nimbus-jose-jwt
version in order to ensure that apps can still run under included Jetty on Java 8 VMs. Newer versions of nimbus-jose-jwt
include a meta-info
class that JVM 8 implementations cannot load. nimbus-jose-jwt
was included as a transitive dependency.license-checker
to the latest available version for better user experience and MPR compatibility.Moved vaadin-portlet package contents from com.vaadin.server to com.vaadin.portlet namespace. This is a BREAKING CHANGE and will require you to update your imports. This is a necessary change in order to be able to support OSGi deployments (specifically under the latest Liferay 7 releases.
vaadin-portlet
from the com.vaadin.server
to the com.vaadin.portlet
namespace. The complete list of classes is as follows:com.vaadin.portlet.LegacyVaadinPortlet
com.vaadin.portlet.RestrictedRenderResponse
com.vaadin.portlet.VaadinPortlet
com.vaadin.portlet.VaadinPortletRequest
com.vaadin.portlet.VAadinPortletService
com.vaadin.portlet.VaadinPortletSession
com.vaadin.portlet.WrappedPortletSession
and
com.vaadin.portlet.communication.PortletBootstrapHandler
com.vaadin.portlet.communication.PortletDummyRequestHandler
com.vaadin.portlet.communication.PortletListenerNotifier
com.vaadin.portlet.communication.PortletStateAwareRequestHandler
com.vaadin.portlet.communication.PortletUIInitHandler
If you’ve referenced any of these classes, they will have been in the com.vaadin.server
and com.vaadin.server.communication
packages, respectively.
Improved OSGi packaging for vaadin-portlet. See issue #12575.
Fixed an issue where push connections could get stuck when using @PreserveOnRefresh
as requests intended for a new push connection would instead be queued on an old one. Now old connections are closed immediately on reconnect. See issue #12577.
Fixed Push connection operations synchronization so that a connection won’t be disconnected while there are messages pending. This would result in NullPointerExceptions being thrown. Makes the isConnected() call correctly reflect current state. This is a backported fix from Flow. See Flow issue #15571.
Fixed an issue where undelivered push messages would get lost, resulting in a need for UI resynchronization. Push messages are now kept in cache until a client acknowledges receipt. This is a backported fix from Flow. See Flow issue #15205.
Improved performance in UIs with assertions enabled. Some assertions would check for the presence of MPR on every run. MPR is now only detected once and the check result is cached. See issue #12572.
clear()
.vaadin-server-mpr-jakarta
and vaadin-compatibility-server-mpr-jakarta
POM dependency definitions such that these packages do not pull in vaadin-server
and vaadin-compatibility-server
as unwanted dependencies, respectively.runAfterRoundTrip
API to the UI class for improved sequence control, allowing execution of a callback after one or more client-server round trips have been completed.vaadin-server
into its own package, vaadin-portlet
. This will break your build if your application makes use of Portlet classes and you do not import the vaadin-portlet
dependency.vaadin-server-mpr-jakarta
and vaadin-compatibility-server-mpr-jakarta
. This is only needed for MPR 24+, and is NOT guaranteed to work as generic Jakarta support (even though it does so at the moment) as we may add MPR specific functionality or even hard MPR dependencies in the future.org.jsoup.safety.Whitelist
and replace them with references to org.jsoup.safety.Safelist
. The API of the two classes is the same; Safelist
is a drop-in replacement for Whitelist
. This change was made to all Vaadin versions simultaneously to address CVE-2022-36033 and keep the dependencies in line for use with Vaadin MPR.