Andrew DeMaria
893b652bcd
Update dependency checker with updated maven too
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Romain DEP.
c2416a57a8
deps: update jackson to a vuln-free version,
...
bump java-jwt in the process
7 years ago
Andrew DeMaria
caae31452e
Bump to 10.2.0 snapshot
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
535d5d06cb
Release 10.1.1
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
5e47bc500e
Fix maven profile mixup with sign/tomcat-embed
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
e39f5d98d0
Fixed dependency check issues
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
78006946ea
Bump 10.2.0-SNAPSHOT
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
e04cda4293
Release 10.1.0
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
438461933d
Dep Check Plugin and update vuln dependencies
...
Detail
------
Add a dependency check plugin to find reported issues with dependencies
we use.
From adding this, there were quite a few false positives which are
documented in airsonic-main/cve-suppressed.xml. The applicable
vulnerabilities are as follows:
```
commons-fileupload-1.2.jar (commons-fileupload:commons-fileupload:1.2,
cpe:/a:apache:commons_fileupload:1.2) : CVE-2016-3092, CVE-2016-1000031,
CVE-2014-0050, CVE-2013-0248
castor-core-1.3.1.jar (cpe:/a:castor:castor:1.3.1,
cpe:/a:castor_project:castor:1.3.1,
org.codehaus.castor:castor-core:1.3.1) : CVE-2014-3004
tomcat-embed-core-8.5.16.jar (cpe:/a:apache_software_foundation:tomcat:8.5.16, cpe:/a:apache:tomcat:8.5.16, cpe:/a:apache_tomcat:apache_tomcat:8.5.16, org.apache.tomcat.embed:tomcat-embed-core:8.5.16) : CVE-2017-12617
```
CVE-2016-1000031 is rated as CRITICAL, but we do not deserialize content
from any multipart uploads so doesn't apply.
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
ec68a8e7de
Bump version to 10.1.0-SNAPSHOT
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
00a5cf2907
Release 10.0.1
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
7d4ca2ffe2
Prep work for spring boot test
...
- Added enforcer plugin
- Fix some version conflicts
- Moved custom initializer to spring.factories
- Bump spring boot version
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
361d77ed61
Update version
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
e4a96925fd
Release 10.0.0
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
316b06a2c9
Updated version to 10.0.0
...
This was discussed in a dev irc meeting (https://gist.github.com/muff1nman/570a3021f5d98453333090bb933a3865 ).
It keeps our versioning different than parent fork versions.
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
615f7eb1c4
Moved docker to profile
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
86345a9c2c
Moved docker to its own module
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Yahor Berdnikau
f61d9f1489
Add project official docker image.
...
Tag for docker image is set from project version.
To build docker image for the project run:
- mvn package
- mvn -N dockerfile:build
Created docker image can be uploaded to the docker hub:
- mvn -N dockerfile:push
Signed-off-by: Yahor Berdnikau <egorr.berd@gmail.com>
7 years ago
Andrew DeMaria
94dbd3ef94
Rename libresonic -> airsonic
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Andrew DeMaria
d8bd94b7ad
Rename subsonic api module
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
7 years ago
Eugene E. Kashpureff Jr
103de63636
Libresonic v6.2
8 years ago
Eugene E. Kashpureff Jr
ce5a2cf35f
Libresonic v6.2.beta4
8 years ago
Andrew DeMaria
6f3ede33d9
Bump jaudio tagger version
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Andrew DeMaria
b22437c735
Bump to 6.3 snapshot
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Eugene E. Kashpureff Jr
3bf2ca7c18
Libresonic v6.2.beta3
8 years ago
Andrew DeMaria
678c3a7cd3
Change back to snapshot
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Eugene E. Kashpureff Jr
58e380b13c
Libresonic v6.2.beta2
8 years ago
Andrew DeMaria
988c98b3a9
Added libresonic banner
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Rémi Cocula
dfda4e560f
Spring Boot upgrade from 1.4.2 to 1.4.5
8 years ago
Eugene E. Kashpureff Jr
847eb5c30b
Libresonic v6.2.beta1
8 years ago
Andrew DeMaria
370fbeb6b4
Change the version back to 6.2
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Andrew DeMaria
d681eda914
Remove installation from project
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Andrew DeMaria
d6d53ef2f6
Standardize import order and add maven plugin to check
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Andrew DeMaria
49dc5176d5
General fixups
...
- Fixed tomcat deployment
- Removed web.xml
- Migrated to servlet api 3
- Added back in logging error resolver
- Fixed error jsp page not working
- Fixed login path when deployed to tomcat
- Cleanup custom liquibase precondition class
- Made the hsql index check more robust
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Rémi Cocula
d6870f7c75
Ignore some dependency analyse errors
8 years ago
Ruggero Russo
7191d804ec
Updated jaxb2 plugin to allow generation in non UTF-8 encoding
8 years ago
Andrew DeMaria
5ba7e77e11
Fix build dependency
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Rémi Cocula
cab1ee9b6e
Spring Boot : make login form work again.
8 years ago
Rémi Cocula
88ab70117e
Change version to 6.2.beta1.springboot
8 years ago
Rémi Cocula
8cc6ab95fd
Change version number to 6.2.beta1.spring4
8 years ago
Rémi Cocula
c3240b03bd
Remove direct Spring dependencies (as they come from SpringBoot)
8 years ago
Rémi Cocula
ddd8498040
Move to Spring4 + remove PasswordSettingsController + remove PremiumSettingsController
8 years ago
Rémi Cocula
3354f6623a
Change version to 6.2.spring4-SNAPSHOT.
8 years ago
François-Xavier Thomas
9b48d45d51
Fix libresonic-booter crash with Spring 3
8 years ago
Tom Powell
705a3d80b7
Make libresonic build again. ( #149 )
...
Fix dependency issues introduced by #143 .
8 years ago
Andrew DeMaria
a3c64d2024
Migrate from acegisecurity to spring security
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Andrew DeMaria
6896538a6f
Added missing dependencies
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Andrew DeMaria
d4422a8c37
Update to spring 3.X.X temporarily
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
8 years ago
Eugene E. Kashpureff Jr
31ddd33c9c
Libresonic v6.1.beta2
8 years ago
Eugene E. Kashpureff Jr
e0cd0d64eb
Libresonic v6.1.rc1
8 years ago