Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency org.springframework.kafka:spring-kafka to v2 - autoclosed #572

Conversation

mend-for-jackfan.us.kg[bot]
Copy link

This PR contains the following updates:

Package Update Change
org.springframework.kafka:spring-kafka major 1.3.3.RELEASE -> 2.0.0.M1

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2022-22965 #504

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2018-1270 #85
High 9.8 CVE-2018-1275 #78
High 7.5 CVE-2018-1272 #80
Medium 6.5 CVE-2018-1257 #118
Medium 4.3 CVE-2021-22096 #464

Release Notes

spring-projects/spring-kafka

v1.3.11.RELEASE

Change log:

3d76427 Ugrade Gradle, Spring, Retry versions
c9443ee Prevent KafkaEmbedded exiting the JVM
7b492f5 GH-1441: Close producer after fatal send error
8599625 GH-1437: Check for immediate failure on send
3d04b59 Upgrade to Kafka 0.11.0.3
72f89a2 Fix manual acks with transactions
badcb8a GH-1414: ConcurrentMLC Fix ConcurrentModification
7f1268d Fix local variable name
902e9b3 GH-1283: Unique client.id for each producer
54d83f3 Polishing for previous commit
678a21b GH-1196: Use close(Duration) instead of close()

v1.3.10.RELEASE

Change log:

b99716c Upgrade to Spring Framework 4.3.25, retry 1.2.4
56f43a8 GH-1168: Fix sendOffsets in local transaction
8451480 Remove @Nullable: it can't be at this version
03f1461 GH-1145: Backport NPE Fix
55a3fd5 GH-1134: Fix stop(Runnable) usage
6331d89 Fix close producers after a rebalance
73e71e5 Fix URL to SI Idempotent Receiver
c6a22f5 URL Cleanup
09cda40 URL Cleanup
84f6267 URL Cleanup
c0e9eee URL Cleanup

v1.3.9.RELEASE

Change log:

209222b Upgrade Spring Framework to 4.3.22
1555ea4 Upgrade Jackson version
0a140eb GH-908: Don't cache dedicated consumer producers
9e3bd8c Process errorHandler in class level KafkaListener
d9248b6 GH-900: Use correct txId for initial commit

v1.3.8.RELEASE

Change log:

c9ffc7a Upgrade to SF-4.3.20
be0cb65 GH-881: Null check in closeProducers()
c2a125d GH-842: Fix NPEs in KafkaListenerAnnotationBPP (#​864)
a50a2a9 GH-859: Fix nested transactions
9c9a200 GH-834: Remove transactional producers
7517916 GH-804: EmbedKafkaCtxCustom add hashCode & equals

v1.3.7.RELEASE

Change log:

b17c530 GH-800: Fix Zombie Fencing
48caf23 Doc: Partition Assignment
f99c74a GH-777: Reset running on stop()
452814c GH-774: Rethrow e in KT.executeInTransaction()
2daa46c Doc fixes

v1.3.6.RELEASE

Change log:

dc466ad Upgrade dependency versions
542c801 GH-753: Close transactional producer on error
4811ea8 GH-686: Handle tombstones in Json Ser/Deser
2472224 GH-690: Propagate AfterRollbackProcessor to child
1558d29 Add licence and notice to all artifacts
6689bbb GH-683: Fix Transactions with ErrorHandler
0e90111 Doc 1.0.x client override

v1.3.5.RELEASE

Change Log:

0a27d14 Upgrade kafka-clients to 0.11.0.2
7793c0b Upgrade to SF 4.3.17
010c3e8 GH-661: Close Producer after beginTransaction fail
e826a58 GH-656: Fix seek on rollback
877fd6a KBGH-356: Fix thread naming with no bean name
1e55d7d GH-646: Avoid sync when no transaction
79510ec GH-646: Transaction Improvements

v1.3.4.RELEASE

Change log:

ebbe5f0 Fix KafkaMesListenerContTests for proper mocks
4c5399d GH-637: Fix spurious nonresponsive consumer events
6943d5f Change log-compaction url
398967f Fix KafkaMessageListenerContainerTests
8a83135 Fix KafkaMessageListenerContainerTests
e7e6c9d GH-623: Fix AckMode.COUNT
5e877a8 GH-566: Ack Concurrency Issue


  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot added the security fix Security fix generated by WhiteSource label Apr 18, 2022
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot changed the title Update dependency org.springframework.kafka:spring-kafka to v2 Update dependency org.springframework.kafka:spring-kafka to v2 - autoclosed Apr 25, 2022
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot deleted the whitesource-remediate/org.springframework.kafka-spring-kafka-2.x branch April 25, 2022 03:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants