Skip to content

Updates for Steeltoe v3.3#1556

Merged
bart-vmware merged 29 commits into
3.xfrom
steeltoe-v3_3
Jul 31, 2025
Merged

Updates for Steeltoe v3.3#1556
bart-vmware merged 29 commits into
3.xfrom
steeltoe-v3_3

Conversation

@bart-vmware
Copy link
Copy Markdown
Member

@bart-vmware bart-vmware commented Jul 30, 2025

Description

This PR updates Steeltoe 3.x code with the following changes:

  • Added target for net8.0, removed target for netcoreapp3.1 (net6.0 is still targeted)
    • Exception: Integration/Messaging/Stream are incompatible with .NET 8, so they only target .NET 6
  • Bumped the version of vulnerable dependent NuGet packages
    • The oldest non-vulnerable version of OpenTelemetry requires .NET 8 versions of core packages like Microsoft.Extensions.Logging, so we had to bump those as well.
    • Because only vulnerable versions of OpenTelemetry.Exporter.Jaeger exist, Jaeger support has been removed.
  • Changed Steeltoe packages author from VMware to Broadcom
  • Marked APIs obsolete whose features are no longer available in Steeltoe v4 (see commit messages for affected directories)

Important

The changes in this PR represent the minimal effort to make all existing tests succeed. This means that Steeltoe 3.x still references very old third-party packages that are likely no longer supported. This is done to minimize the risk associated with existing users updating to this version. For any new developments, please use Steeltoe v4.

Related PR to add the redirect to the documentation website: SteeltoeOSS/Documentation#399.

Quality checklist

  • Your code complies with our Coding Style.
  • You've updated unit and/or integration tests for your change, where applicable.
  • You've updated documentation for your change, where applicable.
    If your change affects other repositories, such as Documentation, Samples and/or MainSite, add linked PRs here.
  • There's an open issue for the PR that you are making. If you'd like to propose a new feature or change, please open an issue to discuss the change or find an existing issue.
  • You've added required license files and/or file headers (explaining where the code came from with proper attribution), where code is copied from StackOverflow, a blog, or OSS.

@bart-vmware bart-vmware force-pushed the steeltoe-v3_3 branch 2 times, most recently from 2c6bb88 to 329e133 Compare July 30, 2025 12:34
- Bump vulnerable packages: OpenTelemetry.Instrumentation.Http, OpenTelemetry.Instrumentation.AspNetCore, OpenTelemetry.Extensions.Hosting
- Remove package OpenTelemetry.Exporter.Jaeger (only non-stable and vulnerable versions exist)
- The above requires a bump of Microsoft.Extensions.* packages to 8.0, because Otel lists them as minimal versions
… below the following directories:

/src/CircuitBreaker/src/Abstractions
/src/CircuitBreaker/src/Hystrix.MetricsEventsCore
/src/CircuitBreaker/src/Hystrix.MetricsStreamCore
/src/CircuitBreaker/src/HystrixBase
/src/CircuitBreaker/src/HystrixCore
/src/Common/src/Common.Expression
/src/Common/src/Common.Kubernetes
/src/Common/src/Common.RetryPolly
/src/Common/src/Common.Utils
/src/Configuration/src/KubernetesBase
/src/Configuration/src/KubernetesCore
/src/Connectors/src/Connector.EF6Core
/src/Discovery/src/Kubernetes
/src/Integration/src/Abstractions
/src/Integration/src/IntegrationBase
/src/Integration/src/RabbitMQ
/src/Management/src/KubernetesCore
/src/Stream/src/Abstractions
/src/Stream/src/BinderRabbitMQ
/src/Stream/src/StreamBase
/src/Messaging/src/Abstractions
/src/Messaging/src/MessagingBase
/src/Messaging/src/RabbitMQ
/src/Security/src/DataProtection.CredHubBase
/src/Security/src/DataProtection.CredHubCore
@bart-vmware bart-vmware marked this pull request as ready for review July 30, 2025 15:10
@bart-vmware bart-vmware requested a review from TimHess July 30, 2025 15:11
Comment thread build/management.yml
Comment thread src/Common/test/Common.TestResources/Steeltoe.Common.TestResources.csproj Outdated
Comment thread src/Connectors/test/Connector.EFCore.Test/Steeltoe.Connector.EFCore.Test.csproj Outdated
@sonarqubecloud
Copy link
Copy Markdown

@bart-vmware bart-vmware requested a review from TimHess July 31, 2025 13:21
Copy link
Copy Markdown
Member

@TimHess TimHess left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@bart-vmware bart-vmware merged commit 6715245 into 3.x Jul 31, 2025
30 checks passed
@bart-vmware bart-vmware deleted the steeltoe-v3_3 branch July 31, 2025 14:01
@bart-vmware bart-vmware added the ReleaseLine/3.x Identified as a feature/fix for the 3.x release line label Aug 7, 2025
@bart-vmware bart-vmware added this to the 3.3.0 milestone Aug 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ReleaseLine/3.x Identified as a feature/fix for the 3.x release line

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants