Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE] Proposal for Spring framework dependency maintenance #741

Closed
dai-chen opened this issue Aug 9, 2022 · 2 comments · Fixed by #1177
Closed

[FEATURE] Proposal for Spring framework dependency maintenance #741

dai-chen opened this issue Aug 9, 2022 · 2 comments · Fixed by #1177
Assignees
Labels
dependencies Pull requests that update a dependency file v2.5.0 'Issues and PRs related to version v2.5.0'

Comments

@dai-chen
Copy link
Collaborator

dai-chen commented Aug 9, 2022

Is your feature request related to a problem?
Spring framework used in our plugin needs to be upgraded very often to solve CVE introduced.

What solution would you like?
Actually we only need very simple Dependency Inject mechanism. Other lightweight framework such as Guice may be sufficient and save maintenance trouble.

What alternatives have you considered?
Alternatively, we can extract Spring version to single place in root Gradle config. It would be easier to bump its version.

Do you have any additional context?
N/A

@dai-chen dai-chen added the enhancement New feature or request label Aug 9, 2022
@dai-chen
Copy link
Collaborator Author

dai-chen commented Aug 9, 2022

Related: #611

@dai-chen dai-chen added dependencies Pull requests that update a dependency file v2.2.0 and removed enhancement New feature or request v2.2.0 labels Aug 9, 2022
@dai-chen dai-chen added the v2.5.0 'Issues and PRs related to version v2.5.0' label Dec 14, 2022
@anirudha
Copy link
Collaborator

+1 for guava

@dai-chen dai-chen linked a pull request Dec 23, 2022 that will close this issue
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file v2.5.0 'Issues and PRs related to version v2.5.0'
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants