Skip to content

Upgrade Spring Boot demo to 3.5.12 and Java 17#734

Open
pietern wants to merge 2 commits intomainfrom
update-example
Open

Upgrade Spring Boot demo to 3.5.12 and Java 17#734
pietern wants to merge 2 commits intomainfrom
update-example

Conversation

@pietern
Copy link
Contributor

@pietern pietern commented Mar 24, 2026

Summary

  • Upgrade Spring Boot from 2.6.4 to 3.5.12 and Java from 1.8 to 17, fixing 79 CVEs (11 critical)
  • Migrate from javax to jakarta namespace for Spring Boot 3.x compatibility
  • Update SDK usage for 0.103.0: explicit OIDC endpoint discovery, required scopes, and CreateCustomAppIntegration request object
  • Override transitive dependency versions (jackson-bom 2.21.2, commons-lang3 3.18.0) to fix remaining CVEs

Test plan

  • Built and ran the example locally against an AWS staging workspace
  • Verified full OAuth U2M flow: app registration, consent, token exchange, and cluster listing
  • Ran Trivy scan confirming zero vulnerabilities in the example
  • Ran mvn spotless:check confirming formatting compliance

This pull request was AI-assisted by Isaac.

pietern added 2 commits March 24, 2026 15:48
Upgrade from Spring Boot 2.6.4 (79 CVEs) to 3.5.12 (0 CVEs):
- Java 1.8 -> 17, javax.servlet -> jakarta.servlet
- Add jackson-bom and commons-lang3 version overrides for remaining CVEs
- Remove unused jackson-datatype-jsr310 dependency and ObjectMapper bean
- Add CSRF disable for Spring Security 6.x compatibility
- Update customAppIntegration().create() to use request object
- Add explicit OIDC endpoint discovery and scope configuration
- Replace token display with authentication status indicator

Co-authored-by: Isaac
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant