Skip to content

[Improvement-17739][Dependency] Upgrade Spring Boot to fix CVE-2023-20873#17747

Merged
SbloodyS merged 9 commits intoapache:devfrom
dill21yu:Upgrade-Spring-Boot-Version
Dec 5, 2025
Merged

[Improvement-17739][Dependency] Upgrade Spring Boot to fix CVE-2023-20873#17747
SbloodyS merged 9 commits intoapache:devfrom
dill21yu:Upgrade-Spring-Boot-Version

Conversation

@dill21yu
Copy link
Contributor

Purpose of the pull request

close #17739

Verify this pull request

Upgrade Spring Boot from 2.7.3 to 2.7.11 to fix CVE-2023-20873

Pull Request Notice

Pull Request Notice

If your pull request contains incompatible change, you should also add it to docs/docs/en/guide/upgrade/incompatible.md

@dill21yu dill21yu changed the title [Improvement][Dependency] Upgrade Spring Boot from 2.7.3 to 2.7.11 to fix CVE-2023-20873 [Improvement-17739][Dependency] Upgrade Spring Boot to fix CVE-2023-20873 Nov 27, 2025
@SbloodyS SbloodyS added the improvement make more easy to user or prompt friendly label Nov 27, 2025
@SbloodyS SbloodyS added this to the 3.4.0 milestone Nov 27, 2025
HikariCP-4.0.3.jar
LatencyUtils-2.0.3.jar
accessors-smart-2.4.8.jar
accessors-smart-2.4.9.jar
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need to update these change in LICENSE file.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

updated

@dill21yu dill21yu requested a review from ruanwenjun November 28, 2025 01:17
@sonarqubecloud
Copy link

sonarqubecloud bot commented Dec 5, 2025

Copy link
Member

@SbloodyS SbloodyS left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

@SbloodyS SbloodyS merged commit 0f7a844 into apache:dev Dec 5, 2025
87 of 94 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backend improvement make more easy to user or prompt friendly

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Improvement][Dependency][Security] Upgrade Spring Boot to fix CVE-2023-20873

3 participants