Release Notes / Version 10.2107
Table Of ContentsThird-Party Update: Spring Boot and Related Dependencies
Spring Boot has been updated to version 2.3.11.RELEASE. As part of this change, the following dependencies have been updated to match versions used by Spring Boot. This also fixes a security vulnerability in Spring Security: CVE-2021-22112
Spring Boot 2.3.11.RELEASE
Spring Framework 5.2.15.RELEASE
Spring Security 5.3.9.RELEASE
Byte Buddy 1.10.22
Glassfish JAXB 2.3.4
Hibernate 5.4.30.Final
Hsqldb 2.5.2
Jakarta Mail 1.6.7
Janino 3.1.4
Jetty 9.4.41.v20210516
Micrometer 1.5.14
MySQL 8.0.25
Netty 4.1.65.Final
PostgreSQL driver 42.2.20
Tomcat 9.0.46
If you use these libraries in project code, please check their respective release notes for changes and upgrade information. No changes were necessary in the CoreMedia Blueprint for these updates.
(CMS-19524)
Deprecate CapSystemInfo#getInstallationPath
Due to refactoring of internal file handling in the servers (corem.home is not used anymore) this method will be removed, because there is no exact replacement for this property.
(CMS-19437)
Explode Spring Boot Applications for Commerce Adapters at Startup
The Docker images of the commerce adapters now also make use of the
SPRING_BOOT_EXPLODED_APP
toggle was added to the
java-application-base
image. By setting
SPRING_BOOT_EXPLODED_APP: true
(which now is the default), the
application
entrypoint will extract the
application.jar
to
/coremedia/exploded
and start it from there. If that directory already exists, it will start the application from there.
This process speeds up the starting process by factor 2-3 and is the recommended way by Spring.
(CMS-19368)
Reproducible Maven Builds
With this release the Maven build produces the same artifacts on two consecutive builds, when there are no changes. This is implemented following the Maven guidelines described here .
There are some minor behavioral changes in the editorial UIs:
The Studio won't show a build date in the about dialog if the version is a
-SNAPSHOT.The Editor won't show a build date in the about dialog
The
coremedia-application-maven-plugin
has been updated with this commit to the version
3.0.0
. This version does not add any new configuration options but removes some unused functionality including:
support for Webstart
support for RPM building
support for application building with embedded Tomcat installation
If you need any of these features, you can switch back to version
2.8.3
and build without the reproducible build feature.
(CMS-19166)