Release Notes / Version 12.2404
Table Of ContentsThird-Party Update: Bouncy Castle
Bouncy Castle has been updated to version 1.78 to fix security issues like CVE-2024-29857 and CVE-2024-30172.
(CMS-24725)
Updated Maven dependencies and plugins
Updated several dependency and plugin versions.
The following plugins and dependencies have been updated:
CoreMedia Client API and Mock Adapter for Commerce Hub → 3.0.3
AspectJ → 1.9.22
Byte Buddy → 1.14.12
Commons Codec → 1.16.1
Error Prone → 2.26.1
Enterprise Security API → 2.5.3.1
gRPC-Java → 1.62.2
Google Auth Library for Java → 1.23.0
Google API Extensions for Java → 2.43.0
Google HTTP Client Library for Java → 1.44.1
Guava → 33.1.0-jre
Hibernate → 6.4.4.Final
Jackson → 2.17.0
Jakarta Activation API → 2.1.3
Jakarta Mail API → 2.1.3
Jakarta XML Binding API → 4.0.2
Janino → 3.1.12
JUnit Jupiter → 5.10.2
JAXB Reference Implementation → 4.0.5
Micrometer → 1.12.4
Netty → 4.1.108.Final
PF4J → 3.11.0
Protocol Buffers for Java → 3.25.3
SLF4J → 2.0.12
Spring Boot → 3.2.4
Spring Data BOM → 2023.1.4
Spring Framework → 6.1.6
Spring for GraphQL → 1.2.6
Spring Security → 6.2.4
Tomcat → 10.1.20
(CMS-24115)