Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Micronaut to 3.x #846

Closed
timtebeek opened this issue Oct 11, 2021 · 9 comments
Closed

Upgrade Micronaut to 3.x #846

timtebeek opened this issue Oct 11, 2021 · 9 comments
Labels
dependency-upgrade Pull requests that update a dependency file

Comments

@timtebeek
Copy link
Contributor

Upgrade guides:

@tchiotludo
Copy link
Owner

already on micronaut 2.x (2.5.5) 😄

@tchiotludo tchiotludo added the dependency-upgrade Pull requests that update a dependency file label Oct 11, 2021
@timtebeek
Copy link
Contributor Author

Apologies! I was mistakenly looking at the plugin version, which is still at 1.5.2 🙈
In any case the plugin has seen a few upgrades as well (2.0.6) being the latest,
and the Micronaut 3.0.3 upgrade comments still stand. 🙃 Luckily OpenRewrite makes it easy.

@timtebeek timtebeek changed the title Upgrade Micronaut to 2.x or 3.x Upgrade Micronaut to 3.x Oct 11, 2021
@tchiotludo
Copy link
Owner

I try on another project, the change will take some time, even more if we decided to remove the RxJava2 deps.
OpenRewrite will not handle special case on internal bean from micronaut.

Are you willing to do that ?

@timtebeek
Copy link
Contributor Author

I could look into it, but not that at home in Micronaut yet. Could be a nice challenge, could fail miserably. ;)
If nothing comes of my attempts anyone else is welcome to try as well!

@RoachMJ
Copy link

RoachMJ commented Oct 28, 2021

Micronaut 3.0.2 should resolve the folllowing high cves CVE-2021-37137, CVE-2021-37136 from io.netty package, will make an attempt to rebuild.

@asatsi
Copy link

asatsi commented Nov 11, 2021

@RoachMJ have you been able to upgrade to 3.0.2? I am facing the same issue as the CVEs you mentioned above. Is there a way I can make local changes and do a gradle build?

@gquintana
Copy link
Contributor

I am particularly interested in this change micronaut-projects/micronaut-security#720 which is available in micronaut-security 3.0.0-RC1

@tchiotludo
Copy link
Owner

@timtebeek @gquintana @asatsi @RoachMJ @twobeeb

The upgrade to micronaut 3.2 is done on dev branch from this bf8c68e.

I will appreciate some test since there is a lots of changes, especially on the auth side that was breaking compatibility on micronaut 3.

I planned to release a new version next week.

Thanks

@twobeeb
Copy link
Contributor

twobeeb commented Dec 14, 2021

Hello, @tchiotludo
I deployed dev branch on some instances and I experience the behavior documented in #907.

Other than that, everything seems ok.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependency-upgrade Pull requests that update a dependency file
Projects
Status: Done
Development

No branches or pull requests

6 participants