Vaadin 24.9.18

This is a maintenance release for Vaadin 24.9. See 24.9.0 release notes for details and resources.

Changelogs

• Flow (24.9.21) and Hilla (24.9.18)
• Design System
  • Web Components (24.9.16)
  • Flow Components (24.9.18)
• TestBench (9.5.6)
• Feature Pack(24.8.5)
• Modernization Toolkit (Documentation)
  • Feature Pack (Documentation)
  • Dragonfly (Documentation)
  • Modernization Toolkit Analyzer (Analyzer for Eclipse, Analyzer for Maven)
• Multiplatform Runtime (MPR) (7.0.11)
• Router (2.0.1)
• Vaadin Kits
  • AppSec Kit (3.4.3)
  • Azure Kit (1.0.0)
  • Collaboration Engine (6.6.0)
  • Control Center (1.4.6)
  • Copilot (24.9.19)
  • Kubernetes Kit (2.6.0)
  • Observability Kit (3.2.1)
  • SSO Kit (3.2.4)
  • Swing Kit (2.4.2)

Official add-ons and plugins:

• Spring add-on (24.9.21)
• CDI add-on (15.2.3)
• Maven plugin (24.9.18)
• Gradle plugin (24.9.18)
• Quarkus plugin (2.2.4)

Note:

We are aware of the following CVEs (GHSA-5m62-pw8w-7w9f, GHSA-5mp6-jrq3-r938, GHSA-9m89-8frq-c98c, GHSA-fv25-8xcx-gqjc, GHSA-gx5v-xp9w-j4cg, GHSA-h6fc-48rj-7qqh, GHSA-r29c-68gh-xp6x) from Tomcat, which is a transitive dependency from SpringBoot 3.5.14. Tomcat is a runtime deployment choice made by application developers, which Vaadin does not use or depend on. You can be upgraded on the application side to Tomcat 9.0.118+, 10.1.55+ or 11.0.22+. The corresponding updates will come in their next releases (SpringBoot 3.5.15).