This is a maintenance release for Vaadin 23.3. See 23.3.0 release notes for details and resources.
Notable Changes
- Since Vaadin 23.3, the minimal supported Spring-boot version is 2.7.x
- Since Vaadin 23.3.5, due to the founded vulnerability (CVE-2022-1471), dependency for
org.yaml:snakeyaml
has been removed.- Vaadin project is not depending on the vulnerable dependency (
org.yaml:snakeyaml
) directly, users can add the dependency if needed
- Vaadin project is not depending on the vulnerable dependency (
- if the user has customized
tsconfig.json
file, when upgrading to Vaadin 23.3.6 (flow 23.3.4), the startup will break with following messages. Manually update and restart the build should work.- [ERROR]**************************************************************************
[ERROR] * TypeScript config file 'tsconfig.json' has been updated to the latest *
[ERROR] * version by Vaadin. Please verify that the updated 'tsconfig.json' *
[ERROR] * file contains configuration needed for your project (add missing part *
[ERROR] * from the old file if necessary) and restart the application. *
[ERROR] **************************************************************************
- [ERROR]**************************************************************************
Changelogs
- Flow (23.3.4) and Hilla (1.3.6)
- Design System
- TestBench (8.2.0)
- Classic Components(23.3.0)
- Multiplatform Runtime (MPR) (6.1.1)
- Router (1.7.4)
- Vaadin Kits
- Designer (Release notes)
- Design System Publisher (Documentation)
Official add-ons and plugins: