[MS-44075] Remediate tomcat vulnerability

• issue references: https://community.opengroup.org/osdu/platform/system/search-service/-/issues/272 https://community.opengroup.org/osdu/platform/system/search-service/-/issues/270 https://community.opengroup.org/osdu/platform/system/search-service/-/issues/269 https://community.opengroup.org/osdu/platform/system/search-service/-/issues/268 https://community.opengroup.org/osdu/platform/system/search-service/-/issues/267
• update spring-boot version to 3.3.1 to remediate tomcat vulnerability.
• update core-lib-azure-spring6 to 0.27.0-rc3 .

mvn dependency:tree before changes:

[INFO] |  +- org.springframework.boot:spring-boot-starter-tomcat:jar:3.2.5:compile
[INFO] |  |  +- org.apache.tomcat.embed:tomcat-embed-el:jar:10.1.20:compile
[INFO] |  |  \- org.apache.tomcat.embed:tomcat-embed-websocket:jar:10.1.20:compile
[INFO] |  +- org.springframework.boot:spring-boot-starter-validation:jar:3.2.5:compile

mvn dependency:tree after changes:

[INFO] |  +- org.springframework.boot:spring-boot-starter-tomcat:jar:3.3.1:compile
[INFO] |  |  +- org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.25:compile
[INFO] |  |  +- org.apache.tomcat.embed:tomcat-embed-el:jar:10.1.25:compile
[INFO] |  |  \- org.apache.tomcat.embed:tomcat-embed-websocket:jar:10.1.25:compile

added 1 commit

• 040a5f23 - update notice

Compare with previous version

marked this merge request as ready

changed title from Draft: update spring to remediate tomcat vulnerability to update spring-boot version to remediate tomcat vulnerability

changed the description

assigned to @vidya

added Azure MRDependencies Upgrade Vulnerability Management labels

added Common Code label

changed milestone to %M24 - Release 0.27

requested review from @deepapathak and @chad

changed title from update spring-boot version to remediate tomcat vulnerability to Remediate tomcat vulnerability

approved this merge request

approved this merge request

approved this merge request

changed title from Remediate tomcat vulnerability to [MS-44075] Remediate tomcat vulnerability

Hello Team,

Merging vulnerability fix MR with passing pipelines as per policy, the core-test,gc-baremetal and ibm failures are not related to changes and were failing in master too.

Thanks.

cc: @chad

merged

mentioned in commit 9c038eab