Update Libs

[tesshucom]

🐥Maintenance

• Postgres and Spring Security will be updated.
  • Postgres(CVE-2024-1597) and Spring Security(CVE-2024-22234) CVE warnings do not affect Jpsonic. However, we will receive false positive warnings here and there, so the library will be updated 😉
• jupnp will be upgraded to major version 3.0.0
  • Suppression for CVE-2021-21266 has been added, but there is no problem. jupnp is published on openHAB, but this is a caveat for the libraries used in the process of publishing it. Not included in Jpsonic products

Jpsonic's library updates are very fast, so as long as you use the latest version, you won't run into many CVE warnings. Docker configuration is also tracked, but the reported content will match warnings for upstream images (eclipse-temurin).

Jpsonic Image (Alpine)

Jpsonic Image (Jammy)

Since eclipse-temurin is an official image, any problems should be resolved transitively.

🌬 💨Notice about known issues 🐬🌫🌊 🏄🌫🌫🚣‍♂️🌫🌫🏊🌫

Degradation is currently confirmed in v114. This will be fixed soon, so please wait a moment.

• Settings cannot be made on the General Settings page #2592

The workaround is as follows.

• Do not save settings on the General Settings page (you can view them). This problem will be resolved in a few days.
• If you really want to change the settings, there is a way to temporarily use v113. For Docker, temporarily use image: 'jpsonic/jpsonic:113'
  • v113 and v114 are data compatible. After changing the settings, there is no problem even if you return to v114(latest) again.