Do we need to update H2?

[Matt Raible]

Hey all,

I checked in a JHipster project that uses 7.8.1 and I got a dependabot update for H2. 

https://github.com/oktadev/okta-jhipster-ionic-example/pull/2

It seems it fixes some vulnerabilities. Should we update JHipster’s BOM for this?

Thanks,

Matt

[Daniel Franco]

Hello,

H2 v2 uses now all SQL functionalities and all frameworks (spring-boot 2.7, liquibase 4.7,...) are migrating to that version also due to the old vulnerabilities

It is already included in https://github.com/jhipster/generator-jhipster/pull/18511.

Regards,

Daniel Franco

--
You received this message because you are subscribed to the Google Groups "JHipster dev team" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jhipster-dev...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jhipster-dev/50330051-5E4D-454B-8F38-340381547F7A%40raibledesigns.com.

[Matt Raible]

That’s good to know. Thanks Daniel!