Broadleaf Commerce 7.0.2-GA

Released on September 5, 2024

This is the 2nd patch release for Broadleaf Framework 7.0.x. To upgrade a 7.0.x application to the 7.0.2-GA release, it should only require updating the parent pom.xml broadleaf-boot-starter-parent to 7.0.2-GA.

New and Noteworthy

Library version upgrades

• Spring core: Updated from 6.0.19 to 6.0.23
• Spring Boot: Updated from 3.1.11 to 3.1.12
• Antisamy: Updated from 1.7.5 to 1.7.6
• ESAPI: Updated to 2.5.4.0
• Jackson: Updated from 2.16.2 to 2.17.2
• Lombok: Updated from 1.18.30 to 1.18.34
• Commons-lang3: Updated from 3.12.0 to 3.16.0
• Commons-text: Updated from 1.10.0 to 1.11.0

Replaced OWASP Encoder with ESAPI

Previous versions of ESAPI were reliant on Javax libraries, and there was no support for Jakarta. Therefore, it was opted to use Encoder for earlier versions of BLC-7.0.x. New version of ESAPI has been released with Jakarta support so it has been added back to the Framework and Encoder has been removed.

An at-a-glance view of the issues that were closed in this release:

Major Bug(1)

• Fixed the issues with the scope of 'byte-buddy' dependency.

Minor Bugs(3)

• Fixed the issue where editing items in the Wishlist throws errors.
• Added io\.netty.* in blDirectCopyIgnorePatterns because it was causing class transformer errors.
• In BasicPersistenceModule changed the Predicate to use value of string instead of passing string.

Enhancements(3)

• Updated core libraries mentioned above.
• Added a property to set the strict mode for javascript closure compiler minify.closure.compiler.strictMode which is set to false by default.
• Merged bug fixes and enhancements included in 6.2.11-GA

Total Resolved Issues: 7