Skip to content

migrating spring version to 4.0.1 #485

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vaibhav-db merged 25 commits into from
May 29, 2026
+652 −581
Merged

migrating spring version to 4.0.1 #485

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
25 commits
Select commit Hold shift + click to select a range
04b9c72
migrating spring version to 4.0.1
pranav-biyani-db Feb 4, 2026
107fe9f
migrating spring version to 4.0.1
pranav-biyani-db Feb 4, 2026
b67bf2c
migrating spring version to 4.0.1
pranav-biyani-db Feb 6, 2026
1a223c6
migrating spring version to 4.0.1
pranav-biyani-db Feb 16, 2026
11f6528
version changed
sunil-devidas-mahulkar-db Apr 2, 2026
873ff70
SYMPHONYP-1450 MIGRATING-SPRING-TO-4.0.1
vaibhav-db Apr 3, 2026
8301677
Pull request #96: Feature/SYMPHONYP-1450 MIGRATING SPRING TO-4.0.1
pranav-biyani-db Apr 6, 2026
795ef23
SYMPHONYP-1514 modified read me file
vaibhav-db Apr 8, 2026
36b51bf
SYMPHONYP-1514 modified read me file
vaibhav-db Apr 8, 2026
06683c9
SYMPHONYP-1546 updated readme file to correct to maven search path
vaibhav-db May 8, 2026
8d54d71
spring version 4.0.6
pranav-biyani-db May 13, 2026
a67e04e
spring version 4.0.6
pranav-biyani-db May 13, 2026
ed0d2f7
spring version 4.0.6
pranav-biyani-db May 13, 2026
ef1a56f
spring version 4.0.6
pranav-biyani-db May 13, 2026
a804a3d
spring version 4.0.6
pranav-biyani-db May 13, 2026
f392a95
SYMPHONYP-1546 added vulnerability list in allow-list
vaibhav-db May 14, 2026
409ff96
Pull request #101: SYMPHONYP-1546 added vulnerability list in allow-list
vaibhav-db May 18, 2026
1cda393
SYMPHONYP-1546 modified allow list
vaibhav-db May 20, 2026
d27c01f
Pull request #102: SYMPHONYP-1546 modified allow list
vaibhav-db May 20, 2026
dc807c6
SYMPHONYP-1546 corrected allow-list
vaibhav-db May 21, 2026
0b3c499
Pull request #103: SYMPHONYP-1546 corrected allow-list
vaibhav-db May 21, 2026
9c89d2c
SYMPHONYP-1546 modified allow list
vaibhav-db May 22, 2026
a2b0493
Pull request #104: SYMPHONYP-1546 modified allow list
vaibhav-db May 22, 2026
72d80e0
SYMPHONYP-1546 added entry in allow list
vaibhav-db May 27, 2026
104eade
Pull request #105: SYMPHONYP-1546 added entry in allow list
vaibhav-db May 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .github/workflows/acceptable-licenses.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,4 +50,5 @@
<name>W3C license</name>
<name>jQuery license</name>
<name>MIT</name>
<name>MIT-0</name>
<name>MIT-0</name>
<name>Unicode-3.0</name>
76 changes: 74 additions & 2 deletions .github/workflows/allow-list.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -241,6 +241,78 @@
microsoft:teams this jar is non vulnerable, checked at maven site
</notes>
<cve>CVE-2025-53783</cve>
</suppress>
</suppress>
<suppress>
<notes>
azure-identity-1.18.0.jar this jar is non vulnerable, checked at maven site
</notes>
<cve>CVE-2023-36415</cve>
</suppress>
<suppress>
<notes>
kotlin-stdlib-common-1.9.22.jar this jar is non vulnerable, checked at maven site
</notes>
<cve>CVE-2020-29582</cve>
</suppress>
<suppress>
<notes>
netty-transport-4.2.12.Final.jar, netty-transport-native-epoll-4.2.12.Final.jar, netty-transport-native-unix-common@4.2.12.Final this jar is non vulnerable, checked at maven site
</notes>
<cve>CVE-2026-41417</cve>
</suppress>
<suppress>
<notes>
reactor-netty-core-1.3.5.jar and reactor-netty-http-1.3.5.jar this jar is non vulnerable, checked at maven site
</notes>
<cve>CVE-2026-33871</cve>
<cve>CVE-2025-67735</cve>
<cve>CVE-2026-33870</cve>
<cve>CVE-2026-41417</cve>
</suppress>
<suppress>
<notes>
tomcat-embed-core,tomcat-embeded-websocket, this jar is vulnerable, will solve in next release
</notes>
<cve>CVE-2026-41293</cve>
<cve>CVE-2026-41284</cve>
<cve>CVE-2026-43513</cve>
<cve>CVE-2026-43512</cve>
<cve>CVE-2026-42498</cve>
<cve>CVE-2026-43515</cve>
</suppress>
<suppress>
<notes>
azure-core,azure-core,azure-core-http-netty,azure-identity this jar is non vulnerable, checked at maven site
</notes>
<cve>CVE-2026-33117</cve>
</suppress>
<suppress>
<notes>
netty-transport-4.2.12.Final.jar
reactor-netty-core-1.3.5.jar
netty-transport-native-epoll-4.2.12.Final.jar
reactor-netty-http-1.3.5.jar
netty-transport-native-unix-common-4.2.12.Final.jar
this jar is non vulnerable, checked at maven site
</notes>
<cve>CVE-2026-42581</cve>
<cve>CVE-2026-42580</cve>
<cve>CVE-2026-42585</cve>
<cve>CVE-2026-42584</cve>
<cve>CVE-2026-42583</cve>
<cve>CVE-2026-42582</cve>
<cve>CVE-2026-42578</cve>
<cve>CVE-2026-42577</cve>
<cve>CVE-2026-42587</cve>
<cve>CVE-2026-42586</cve>
<cve>CVE-2026-44248</cve>
<cve>CVE-2026-42579</cve>
<cve>CVE-2026-49737</cve>
</suppress>
<suppress>
<notes>
cpe:2.3:a:microsoft:teams: Currently higher version not available.
</notes>
<cve>CVE-2025-49737</cve>
</suppress>
</suppressions>

4 changes: 1 addition & 3 deletions .github/workflows/cve-scanning.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
- name: Build with Maven
run: mvn install -DskipTests
- name: Depcheck
uses: dependency-check/Dependency-Check_Action@1.1.0
uses: dependency-check/Dependency-Check_Action@main
id: Depcheck
env:
JAVA_HOME: /opt/jdk
Expand All @@ -41,8 +41,6 @@ jobs:
--suppression ./.github/workflows/allow-list.xml
--failOnCVSS 5
--enableRetired
--ossIndexUsername ${{ secrets.SONATYPE_INDEX_USER }}
--ossIndexPassword ${{ secrets.SONATYPE_INDEX_PASSWORD }}

- name: Upload Test results
if: ${{ always() }}
Expand Down
355 changes: 183 additions & 172 deletions README.md
View file
Open in desktop

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions demos/claim-bot/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../..</relativePath>
</parent>

Expand All @@ -33,12 +33,12 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>symphony-bdk-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>teams-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
Expand Down
6 changes: 3 additions & 3 deletions demos/custom-help-bot/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../../pom.xml</relativePath>
</parent>

Expand All @@ -29,13 +29,13 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>symphony-bdk-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<scope>compile</scope>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>teams-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<scope>compile</scope>
</dependency>
</dependencies>
Expand Down
6 changes: 3 additions & 3 deletions demos/demo-bot/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../../pom.xml</relativePath>
</parent>

Expand All @@ -28,13 +28,13 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>symphony-bdk-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<scope>compile</scope>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>teams-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<scope>compile</scope>
</dependency>

Expand Down
6 changes: 3 additions & 3 deletions demos/rooms-bot/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../../pom.xml</relativePath>
</parent>

Expand All @@ -23,12 +23,12 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>symphony-bdk-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>teams-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
</dependencies>

Expand Down
6 changes: 3 additions & 3 deletions demos/todo-bot/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../..</relativePath>
</parent>

Expand All @@ -23,12 +23,12 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>symphony-bdk-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>teams-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
Expand Down
14 changes: 7 additions & 7 deletions libs/chat-workflow-coverage/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../..</relativePath>
</parent>

Expand Down Expand Up @@ -56,32 +56,32 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>chat-workflow</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>chat-workflow-testing</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>symphony-bdk-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>teams-chat-workflow-spring-boot-starter</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>entity-json</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>entities</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>

</dependencies>
Expand Down
4 changes: 2 additions & 2 deletions libs/chat-workflow-testing/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../..</relativePath>
</parent>

Expand All @@ -22,7 +22,7 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>chat-workflow</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>

<dependency>
Expand Down
6 changes: 3 additions & 3 deletions ...hat-workflow-testing/src/test/java/org/finos/springbot/workflow/tables/TestTableEdit.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,8 +27,8 @@
import org.mockito.Mockito;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.test.context.SpringBootTest;
import org.springframework.boot.test.mock.mockito.MockBean;
import org.springframework.test.context.ActiveProfiles;
import org.springframework.test.context.bean.override.mockito.MockitoBean;
import org.springframework.validation.Validator;

/**
Expand All @@ -46,7 +46,7 @@ public class TestTableEdit {
private TestObjects to;
private EntityJson toWrapper;

@MockBean
@MockitoBean
Validator v;

@Autowired
Expand All @@ -58,7 +58,7 @@ public class TestTableEdit {
@Autowired
TableAddRow addRows;

@MockBean
@MockitoBean
ResponseHandlers rh;

Chat room = null;
Expand Down
14 changes: 11 additions & 3 deletions libs/chat-workflow/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../..</relativePath>
</parent>

Expand All @@ -33,7 +33,7 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>entity-json</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
Expand All @@ -49,7 +49,15 @@
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.datatype</groupId>
<artifactId>jackson-datatype-jsr310</artifactId>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-web</artifactId>
</dependency>

</dependencies>

Expand Down
2 changes: 1 addition & 1 deletion libs/entity-json/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../..</relativePath>
</parent>

Expand Down
8 changes: 4 additions & 4 deletions libs/symphony-bdk/symphony-bdk-chat-workflow-spring-boot-starter/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
<parent>
<groupId>org.finos.springbot</groupId>
<artifactId>spring-bot</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<relativePath>../../..</relativePath>
</parent>

Expand All @@ -22,12 +22,12 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>chat-workflow</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>entities</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.finos.symphony.bdk</groupId>
Expand All @@ -43,7 +43,7 @@
<dependency>
<groupId>org.finos.springbot</groupId>
<artifactId>chat-workflow-testing</artifactId>
<version>10.0.4-SNAPSHOT</version>
<version>11.0.0-SNAPSHOT</version>
<scope>test</scope>
</dependency>
</dependencies>
Expand Down
Loading
Loading