July 2024 Platform Update

Description

Plan platform update, tentatively around July to September 2024 .

  • Zk 10

  • Jetty 12 and corresponding Eclipse/Equinox release that support javax.* namespace:

  • To update dependencies with High and Critical CVE

    • Jaxen 2.0.0

    • Hazelcast 5.3.7

    • Guava 33.2.1-jre

    • com.fasterxml.jackson 2.15.4

    • org.bouncycastle.bc* 1.78.1

    • org.apache.activemq.activemq-* 5.16.7

    • xstream 1.4.20

    • org.apache.aries.spifly 1.3.7

    • commons-configuration2 2.10.1

    • commons-fileupload 1.5.0

    • commons-text 1.10.0

    • org.apache.cxf.cxf-* 3.6.3

    • neethi 3.2.0

    • jettison 1.5.4

    • org.mortbay.jasper.apache-* 9.0.90

    • org.ow2.asm.asm* 9.7

    • postgresql 42.7.3

    • xalan 2.7.3

    • nimbus-jose-jwt 9.37.3

    • com.google.javascript.closure-compiler v20240317

    • owasp-java-html-sanitizer 20240325.1

    • com.google.http-client.google-http-client 1.44.2

    • com.google.oauth-client 1.36.0

    • log4j 2.23.1

    • Use XMLBean 5.0.3 for org.idempiere.webservices module

  • Migration from Jetty 10 to Jetty 12

    • Need to add Jetty-Environment: ee8 to MANIFEST.MF (In addition to the existing Web-ContextPath: header)

    • Need to update the xml configuration files inside jettyhome/etc

  • Removal of org.eclipse.osgi.services bundle

Environment

None

Attachments

1
  • 16 Jul 2024, 08:21 AM

is blocked by

Activity

Heng Sin Low 
July 16, 2024 at 12:26 PM
(edited)

hi ,

See https://github.com/hengsin/idempiere-examples/tree/main/org.idempiere.eventhandler.example for reference (tested) (I’ve not check but you might need to adjust the version range to make it compatible with 11).

Regards,

Low

Heng Sin Low 
July 16, 2024 at 11:21 AM

Not sure what’s the problem here but it is IMPOSSIBLE that import package doesn’t work.

Carlos Ruiz 
July 16, 2024 at 10:22 AM

The right fix is to replace that with import package instead. If your plugin doesn’t produce any compilation error after removal of org.eclipse.osgi.services as required bundle, it means you don’t have to do anything after that (the original required bundle is actually not needed).

What I have is plugins implementing AbstractEventHandler with the dependency to org.eclipse.osgi.services, so, probably we have a lot of plugins out there with the same problem.

I tried to change it to “import package” approach, but didn’t work, maybe the package is not visible, the change to required plugin org.osgi.service.event.Event compiled, but I haven’t tested yet to see if it works.

Heng Sin Low 
July 16, 2024 at 8:26 AM

hi ,

Thanks for pointing this out, will fix.

Regards,

Low

Hiep Lq 
July 16, 2024 at 8:21 AM

hi missing jettyhome/etc/jetty-bytebufferpool.xml is error happen when run server on eclipse

it should fix by this one

Fixed

Details

Assignee

Reporter

Components

Fix versions

Priority

Created April 4, 2024 at 3:47 AM
Updated September 1, 2024 at 11:47 AM
Resolved July 17, 2024 at 5:17 PM