Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(project): add support for spring boot 3.3 #4397

Merged
merged 1 commit into from
Jun 4, 2024

Conversation

joaquinfelici
Copy link
Contributor

Related to #4186

@joaquinfelici joaquinfelici added the ci:spring-boot Runs the integration tests for the Spring Boot starter. label May 30, 2024
@joaquinfelici joaquinfelici self-assigned this May 30, 2024
@psavidis psavidis mentioned this pull request May 31, 2024
1 task
@psavidis psavidis added ci:run Runs the integration tests for the Run distribution. and removed ci:run Runs the integration tests for the Run distribution. labels May 31, 2024
@joaquinfelici joaquinfelici added the bot:java-dependency-check When assigned to a PR, generates SBOMs for the PR and base branch and compares them. label Jun 3, 2024
Copy link

github-actions bot commented Jun 3, 2024

Java dependency diff

Omitted due to character limit. See workflow artifacts for full diff file.

Module details

assertj-core:3.24.2

Declared licenses:

  • Apache-2.0 ✔

Links:

assertj-core:3.25.3

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-autoconfigure:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-autoconfigure:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

logback-core:1.4.14

Declared licenses:

Links:

logback-core:1.5.6

Declared licenses:

Links:

logback-classic:1.4.14

Declared licenses:

Links:

logback-classic:1.5.6

Declared licenses:

Links:

log4j-api:2.21.1

Declared licenses:

  • Apache-2.0 ✔

Links:

log4j-api:2.23.1

Declared licenses:

  • Apache-2.0 ✔

Links:

log4j-to-slf4j:2.21.1

Declared licenses:

  • Apache-2.0 ✔

Links:

log4j-to-slf4j:2.23.1

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-logging:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-logging:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-test:6.1.8

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-core:6.1.8

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-jcl:6.1.8

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-test:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-test:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-test-autoconfigure:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-test-autoconfigure:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

mockito-core:5.7.0

Declared licenses:

  • MIT ✔

Links:

mockito-core:5.11.0

Declared licenses:

  • MIT ✔

Links:

mockito-junit-jupiter:5.7.0

Declared licenses:

  • MIT ✔

Links:

mockito-junit-jupiter:5.11.0

Declared licenses:

  • MIT ✔

Links:

spring-boot-starter-test:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-test:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-aop:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-aop:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

HikariCP:5.0.1

Declared licenses:

  • Apache-2.0 ✔

Links:

HikariCP:5.1.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-jdbc:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-jdbc:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

classmate:1.6.0

Declared licenses:

  • Apache-2.0 ✔

Links:

classmate:1.7.0

Declared licenses:

  • Apache-2.0 ✔

Links:

hibernate-core:6.4.8.Final

Declared licenses:

  • LGPL-2.1+ ❓

Links:

hibernate-core:6.5.2.Final

Declared licenses:

  • LGPL-2.1+ ❓

Links:

spring-data-commons:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-data-commons:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-data-jpa:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-data-jpa:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-data-jpa:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-data-jpa:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-actuator:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-actuator:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-annotations:2.15.4

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-annotations:2.17.1

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-core:2.15.4

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-core:2.17.1

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-databind:2.15.4

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-databind:2.17.1

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-datatype-jsr310:2.15.4

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-datatype-jsr310:2.17.1

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-actuator-autoconfigure:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-actuator-autoconfigure:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

micrometer-commons:1.12.6

Declared licenses:

  • Apache-2.0 ✔

Links:

micrometer-commons:1.13.0

Declared licenses:

  • Apache-2.0 ✔

Links:

micrometer-observation:1.12.6

Declared licenses:

  • Apache-2.0 ✔

Links:

micrometer-observation:1.13.0

Declared licenses:

  • Apache-2.0 ✔

Links:

HdrHistogram:2.1.12

Declared licenses:

  • CC0-1.0 ❓
  • BSD-2-Clause ✔

Links:

HdrHistogram:2.2.1

Declared licenses:

  • CC0-1.0 ❓
  • BSD-2-Clause ✔

Links:

micrometer-core:1.12.6

Declared licenses:

  • Apache-2.0 ✔

Links:

micrometer-core:1.13.0

Declared licenses:

  • Apache-2.0 ✔

Links:

micrometer-jakarta9:1.12.6

Declared licenses:

  • Apache-2.0 ✔

Links:

micrometer-jakarta9:1.13.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-actuator:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-actuator:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-datatype-jdk8:2.15.4

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-datatype-jdk8:2.17.1

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-module-parameter-names:2.15.4

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-module-parameter-names:2.17.1

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-json:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-json:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-tomcat:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-tomcat:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-web:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-web:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

hibernate-validator:8.0.1.Final

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-validation:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-validation:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

jersey-bean-validation:3.1.6

Declared licenses:

Links:

jackson-module-jakarta-xmlbind-annotations:2.15.4

Declared licenses:

  • Apache-2.0 ✔

Links:

jackson-module-jakarta-xmlbind-annotations:2.17.1

Declared licenses:

  • Apache-2.0 ✔

Links:

jersey-media-json-jackson:3.1.6

Declared licenses:

Links:

spring-boot-starter-jersey:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-starter-jersey:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-configuration-processor:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-configuration-processor:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-devtools:3.2.6

Declared licenses:

  • Apache-2.0 ✔

Links:

spring-boot-devtools:3.3.0

Declared licenses:

  • Apache-2.0 ✔

Links:

commons-lang3:3.13.0

Declared licenses:

  • Apache-2.0 ✔

Links:

commons-lang3:3.14.0

Declared licenses:

  • Apache-2.0 ✔

Links:

commons-text:1.10.0

Declared licenses:

  • Apache-2.0 ✔

Links:

commons-text:1.11.0

Declared licenses:

  • Apache-2.0 ✔

Links:

opencsv:5.8

Declared licenses:

  • Apache-2.0 ✔

Links:

opencsv:5.9

Declared licenses:

  • Apache-2.0 ✔

Links:

liquibase-core:4.24.0

Declared licenses:

  • Apache-2.0 ✔

Links:

liquibase-core:4.27.0

Declared licenses:

  • Apache-2.0 ✔

Links:

wildfly-ejb3:31.0.0.Final

Declared licenses:

  • Apache-2.0 ✔

Links:

Checklist

Unique changes

Unique additions

Developer comments

Glossary

Limitations

  • The reported transitive dependencies may not always be accurate in a multi-module project.
    The SBOM file format represents a unique dependency (coordinates + type) only once. In a multi-module
    project a dependency can be declared in multiple locations with different exclusions of transitive dependencies
    or different version overrides for transitive dependencies.

Emojies

  • ✔: All licenses are on the Go list
  • ⚠: (At least one) license is on the Caution list
  • ❌: (At least one) license is on the Stop list
  • ❓: (At least one) license cannot be determined or is unknown
  • ‼: Dependency has multiple licenses declared
  • ⬆: New dependency version is higher than previous
  • ⬇: New dependency version is lower than previous
  • 🔄: Dependency version is equal and the dependencies of this component changed (e.g. when comparing snapshots)
  • 🤷: The change of the dependency version can not be determined further (e.g. because the version does not follow semantic versioning)

@joaquinfelici
Copy link
Contributor Author

Dependencies license check

Upgrades

Dependency Old version New version License change License Action required
logback-core 1.4.14 1.5.6 No EPL 1.0 / LGPL 2.1 No
logback-classic 1.4.14 1.5.6 No EPL 1.0 / LGPL 2.1 No
hibernate-core 6.4.8.Final 6.5.2.Final No LGPL 2.1 No
HdrHistogram 2.1.12 2.2.1 No BSD-2-Clause No
jersey-bean-validation 3.1.6 3.1.6 No (same version) No
jersey-media-json-jackson 3.1.6 3.1.6 No (same version) No

Additions

Dependency New version License Status Action required
spring-test 6.1.8 Apache 2.0 Go No
spring-core 6.1.8 Apache 2.0 Go No
spring-jcl 6.1.8 Apache 2.0 Go No

@joaquinfelici joaquinfelici marked this pull request as ready for review June 3, 2024 13:18
Copy link
Contributor

@psavidis psavidis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

License check and the ci look great, approved 👍

@joaquinfelici joaquinfelici merged commit f713603 into master Jun 4, 2024
11 checks passed
@joaquinfelici joaquinfelici deleted the 4186-SupportSpringBoot3.3 branch June 4, 2024 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bot:java-dependency-check When assigned to a PR, generates SBOMs for the PR and base branch and compares them. ci:run Runs the integration tests for the Run distribution. ci:spring-boot Runs the integration tests for the Spring Boot starter.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants