Update to Camunda 8.9 and Spring Boot 4#133
Conversation
There was a problem hiding this comment.
Pull request overview
Updates the project’s dependency baseline to align the Camunda 8 connector with Camunda 8.9 while moving the main build to Spring Boot 4, keeping the Camunda 7 module on Spring Boot 3 for compatibility.
Changes:
- Bump Spring Boot to
4.0.6at the root and introduce a separateversion.spring-boot-c7property for the C7 module. - Update Camunda Platform 8 dependency version to
8.9.0and simplify C8 module BOM management. - Refresh documentation (compatibility matrix + updated links) and update the C8 Docker build image.
Reviewed changes
Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
pom.xml |
Upgrades Spring Boot and adds a dedicated Boot version property for the C7 module. |
camunda-carbon-reductor-c8/pom.xml |
Removes redundant Spring Boot dependencyManagement import (inherits from parent chain). |
camunda-carbon-reductor-c8/README.md |
Updates documentation link for Camunda 8 Spring Zeebe SDK configuration. |
camunda-carbon-reductor-c8/Dockerfile |
Updates Maven build image used for building the C8 connector container. |
camunda-carbon-reductor-c7/pom.xml |
Pins the C7 module to Spring Boot 3 dependency BOM and plugin version. |
README.md |
Expands compatibility matrix to include Spring Boot versions per module/release. |
Comments suppressed due to low confidence (1)
camunda-carbon-reductor-c8/Dockerfile:5
- Only the build stage was updated to a newer Maven/Temurin image, but the runtime stage still uses
openjdk:17.0.1-jdk-slim, which is very old and likely misses important security fixes. Consider updating the runtime base image as well (and ideally aligning it with the same distribution/vendor) to avoid shipping an outdated JDK in production.
FROM maven:3.9.9-eclipse-temurin-17 AS build
COPY . .
RUN mvn clean package -DskipTests
FROM openjdk:17.0.1-jdk-slim AS run
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| <version.camunda8>8.9.0</version.camunda8> | ||
| <version.camunda7.spring-boot>7.24.0</version.camunda7.spring-boot> | ||
| <version.spring-boot>3.4.4</version.spring-boot> | ||
| <version.spring-boot>4.0.6</version.spring-boot> |
There was a problem hiding this comment.
version.spring-boot is now unused in the repo (the parent version is hard-coded above, and no module references ${version.spring-boot} anymore). Consider removing this property to avoid confusion, or use it consistently (e.g., for the parent version) so there’s a single source of truth.
| <version.spring-boot>4.0.6</version.spring-boot> |
|
|
||
| <dependencyManagement> | ||
| <dependencies> | ||
| <!-- C7 - explicitly override to Spring Boot 3 as Spring Boot 4 is not available --> |
There was a problem hiding this comment.
The XML comment says “Spring Boot 4 is not available”, but this module is overriding Spring Boot to 3.x because Boot 4 isn’t supported/compatible for the Camunda 7 module (while the overall build is using Boot 4). Consider rewording the comment to reflect the compatibility constraint to avoid misleading future readers.
| <!-- C7 - explicitly override to Spring Boot 3 as Spring Boot 4 is not available --> | |
| <!-- C7 - explicitly override to Spring Boot 3 because Camunda 7 is not supported/compatible with Spring Boot 4 in this module --> |
bc551ca to
06c02a6
Compare
No description provided.