Skip to content

[Snyk] Fix for 63 vulnerabilities - #8

Open
ryanmcmorrowsnyk wants to merge 1 commit into
mainfrom
snyk-fix-5f5504ec77a09d382674cdc552b38a38
Open

[Snyk] Fix for 63 vulnerabilities#8
ryanmcmorrowsnyk wants to merge 1 commit into
mainfrom
snyk-fix-5f5504ec77a09d382674cdc552b38a38

Conversation

@ryanmcmorrowsnyk

@ryanmcmorrowsnyk ryanmcmorrowsnyk commented Mar 11, 2026

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 63 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

  • pom.xml

Vulnerabilities that will be fixed with an upgrade:

Issue Score Upgrade
high severity Improper Validation of Specified Quantity in Input
SNYK-JAVA-IONETTY-8707739		   ****   com.datastax.cassandra:cassandra-driver-core:
3.7.2 -> 4.0.0
Major version upgrade `` No Known Exploit
high severity Untrusted Search Path
SNYK-JAVA-ORGAPACHETOMCATEMBED-13746602		   ****   Major version upgrade `` No Known Exploit
high severity Incorrect Authorization
SNYK-JAVA-ORGAPACHETOMCATEMBED-15307822		   ****   Major version upgrade `` No Known Exploit
high severity Improper Cleanup on Thrown Exception
SNYK-JAVA-ORGAPACHETOMCATEMBED-9905132		   ****   Major version upgrade `` Mature
medium severity Improper Neutralization
SNYK-JAVA-ORGAPACHETOMCATEMBED-9905136		   ****   Major version upgrade `` Proof of Concept
medium severity Insertion of Sensitive Information into Log File
SNYK-JAVA-ORGELASTICSEARCH-6125580		   ****   org.elasticsearch.client:elasticsearch-rest-high-level-client:
6.8.1 -> 7.17.24
Major version upgrade `` No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-ORGELASTICSEARCH-9679275		   ****   org.elasticsearch.client:elasticsearch-rest-high-level-client:
6.8.1 -> 7.17.24
Major version upgrade `` No Known Exploit
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JAVA-ORGSPRINGFRAMEWORK-7687446		   ****   Major version upgrade `` No Known Exploit
medium severity Improper Input Validation
SNYK-JAVA-ORGSPRINGFRAMEWORKBOOT-9804539		   ****   Major version upgrade `` Mature
medium severity Authorization Bypass
SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-8399273		   ****   Major version upgrade `` No Known Exploit
critical severity Authentication Bypass by Primary Weakness
SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-9486467		   ****   Major version upgrade `` No Known Exploit
critical severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917		   670   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Mature
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585		   386   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420		   385   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015		   351   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Mature
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588		   334   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762		   287   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426		   260   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451		   257   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416		   251   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427		   250   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766		   250   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421		   244   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664		   244   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418		   243   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094		   243   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106		   239   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407		   189   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324		   188   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300		   187   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314		   185   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625		   183   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587		   180   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316		   179   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450		   178   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373		   174   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449		   173   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425		   173   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
medium severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207		   173   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417		   171   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414		   169   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419		   169   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424		   169   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586		   169   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887		   169   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829		   168   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676		   168   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500		   168   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888		   168   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617		   167   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943		   167   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980		   167   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362		   167   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016		   166   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931		   165   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014		   165   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674		   165   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424		   146   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426		   146   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found Proof of Concept
high severity XML External Entity (XXE) Injection
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302		   133   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-IONETTY-8367012		   121   com.datastax.cassandra:cassandra-driver-core:
3.7.2 -> 4.0.0
Major version upgrade No Path Found Proof of Concept
medium severity Improper Validation of Specified Quantity in Input
SNYK-JAVA-IONETTY-8707740		   120   com.datastax.cassandra:cassandra-driver-core:
3.7.2 -> 4.0.0
Major version upgrade No Path Found Proof of Concept
high severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244		   115   com.amazonaws:aws-java-sdk-s3:
1.11.327 -> 1.12.797
No Path Found No Known Exploit

Breaking Change Risk

Merge Risk: High

Notice: This assessment is enhanced by AI.

Vulnerabilities that could not be fixed

  • Upgrade:
    • Could not upgrade org.springframework.boot:spring-boot-starter-actuator@2.7.18 to org.springframework.boot:spring-boot-starter-actuator@3.3.11; Reason could not apply upgrade, dependency is managed externally ; Location: provenance does not contain location
  • Could not upgrade org.springframework.boot:spring-boot-starter-security@2.7.18 to org.springframework.boot:spring-boot-starter-security@3.3.10; Reason could not apply upgrade, dependency is managed externally ; Location: provenance does not contain location
  • Could not upgrade org.springframework.boot:spring-boot-starter-web@2.7.18 to org.springframework.boot:spring-boot-starter-web@3.5.11; Reason could not apply upgrade, dependency is managed externally ; Location: provenance does not contain location

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data
🦉 XML External Entity (XXE) Injection
🦉 Denial of Service (DoS)
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: pom.xml to reduce vulnerabilities
d05818d 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-IONETTY-8707739
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-13746602
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-15307822
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-9905132
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-9905136
- https://snyk.io/vuln/SNYK-JAVA-ORGELASTICSEARCH-6125580
- https://snyk.io/vuln/SNYK-JAVA-ORGELASTICSEARCH-9679275
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-7687446
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORKBOOT-9804539
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-8399273
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-9486467
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302
- https://snyk.io/vuln/SNYK-JAVA-IONETTY-8367012
- https://snyk.io/vuln/SNYK-JAVA-IONETTY-8707740
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
@ryanmcmorrowsnyk

ryanmcmorrowsnyk commented Mar 11, 2026

Copy link
Copy Markdown
Owner Author

Merge Risk: High

This upgrade includes multiple major version changes with significant breaking changes that will require mandatory code and configuration updates.

Top 3 Most Impactful Upgrades

1. Spring Boot: 2.7.18 → 3.x (HIGH RISK)

This is a major upgrade that requires several substantial changes across the application. Developers must take action before this can be merged.

  • Java 17 Required: Spring Boot 3.0 requires a Java 17 baseline. The runtime environment and build tools must be upgraded. [4, 6]
  • Jakarta EE Migration: All Java EE package imports (javax.*) must be migrated to the new Jakarta EE equivalents (jakarta.*). This is a project-wide change affecting JPA (javax.persistence → jakarta.persistence), Servlet APIs, and Bean Validation. [2, 3, 5]
  • Spring Security 6: WebSecurityConfigurerAdapter has been removed. Security configuration must be refactored to use a component-based approach with SecurityFilterChain beans. [13, 15] Additionally, methods like antMatchers() and authorizeRequests() have been replaced by requestMatchers() and authorizeHttpRequests(). [16, 17, 19]
  • Configuration Properties: Numerous configuration properties have been renamed or removed. Use the spring-boot-properties-migrator module to help identify required changes in application.properties/application.yml. [4, 9]

Recommendation: This migration is a significant effort. Follow the official Spring Boot 3.0 Migration Guide, paying special attention to the Jakarta EE and Spring Security 6 changes. [4]

2. Cassandra Driver: 3.7.2 → 4.0.0 (HIGH RISK)

The DataStax Java driver upgrade from v3 to v4 is a major architectural redesign and is not binary compatible.

  • New Maven Coordinates: The artifact has moved from com.datastax.cassandra:cassandra-driver-core to com.datastax.oss:java-driver-core. [7, 14]
  • New Package Structure: All imports must be updated from com.datastax.driver.* to the new `com.datast

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ryanmcmorrowsnyk @snyk-bot