cf-java-client icon indicating copy to clipboard operation
cf-java-client copied to clipboard

Spring Boot 3 migration

Open dcolazin opened this issue 9 months ago • 5 comments

Hello, I'm planning to migrate an existing application to Spring Boot 3 and my application uses several cf-java-client libraries. From a cursory analysis, it seems possible to use certain artifacts also in Spring Boot 3 applications, but the best would be to use dependencies that naturally support Spring Boot 3.

Is there a migration plan for cf-java-client? Spring Boot 2.7 support ended almost 2 years ago.

dcolazin avatar May 06 '25 09:05 dcolazin

Hey @dcolazin .

I am planning to work towards a 6.0 release that would be based on the Boot 3.x dependency management plugin.

I don't have a timeline for this yet.

Kehrlann avatar May 27 '25 16:05 Kehrlann

Hi @Kehrlann, are you still planning to contribute this migration ? Would any of the documented CVEs for spring boot 2.7 also affect cf-java-client apps ?

gberche-orange avatar Nov 05 '25 13:11 gberche-orange

Hey @gberche-orange !

I am going to do this, although its not on the top of my list.

Please note that we are safe from the CVEs above. That's because the only thing we use from Boot is:

  1. Dependency management, for pulling the "correct" versions of Reactor, slf4j, etc - honestly this could go away
  2. UriComponentsBuilder from Spring

We use Boot quite a lot in the integration tests, and some utilities in the tests, but that doesn't impact the production code.

I may remove all Spring dependencies from the runtime configuration of CF-java-client, and only keep it for the tests.

Kehrlann avatar Nov 05 '25 17:11 Kehrlann

Thanks for your prompt response !

Is there a possible workaround for client apps using cf-java-client to bump to springboot 3 prior to your contribution ?

gberche-orange avatar Nov 05 '25 17:11 gberche-orange

It may already work out of the box. I checked, and a CLI-based app with Boot 3.5 and cf-java-client 5.14.0 compiles and starts.

Kehrlann avatar Nov 05 '25 17:11 Kehrlann