is a BREAKING CHANGE and will require you to update your imports. This is a necessary change in order to be able to support OSGi deployments (specifically under the latest Liferay 7 releases.

  • PLEASE NOTE THAT THIS IS A BREAKING CHANGE! - you need to update references to classes provided by vaadin-portlet from the com.vaadin.server to the com.vaadin.portlet namespace. The complete list of classes is as follows:

    • com.vaadin.portlet.LegacyVaadinPortlet
    • com.vaadin.portlet.RestrictedRenderResponse
    • com.vaadin.portlet.VaadinPortlet
    • com.vaadin.portlet.VaadinPortletRequest
    • com.vaadin.portlet.VAadinPortletService
    • com.vaadin.portlet.VaadinPortletSession
    • com.vaadin.portlet.WrappedPortletSession

    and

    • com.vaadin.portlet.communication.PortletBootstrapHandler
    • com.vaadin.portlet.communication.PortletDummyRequestHandler
    • com.vaadin.portlet.communication.PortletListenerNotifier
    • com.vaadin.portlet.communication.PortletStateAwareRequestHandler
    • com.vaadin.portlet.communication.PortletUIInitHandler

    If you've referenced any of these classes, they will have been in the com.vaadin.server and com.vaadin.server.communication packages, respectively.

• Improved OSGi packaging for vaadin-portlet. See issue #12575.
• Fixed an issue where push connections could get stuck when using @PreserveOnRefresh as requests intended for a new push connection would instead be queued on an old one. Now old connections are closed immediately on reconnect. See issue #12577.
• Fixed Push connection operations synchronization so that a connection won't be disconnected while there are messages pending. This would result in NullPointerExceptions being thrown. Makes the isConnected() call correctly reflect current state. This is a backported fix from Flow. See Flow issue #15571.
• Fixed an issue where undelivered push messages would get lost, resulting in a need for UI resynchronization. Push messages are now kept in cache until a client acknowledges receipt. This is a backported fix from Flow. See Flow issue #15205.
• Improved performance in UIs with assertions enabled. Some assertions would check for the presence of MPR on every run. MPR is now only detected once and the check result is cached. See issue #12572.

Vaadin Framework 8.19.0

• Changed license from Commercial Vaadin Developer License 4.0 to Vaadin Commercial License version 1. This change does not affect active subscribers, but it does mean that future releases of Vaadin Framework may move from dev- and build-time license checking to runtime license checking. Version 8.19.0 does not do that yet. See LICENSE file in the downloadable package or the Vaadin Commercial License and service terms document for more information.
• Fixed issue #12562. The internal state of ComboBox got confused when adding new items after calling clear().
• Improved the vaadin-server-mpr-jakarta and vaadin-compatibility-server-mpr-jakarta POM dependency definitions such that these packages do not pull in vaadin-server and vaadin-compatibility-server as unwanted dependencies, respectively.
• Fixed a number of assertion functions which would fail when MPR was in use. Improves testability of the framework and should allow running with assertions enabled in MPR configurations.
• Removed logging of Atmosphere version while MPR is in use. This fixes runtime failures under some configurations.
• Updated Atmosphere to version 2.4.30-vaadin5 in order to make Vaadin Framework 8 compatible with Jetty 10.
• Updated Vaadin License Checker to version 1.11.2 to support new license model.

Changelog

Sourced from vaadin-server's changelog.

Vaadin 8.20.0

• Moved vaadin-portlet package contents from com.vaadin.server to com.vaadin.portlet namespace. This is a BREAKING CHANGE and will require you to update your imports. This is a necessary change in order to be able to support OSGi deployments (specifically under the latest Liferay 7 releases.

  • PLEASE NOTE THAT THIS IS A BREAKING CHANGE! - you need to update references to classes provided by vaadin-portlet from the com.vaadin.server to the com.vaadin.portlet namespace. The complete list of classes is as follows:

    • com.vaadin.portlet.LegacyVaadinPortlet
    • com.vaadin.portlet.RestrictedRenderResponse
    • com.vaadin.portlet.VaadinPortlet
    • com.vaadin.portlet.VaadinPortletRequest
    • com.vaadin.portlet.VAadinPortletService
    • com.vaadin.portlet.VaadinPortletSession
    • com.vaadin.portlet.WrappedPortletSession

    and

    • com.vaadin.portlet.communication.PortletBootstrapHandler
    • com.vaadin.portlet.communication.PortletDummyRequestHandler
    • com.vaadin.portlet.communication.PortletListenerNotifier
    • com.vaadin.portlet.communication.PortletStateAwareRequestHandler
    • com.vaadin.portlet.communication.PortletUIInitHandler

    If you've referenced any of these classes, they will have been in the com.vaadin.server and com.vaadin.server.communication packages, respectively.

• Improved OSGi packaging for vaadin-portlet. See issue #12575.
• Fixed an issue where push connections could get stuck when using @PreserveOnRefresh as requests intended for a new push connection would instead be queued on an old one. Now old connections are closed immediately on reconnect. See issue #12577.
• Fixed Push connection operations synchronization so that a connection won't be disconnected while there are messages pending. This would result in NullPointerExceptions being thrown. Makes the isConnected() call correctly reflect current state. This is a backported fix from Flow. See Flow issue #15571.
• Fixed an issue where undelivered push messages would get lost, resulting in a need for UI resynchronization. Push messages are now kept in cache until a client acknowledges receipt. This is a backported fix from Flow. See Flow issue #15205.
• Improved performance in UIs with assertions enabled. Some assertions would check for the presence of MPR on every run. MPR is now only detected once and the check result is cached. See issue #12572.

Vaadin 8.19.0

• Changed license from Commercial Vaadin Developer License 4.0 to Vaadin Commercial License version 1. This change does not affect active subscribers, but it does mean that future releases of Vaadin Framework may move from dev- and build-time license checking to runtime license checking. Version 8.19.0 does not do that yet. See LICENSE file in the downloadable package or the Vaadin Commercial License and service terms document for more information.
• Fixed issue #12562. The internal state of ComboBox got confused when adding new items after calling clear().
• Improved the vaadin-server-mpr-jakarta and vaadin-compatibility-server-mpr-jakarta POM dependency definitions such that these packages do not pull in vaadin-server and vaadin-compatibility-server as unwanted dependencies, respectively.
• Fixed a number of assertion functions which would fail when MPR was in use. Improves testability of the framework and should allow running with assertions enabled in MPR configurations.
• Removed logging of Atmosphere version while MPR is in use. This fixes runtime failures under some configurations.
• Updated Atmosphere to version 2.4.30-vaadin5 in order to make Vaadin Framework 8 compatible with Jetty 10.
• Updated Vaadin License Checker to version 1.11.2 to support new license model.

Vaadin 8.18.0

• Fixed issue #12560 by improving Grid's horizontal scrolling scrolling logic.
• Fixed an issue in Combobox where scrolling to selection would fail if the user had typed into the input field. Possibly related to #12562.
• Added runAfterRoundTrip API to the UI class for improved sequence control, allowing execution of a callback after one or more client-server round trips have been completed.
• Separated portlet support code out of vaadin-server into its own package, vaadin-portlet. This will break your build if your application makes use of Portlet classes and you do not import the vaadin-portlet dependency.
• Added support for Vaadin Multiplatform Runtime version 24+ by adding packages vaadin-server-mpr-jakarta and vaadin-compatibility-server-mpr-jakarta. This is only needed for MPR 24+, and is NOT guaranteed to work as generic Jakarta support (even though it does so at the moment) as we may add MPR specific functionality or even hard MPR dependencies in the future.

Commits

• 62c2709 Update Vaadin 8 changelog for 8.20.0 release (#12578)
• 8a1f68f Update CHANGELOG-VAADIN7.md (#12573)
• 32bb906 Update CHANGELOG-VAADIN8.md for 8.19.0 (#12570)
• a45dc3a Update CHANGELOG-VAADIN7.md (#12564)
• ee0406c Update CHANGELOG-VAADIN8.md (#12563)
• 15435fc Update CHANGELOG-VAADIN7.md (#12561)
• 81c8096 Update CHANGELOG-VAADIN7.md (#12554)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)