Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Libs and Logging Improvements #2643

Merged
merged 24 commits into from
May 17, 2024
Merged

Update Libs and Logging Improvements #2643

merged 24 commits into from
May 17, 2024

Conversation

tesshucom
Copy link
Owner

@tesshucom tesshucom commented May 17, 2024

There are no updates regarding vulnerabilities in Jpsonic itself.

馃惀Maintenance

馃摑 Summary

Logging Improvements

In v114.1.1, meaningless and redundant logs may be output, although there is no actual harm.

  • Base Resource should not be an alias on startup
    • False positive for alias path validation present in Jetty
  • AsyncRequestNotUsableException when playing music, etc.
    • Traditional warning log when a client closes a Stream that the server is writing to.
    • This is due to Spring specification change.

Improved so that these are not output.

Docker Image (Alpine)

Only CVE-2020-5408 is reported, but it is probably a false positive. Spring Security used by Jpsonic is the latest 6.2.4.

image

@tesshucom tesshucom added this to the jpsonic 114.2 milestone May 17, 2024
@tesshucom tesshucom self-assigned this May 17, 2024
@tesshucom tesshucom merged commit 57f6daa into master May 17, 2024
2 checks passed
@tesshucom tesshucom deleted the release branch May 17, 2024 19:19
@tesshucom tesshucom added type: hotfix Should be in patch release instead of next version release type: maintenance Refactorings not related to logic, etc. labels May 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: hotfix Should be in patch release instead of next version release type: maintenance Refactorings not related to logic, etc.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant