dill21yu commented on issue #17739: URL: https://github.com/apache/dolphinscheduler/issues/17739#issuecomment-3580218393
> Springboot3 supports JDK17 at least. At present, many dependent components do not support JDK17. This modification involves a very wide range and should not be done at present. So I'm -1 on this. Thanks for the note! Just to clarify: this proposal is to upgrade from Spring Boot 2.7.3 to 2.7.18, which is still within the Spring Boot 2.7.x line — not Spring Boot 3.x. Spring Boot 2.7.x officially supports JDK 8 through JDK 19, so it’s fully compatible with DS’s current JDK (e.g., JDK 8 or 11). Only Spring Boot 3.x+ requires JDK 17+. This upgrade does not involve moving to Spring Boot 3. Therefore, it won’t introduce JDK compatibility issues and will effectively fix CVE-2023-20873. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
