Vaadin 23.3.5

This is a maintenance release for Vaadin 23.3. See 23.3.0 release notes for details and resources.

Notable Changes

• Since Vaadin 23.3, the minimal supported Spring-boot version is 2.7.x
• Since Vaadin 23.3.5, due to the founded vulnerability (CVE-2022-1471), dependency for org.yaml:snakeyaml has been removed.
  • Vaadin project is not depending on the vulnerable dependency (org.yaml:snakeyaml) directly, users can add the dependency if needed

Changelogs

• Flow (23.3.3) and Hilla (1.3.5)
• Design System
  • Web Components (23.3.5)
  • Flow Components (23.3.5)
• TestBench (8.2.0)
• Classic Components(23.3.0)
• Multiplatform Runtime (MPR) (6.1.1)
• Router (1.7.4)
• Vaadin Kits
  • Collaboration Kit (aka Collaboration Engine) (5.3.0)
  • Azure Kit (1.0.0)
  • Kubernetes Kit (1.0.2)
  • Observability Kit (1.0.0)
  • SSO Kit (1.0.0)
  • Swing Kit (1.0.1)
• Designer (Release notes)

Official add-ons and plugins:

• Spring add-on (23.3.3)
• CDI add-on (14.1.0)
• Maven plugin (23.3.5)
• Gradle plugin (23.3.5)
• OSGi plugin (8.1.0)
• Quarkus plugin (1.1.3)
• Portlet plugin (2.1.0)