Skip to content

Commit d919ef1

Browse files
authored
chore: update spring 3.5 version to avoid security issue (#108)
1 parent 5f8ca31 commit d919ef1

2 files changed

Lines changed: 15 additions & 1 deletion

File tree

CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,12 @@
22

33
## [Unreleased]
44

5+
### Dependencies
6+
7+
- Pin `spring-data-keyvalue` to 3.5.13 in `tarantool-spring-data-35` (parent defaults
8+
it to `${spring.boot.version}` = 3.5.16, which does not exist on Maven Central)
9+
- Bump spring-boot version from 3.5.13 to 3.5.16 in tarantool-spring-data-35
10+
511
## [1.7.0] - 2026-06-29
612

713
### Spring-data

tarantool-spring-data/tarantool-spring-data-35/pom.xml

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,10 @@
1818
<properties>
1919
<maven.compiler.source>17</maven.compiler.source>
2020
<maven.compiler.target>17</maven.compiler.target>
21-
<spring.boot.version>3.5.13</spring.boot.version>
21+
<spring.boot.version>3.5.16</spring.boot.version>
22+
<!--spring-data-keyvalue has not published a 3.5.14+ release; pin to 3.5.13,
23+
the latest matching artifact on Maven Central-->
24+
<spring-data-keyvalue.version>3.5.13</spring-data-keyvalue.version>
2225
<shared.dir>${project.parent.parent.basedir}/tarantool-shared-resources/</shared.dir>
2326
<license.header.file>${project.parent.parent.basedir}/LICENSE_HEADER.txt</license.header.file>
2427
</properties>
@@ -28,5 +31,10 @@
2831
<groupId>io.tarantool</groupId>
2932
<artifactId>tarantool-spring-data-core</artifactId>
3033
</dependency>
34+
<dependency>
35+
<groupId>org.springframework.data</groupId>
36+
<artifactId>spring-data-keyvalue</artifactId>
37+
<version>${spring-data-keyvalue.version}</version>
38+
</dependency>
3139
</dependencies>
3240
</project>

0 commit comments

Comments
 (0)