Vaadin 14.4.7

Vaadin consists of a set of web components, a Java web framework, configurable themes, tools and a set of app templates.

This is a maintenance release of Vaadin.
See the full release notes for Vaadin 14.4 in GitHub releases, including new features, getting started, supported browsers and other technologies, and migration notes.

Visit vaadin.com to get started.

Support

Vaadin 14 is an LTS (long term support) version, which will be supported for 5 years after the GA (general availability) release. More details of our release model are available on our roadmap page.

Vaadin also provides commercial support and warranty.

New and Noteworthy

Here are the highlighted new and improved features in this maintenance release.

Changes in Flow from 2.4.5

• Fixes:

  • ⧉ Use time-constant comparison for security tokens. PR:9896 Thanks to Xhelal Likaj for reporting this

    This is the same as #9875, but also applied for the upload security key and the push id since both of those are also used to protect against cross-site attacks. In addition, documentation for the push id is clarified to point out its role.

  • ⧉ Use time-constant comparison for CSRF tokens. PR:9875 Thanks to Xhelal Likaj for reporting this

    This hardens the framework against a theoretical timing attack based on comparing how quickly a request with an invalid CSRF token is rejected.

Changes in Flow Components from 14.4.6

Changes in vaadin-crud-flow

• Fixes:

  • ⧉ Replace select(null) with deselectAll() (#189). PR:567. Ticket:1014

    It is SelectionModel.java and inherited select() there. Grid's select is direct call to that. Grid's JavaDoc has dropped the notion of null not ok. /** * */ void select(T item);

Changes in vaadin-grid-flow

• Fixes:
  • ⧉ Clear subchildren when refreshing item (#588). PR:597. Ticket:1819

Changes in vaadin-notification-flow

• Chore:
  • ⧉ ⧉ Increase Web-Component version
    • fix: remove outer border from theme variants
    • fix: move pointer-events from card host to overlay

Changes since 14.4.6

• Vaadin Flow (2.4.6)
• Vaadin Grid (Flow integration 4.3.7, web component v5.7.7)
  • Grid
  • Tree Grid
  • Grid Context Menu
• Vaadin Notification (Flow integration 2.2.3, web component v1.6.1)
• Vaadin Crud (PRO) (Flow integration 2.3.6, web component v1.3.0)

Getting Started with Vaadin 14

App starters

The best way to get started with Vaadin 14 is to go to https://vaadin.com/start and pick an app template for the technology stack you’re interested in.

For the full list of how to get started go to the GitHub releases.

Reporting Issues

We appreciate if you try to find the most relevant repository to report the issue in. If it is not obvious which project to add issues to, you are always welcome to report any issue at https://github.com/vaadin/platform/issues.

A few rules of thumb will help you and us in finding the correct repository for the issue:

1. Bug tickets and enhancement requests that are specific to a certain Vaadin component should be posted in the component's Web Component repostory (e.g. https://github.com/vaadin/vaadin-button for Button).
2. Issues that are not component-specific (e.g. requests for new components) or encompass multiple components should be posted in vaadin-flow-components repository.
3. If you encounter an issue with Flow which does not seem to be related to a specific component, the problem is likely in Flow itself. The Flow repository is https://github.com/vaadin/flow
4. If you encounter an issue with Designer, the repository is https://github.com/vaadin/designer
5. If you encounter an issue with TestBench, the repository is https://github.com/vaadin/testbench