You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@shardingsphere.apache.org by "linghengqian (via GitHub)" <gi...@apache.org> on 2023/05/10 10:41:37 UTC

[GitHub] [shardingsphere-elasticjob] linghengqian commented on issue #2214: 什么时候支持 springboot 3.0

linghengqian commented on issue #2214:
URL: https://github.com/apache/shardingsphere-elasticjob/issues/2214#issuecomment-1541906029

   > > Please try building and using the master branch.
   > 
   > 谢谢,我拉取 master 分支 build 之后,支持 springboot 3.0,可以正常使用
   > 
   > 不过目前导入 elasticjob 的包会被扫出一个关于 org.yaml:snakeyaml  的漏洞,旧版本的 springboot 使用的是 1.29 版本的 snakeyaml,这个漏洞在 2.0 版本中被修复了, 但是直接从 elasticjob 中排除 snakeyaml,并且重新导入 2.0 的 snakeyaml 是不可行的,2.0 的 snakeyaml 中 Representer 这个类取消了无参构造器,在 elasticjob 源码以及旧版本的 springboot/spring 中仍然使用了 Representer 的无参构造器,这部分在 springboot  2.7.10 中被修改为有参构造器,因此建议你们能升级一下 elasticjob 中 springboot/spring 的版本(springboot 2.7.10 及以上)
   
   - For this issue, it has been fixed in the master branch.  
   
   - For SnakeYAML, discussed at https://github.com/apache/shardingsphere-elasticjob/pull/2216 .


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org