Skip to content

Spring AI Business Copilot v2.3.1

Choose a tag to compare

View all tags
@qcodingdev qcodingdev released this 16 Aug 13:47
· 15 commits to main since this release
v2.3.1
ef325ec
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Spring AI Business Copilot 2.3.1

2.3.1 is the formal enterprise maintenance release for the five closed-loop
business modules. It strengthens complete Notion ingestion, vendor connector contracts,
HR reviewer boundaries, and continuous dependency/container security without adding a
new module or database migration.

2.3.1 是五大企业业务闭环的正式维护版本。本版本不增加第六个模块或数据库迁移，
重点补强 Notion 完整遍历、外部厂商连接契约、HR 复核权限边界以及持续依赖与容器安全。

Highlights / 主要改进

  • Updated Notion to API version 2026-03-11, paginated search and block children,
    recursively retrieved nested content, and failed closed on missing/repeated cursors or
    page, item, depth, response-size, and timeout budget violations.
  • Preserved headings, lists, tasks, quotes, code, equations, dividers, child pages,
    child databases, and table rows when normalizing bounded Notion Markdown.
  • Added executable HTTP contracts for Notion, SharePoint, Confluence, Jira Service
    Management, Zendesk, ServiceNow, Feishu, and WeCom.
  • Prevented HR reviewers from loading unrelated confirmed-job data during candidate
    review, including desktop and mobile regression coverage.
  • Added weekly Dependabot maintenance for Maven, npm, GitHub Actions, and Docker, plus
    scheduled/manual Trivy repository and release-container scans.
  • Upgraded the enforced nanoid dependency to 3.3.18, resolving
    CVE-2026-67213.

Release gates / 发布门禁

  • Pull request: #13
  • Verified main commit: ef325ecc
  • PR CI: run 31894045859
  • Main CI: run 31894245295
  • Vue TypeScript, ESLint, unit tests, production build, and 42/42 desktop/mobile
    Playwright workflows passed.
  • Maven verify -Psbom passed across all 13 Reactor modules; all 67 fixed evaluation
    samples, PostgreSQL/Flyway V1-V31, and MySQL 5.7/8.4 gates passed.
  • Dependency review, source/container Trivy, non-root container, Compose runtime,
    authentication/CSRF smoke, and CycloneDX SBOM gates passed.

Upgrade / 升级

Read docs/upgrade-2.3.0-to-2.3.1.md
before upgrading. This is an in-place maintenance upgrade with no Flyway migration delta.

Deployment boundary / 部署责任边界

Real model providers and enterprise Notion, SharePoint, Confluence, Jira, Zendesk,
ServiceNow, Feishu, WeCom, identity, secret custody, production capacity, backup/restore,
and legal-retention acceptance remain deployment-owned gates.

Full changes: v2.3.0...v2.3.1

Assets 2
Loading