fix: Upgrade spring to 2.7.x

[zhem0004]

What does this PR do?

This PR upgrades version of spring to 2.7.x.

Motivation

The newer version is more up to date and there are fixes that have been applied in Spring Boot 2.7

To fix

The presentation is not being set as current Insert document request is not working properly Presentation is not displayed properly

More

Note that we now specify versions explicitly for:

  implementation "org.springframework:spring-core:5.3.21"
  implementation "org.springframework:spring-context:5.3.21"

This was done to override the default spring-core and spring-context included in Spring.

The upgraded transitive dependencies include the following fixes:

  Upgrade org.grails:grails-core@5.0.1 to org.grails:grails-core@5.2.5 to fix
  ✗ Improper Handling of Case Sensitivity [Low Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634] in org.springframework:spring-context@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-context@5.3.12 and 8 other path(s)
  ✗ Denial of Service (DoS) [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2434828] in org.springframework:spring-expression@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-context@5.3.12 > org.springframework:spring-expression@5.3.12 and 1 other path(s)
  ✗ Improper Input Validation [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878] in org.springframework:spring-core@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-core@5.3.12 and 13 other path(s)
    
  
  
  
  Upgrade org.grails:grails-plugin-rest@5.0.1 to org.grails:grails-plugin-rest@5.2.0 to fix
  ✗ Improper Handling of Case Sensitivity [Low Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634] in org.springframework:spring-context@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-context@5.3.12 and 8 other path(s)
  ✗ Denial of Service (DoS) [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313] in org.springframework:spring-beans@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-beans@5.3.12 and 8 other path(s)
  ✗ Improper Input Validation [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878] in org.springframework:spring-core@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-core@5.3.12 and 13 other path(s)

    
  
  Upgrade org.grails:grails-web-boot@5.0.1 to org.grails:grails-web-boot@5.2.0 to fix
  ✗ Improper Handling of Case Sensitivity [Low Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634] in org.springframework:spring-context@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-context@5.3.12 and 8 other path(s)
  ✗ Denial of Service (DoS) [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313] in org.springframework:spring-beans@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-beans@5.3.12 and 8 other path(s)
  ✗ Denial of Service (DoS) [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2434828] in org.springframework:spring-expression@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-context@5.3.12 > org.springframework:spring-expression@5.3.12 and 1 other path(s)
  ✗ Improper Input Validation [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878] in org.springframework:spring-core@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-core@5.3.12 and 13 other path(s)
    
  
  
  
  Upgrade org.springframework.boot:spring-boot-autoconfigure@2.5.5 to org.springframework.boot:spring-boot-autoconfigure@2.5.13 to fix
  ✗ Improper Handling of Case Sensitivity [Low Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634] in org.springframework:spring-context@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-context@5.3.12 and 8 other path(s)
  ✗ Improper Input Validation [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878] in org.springframework:spring-core@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-core@5.3.12 and 13 other path(s)
    
  
  
  
  Upgrade org.springframework.boot:spring-boot-starter-actuator@2.5.5 to org.springframework.boot:spring-boot-starter-actuator@3.0.0 to fix
  ✗ Improper Input Validation [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878] in org.springframework:spring-core@5.3.12
    introduced by org.grails:grails-core@5.0.1 > org.springframework:spring-core@5.3.12 and 13 other path(s)
    
  
  
  
  Upgrade org.springframework.boot:spring-boot-starter-logging@2.5.5 to org.springframework.boot:spring-boot-starter-logging@2.5.7 to fix
  ✗ Insufficient Hostname Verification [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-CHQOSLOGBACK-1726923] in ch.qos.logback:logback-core@1.2.6
    introduced by org.springframework.boot:spring-boot-starter-logging@2.5.5 > ch.qos.logback:logback-classic@1.2.6 > ch.qos.logback:logback-core@1.2.6

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[github-actions]

This pull request has conflicts ☹
Please resolve those so we can review the pull request.
Thanks.

[gustavotrott]

It would be better to avoid changing the name of the configs!
cause it will break the servers that have changed the config using the old names!
I would say to keep using the old name e.g beans.presentationService.defaultUploadedPresentation instead of defaultUploadedPresentation.

It seems we can keep the old name and make the resources.xml read it!

[gustavotrott]

Keep the previous names for the configs to avoid break issues!

[gustavotrott]

After your change the securitySalt is being read from bigbluebutton.properties instead of /etc/bigbluebutton/bbb-web.properties.

All configs set on /etc/bigbluebutton/bbb-web.properties have priority! Make sure to keep this behavior!

[gustavotrott]

Prefer removing it instead of comment! If will not be necessary anymore.

[zhem0004]

Set to be as it used to

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[gustavotrott]

LGTM!