想學(xué)Wordpress建站,網(wǎng)站建設(shè)改版,網(wǎng)站服務(wù)器計(jì)算機(jī)安全的措施,關(guān)于網(wǎng)站開發(fā)的創(chuàng)業(yè)計(jì)劃書升級(jí)背景 在私有化部署過程中#xff0c;客戶使用安全掃描工具檢測(cè)到大量安全漏洞#xff0c;主要集中在#xff1a; 框架版本過低#xff1a;Spring Boot 2.1.6.RELEASE#xff08;發(fā)布于 2019 年#xff09;JDK 版本過舊#xff1a;JDK 8#xff08;缺乏最新安全補(bǔ)…升級(jí)背景在私有化部署過程中客戶使用安全掃描工具檢測(cè)到大量安全漏洞主要集中在框架版本過低Spring Boot 2.1.6.RELEASE發(fā)布于 2019 年JDK 版本過舊JDK 8缺乏最新安全補(bǔ)丁第三方依賴多個(gè)依賴存在已知 CVE 漏洞基于安全合規(guī)和長期維護(hù)的考慮決定進(jìn)行大版本升級(jí)。當(dāng)前版本Spring Boot 2.1.6.RELEASE JDK 8目標(biāo)版本Spring Boot 3.5.4 JDK 21 LTS升級(jí)目標(biāo)與核心變化主要變化類別變化內(nèi)容遷移方式命名空間javax.* → jakarta.*自動(dòng)化遷移JDK 版本Java 8 → Java 21 LTS自動(dòng)化遷移 手動(dòng)調(diào)整第三方依賴大量依賴需要升級(jí)手動(dòng)處理API 文檔Swagger 2.x → SpringDoc OpenAPI 3.x配置調(diào)整安全配置WebSecurityConfigurerAdapter 廢棄重寫配置類為什么選擇自動(dòng)化遷移前兩項(xiàng)命名空間和 JDK 版本涉及的代碼改動(dòng)量極大手動(dòng)修改容易出錯(cuò)且效率低下。OpenRewrite作為業(yè)界成熟的自動(dòng)化重構(gòu)工具可以完成大部分繁瑣工作。完整升級(jí)步驟第一階段準(zhǔn)備工作JDK 8 環(huán)境代碼分支管理span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-shellspan stylecolor:#015692# /span確保主分支代碼為最新 git checkout dev git pull origin dev span stylecolor:#015692 # /span創(chuàng)建升級(jí)專用分支 git checkout -b upgrade/springboot3-jdk21 /code/span/span引入 OpenRewrite Maven 插件什么是 OpenRewriteOpenRewrite 是一個(gè)自動(dòng)化代碼重構(gòu)和遷移工具專為 Java 生態(tài)系統(tǒng)設(shè)計(jì)。核心優(yōu)勢(shì)精確安全在 AST抽象語法樹層面操作不會(huì)破壞代碼結(jié)構(gòu)批量處理一次性處理整個(gè)代碼庫可預(yù)覽使用rewrite:dryRun查看變更預(yù)覽可定制支持聲明式Y(jié)AML或編程式自定義規(guī)則工作原理OpenRewrite 通過解析源代碼生成無損語法樹LST在 AST 層面進(jìn)行精確轉(zhuǎn)換完整保留原始格式和縮進(jìn)所有注釋代碼風(fēng)格配置方式在pom.xml的plugins節(jié)點(diǎn)下添加span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-xmlspan stylecolor:#b75501plugin/span span stylecolor:#b75501groupId/spanorg.openrewrite.maven/span stylecolor:#b75501groupId/span span stylecolor:#b75501artifactId/spanrewrite-maven-plugin/span stylecolor:#b75501artifactId/span span stylecolor:#b75501version/span6.15.0/span stylecolor:#b75501version/span span stylecolor:#b75501configuration/span span stylecolor:#b75501exportDatatables/spantrue/span stylecolor:#b75501exportDatatables/span span stylecolor:#b75501activeRecipes/span span stylecolor:#656e77!-- 升級(jí)到 Java 21 --/span span stylecolor:#b75501recipe/spanorg.openrewrite.java.migrate.UpgradeToJava21/span stylecolor:#b75501recipe/span span stylecolor:#656e77!-- JUnit 4 to 5 --/span span stylecolor:#b75501recipe/spanorg.openrewrite.java.spring.boot2.SpringBoot2JUnit4to5Migration/span stylecolor:#b75501recipe/span span stylecolor:#656e77!-- Spring Boot 3.4插件暫不支持 3.5升級(jí)后手動(dòng)改 --/span span stylecolor:#b75501recipe/spanorg.openrewrite.java.spring.boot3.UpgradeSpringBoot_3_4/span stylecolor:#b75501recipe/span /span stylecolor:#b75501activeRecipes/span /span stylecolor:#b75501configuration/span span stylecolor:#b75501dependencies/span span stylecolor:#b75501dependency/span span stylecolor:#b75501groupId/spanorg.openrewrite.recipe/span stylecolor:#b75501groupId/span span stylecolor:#b75501artifactId/spanrewrite-migrate-java/span stylecolor:#b75501artifactId/span span stylecolor:#b75501version/span3.14.1/span stylecolor:#b75501version/span span stylecolor:#b75501scope/spanruntime/span stylecolor:#b75501scope/span /span stylecolor:#b75501dependency/span span stylecolor:#b75501dependency/span span stylecolor:#b75501groupId/spanorg.openrewrite.recipe/span stylecolor:#b75501groupId/span span stylecolor:#b75501artifactId/spanrewrite-spring/span stylecolor:#b75501artifactId/span span stylecolor:#b75501version/span6.11.1/span stylecolor:#b75501version/span /span stylecolor:#b75501dependency/span /span stylecolor:#b75501dependencies/span /span stylecolor:#b75501plugin/span /code/span/span配方Recipe說明UpgradeSpringBoot_3_4 升級(jí)至 Spring Boot 3.4.x插件暫不支持 3.5升級(jí)后手動(dòng)修改版本號(hào)即可UpgradeToJava21 升級(jí)至 JDK 21Spring Boot 配方僅升級(jí)到 JDK 17需額外添加此配方SpringBoot2JUnit4to5Migration 升級(jí)測(cè)試框架避免自動(dòng)化測(cè)試報(bào)錯(cuò)提示你也可以編寫自定義配方來處理項(xiàng)目特定的遷移需求。執(zhí)行自動(dòng)化遷移span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-shellmvn rewrite:run /code/span/span或者在 IDEA 中通過 Maven 面板執(zhí)行執(zhí)行時(shí)間幾分鐘到幾十分鐘不等取決于項(xiàng)目規(guī)模?？赡苡龅降膯栴}如果某些類包含特殊代碼導(dǎo)致報(bào)錯(cuò)可以先注釋掉待升級(jí)完成后再處理執(zhí)行完成后可以刪除該插件也可以保留以便后續(xù)增量升級(jí)OpenRewrite 自動(dòng)完成的變更執(zhí)行完成后主要變化包括依賴升級(jí)pom.xml中的依賴版本自動(dòng)升級(jí)Spring Boot 版本升級(jí)到 3.4.x手動(dòng)改為 3.5.4包名變更javax.servlet.* → jakarta.servlet.*javax.persistence.* → jakarta.persistence.*javax.validation.* → jakarta.validation.*API 文檔遷移Swagger 2.x → SpringDoc OpenAPI 3.xJDK 新特性應(yīng)用Text Blocks多行字符串的優(yōu)雅處理span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#656e77// 自動(dòng)轉(zhuǎn)換為/span span stylecolor:#b75501String/span span stylecolor:#54790djson/span span stylecolor:#ab5656/span span stylecolor:#54790d { name: user, age: 18 } /span; /code/span/spaninstanceof 模式匹配簡(jiǎn)化類型判斷和轉(zhuǎn)換span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#015692if/span (obj span stylecolor:#015692instanceof/span String s) { System.out.println(s.toUpperCase()); } /code/span/spanString.formatted()替代String.format()span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#54790dHello, %s!/span.formatted(name); /code/span/span集合增強(qiáng) getFirst() 替代 get(0)Serial注解標(biāo)記序列化相關(guān)字段第三方庫升級(jí)Apache HttpClientApache Commons 系列其他常用工具庫增量合并場(chǎng)景處理場(chǎng)景執(zhí)行 Rewrite 后舊分支又有代碼提交合并時(shí)出現(xiàn)大量javax包名和 Swagger 注解沖突。解決方案使用 IntelliJ IDEA 自帶的 Refactor 功能本質(zhì)也是基于 OpenRewrite操作步驟打開 IDEA選擇Refactor → Migrate Packages and Classes選擇遷移規(guī)則javax → jakarta預(yù)覽變更并執(zhí)行第二階段環(huán)境切換JDK 21 環(huán)境重要分界線以下操作需在 JDK 21 環(huán)境下進(jìn)行。6. 修改 IDEA 項(xiàng)目配置修改 SDK 和 Language Level快捷鍵Ctrl Alt Shift S修改 Modules 的 Language Level修改 Java Compiler快捷鍵Ctrl Alt S核心問題與解決方案問題一Hibernate DDL Auto 的陷阱嚴(yán)重警告在完成以下配置前切勿啟動(dòng)項(xiàng)目否則可能導(dǎo)致數(shù)據(jù)庫結(jié)構(gòu)被錯(cuò)誤修改。問題背景新舊版本 Hibernate 的行為差異為什么要禁用在生產(chǎn)環(huán)境中使用spring.jpa.hibernate.ddl-autoupdate存在嚴(yán)重風(fēng)險(xiǎn)數(shù)據(jù)安全風(fēng)險(xiǎn)自動(dòng)更新可能導(dǎo)致意外的數(shù)據(jù)丟失或結(jié)構(gòu)變更性能問題啟動(dòng)時(shí)全表檢查會(huì)顯著增加應(yīng)用啟動(dòng)時(shí)間版本控制缺失無法追蹤數(shù)據(jù)庫變更歷史不利于團(tuán)隊(duì)協(xié)作和回滾升級(jí)后風(fēng)險(xiǎn)更高Hibernate 6.x 的校驗(yàn)更嚴(yán)格誤操作概率增加解決方案方案一配置優(yōu)先級(jí)控制推薦在 CI/CD 啟動(dòng)腳本中設(shè)置 VM 參數(shù)span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-shelljava -jar app.jar -Dspring.jpa.hibernate.ddl-autonone /code/span/span優(yōu)先級(jí)VM 參數(shù) 配置中心Apollo/Nacos application.properties方案二使用專業(yè)的數(shù)據(jù)庫版本管理工具推薦使用Flyway或Liquibase管理數(shù)據(jù)庫腳本span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-xmlspan stylecolor:#b75501dependency/span span stylecolor:#b75501groupId/spanorg.flywaydb/span stylecolor:#b75501groupId/span span stylecolor:#b75501artifactId/spanflyway-core/span stylecolor:#b75501artifactId/span /span stylecolor:#b75501dependency/span /code/span/span方案三結(jié)構(gòu)對(duì)比工具Navicat提供結(jié)構(gòu)同步功能DataGripIntelliJ 系產(chǎn)品支持?jǐn)?shù)據(jù)庫結(jié)構(gòu)對(duì)比問題二Spring Security 配置遷移核心變化WebSecurityConfigurerAdapter已廢棄推薦使用Lambda DSL配置方式配置方式從繼承改為 Bean 注冊(cè)遷移示例舊版配置Spring Security 5.xspan stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#015692Configuration/span span stylecolor:#015692EnableWebSecurity/span span stylecolor:#015692public/span span stylecolor:#015692class/span span stylecolor:#b75501SecurityConfig/span span stylecolor:#015692extends/span span stylecolor:#b75501WebSecurityConfigurerAdapter/span { span stylecolor:#015692Override/span span stylecolor:#015692protected/span span stylecolor:#015692void/span span stylecolor:#b75501configure/span(HttpSecurity http) span stylecolor:#015692throws/span Exception { http .csrf().disable() .sessionManagement() .sessionCreationPolicy(SessionCreationPolicy.STATELESS) .and() .authorizeRequests() .antMatchers(span stylecolor:#54790d/api/public/**/span).permitAll() .anyRequest().authenticated(); } } /code/span/span新版配置Spring Security 6.xspan stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#015692Configuration/span span stylecolor:#015692EnableWebSecurity/span span stylecolor:#015692public/span span stylecolor:#015692class/span span stylecolor:#b75501SecurityConfig/span { span stylecolor:#015692private/span span stylecolor:#015692final/span TokenProvider tokenProvider; span stylecolor:#015692public/span span stylecolor:#b75501SecurityConfig/span(TokenProvider tokenProvider) { span stylecolor:#b75501this/span.tokenProvider tokenProvider; } span stylecolor:#015692Bean/span span stylecolor:#015692public/span SecurityFilterChain span stylecolor:#b75501filterChain/span(HttpSecurity http) span stylecolor:#015692throws/span Exception { http .csrf(AbstractHttpConfigurer::disable) .sessionManagement(sessionManagement - sessionManagement .sessionCreationPolicy(SessionCreationPolicy.STATELESS)) .authorizeHttpRequests(authorizeRequests - authorizeRequests span stylecolor:#656e77// 允許所有 OPTIONS 請(qǐng)求/span .requestMatchers(OPTIONS, span stylecolor:#54790d**/span).permitAll() .requestMatchers( span stylecolor:#54790d/swagger-ui/**/span, span stylecolor:#54790d/v3/api-docs/**/span, span stylecolor:#54790d/swagger-resources/**/span, span stylecolor:#54790d/images/**/span, span stylecolor:#54790d/webjars/**/span).permitAll() .anyRequest().authenticated()) .addFilterBefore(span stylecolor:#015692new/span span stylecolor:#b75501JWTFilter/span(tokenProvider), UsernamePasswordAuthenticationFilter.class); span stylecolor:#015692return/span http.build(); } } /code/span/spanRequestMatcher 調(diào)整注意事項(xiàng)新增 SpringDoc 路徑必須span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-java/swagger-uispan stylecolor:#656e77/** /v3/api-docs/** /span/code/span/span修正通配符寫法span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-java? 錯(cuò)誤 span stylecolor:#656e77//**/*.js/span ? 正確 span stylecolor:#656e77/**/*.js 否則會(huì)拋出 PatternParseException /span/code/span/span問題三SpringDoc OpenAPI 配置Swagger → SpringDoc 遷移span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-java !-- 移除舊的 Swagger 依賴 -- !-- dependency groupIdio.springfox/groupId artifactIdspringfox-swagger2/artifactId /dependency -- !-- 添加新的 SpringDoc 依賴 -- dependency groupIdorg.springdoc/groupId artifactIdspringdoc-openapi-starter-webmvc-ui/artifactId versionspan stylecolor:#b755012.3/spanspan stylecolor:#b75501.0/span/version /dependency /code/span/span配置示例span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#015692Configuration/span span stylecolor:#015692OpenAPIDefinition/span span stylecolor:#015692public/span span stylecolor:#015692class/span span stylecolor:#b75501SwaggerConfig/span { span stylecolor:#015692Bean/span span stylecolor:#015692public/span OpenAPI span stylecolor:#b75501openAPI/span() { span stylecolor:#b75501OpenAPI/span span stylecolor:#54790dopenAPI/span span stylecolor:#ab5656/span span stylecolor:#015692new/span span stylecolor:#b75501OpenAPI/span(); openAPI.info(span stylecolor:#015692new/span span stylecolor:#b75501Info/span().title(span stylecolor:#54790dAPI 文檔/span).version(span stylecolor:#54790d1.0/span)); span stylecolor:#656e77// 配置 Authorization 登錄鑒權(quán)/span MapString, SecurityScheme map Map.of(span stylecolor:#54790dAuthorization/span, span stylecolor:#015692new/span span stylecolor:#b75501SecurityScheme/span() .type(SecurityScheme.Type.APIKEY) .in(SecurityScheme.In.HEADER) .name(span stylecolor:#54790dAuthorization/span)); openAPI.components(span stylecolor:#015692new/span span stylecolor:#b75501Components/span().securitySchemes(map)); map.keySet().forEach(key - openAPI.addSecurityItem(span stylecolor:#015692new/span span stylecolor:#b75501SecurityRequirement/span().addList(key))); span stylecolor:#015692return/span openAPI; } } /code/span/span注解對(duì)應(yīng)關(guān)系Swagger 2.xSpringDoc OpenAPI 3.xApiTagApiOperationOperationApiParamParameterApiModelSchemaApiModelPropertySchema訪問地址變更原 Swagger UI 地址http://localhost:8080/swagger-ui.html新 SpringDoc 地址http://localhost:8080/swagger-ui/index.html問題四依賴沖突與安全漏洞修復(fù)檢測(cè)工具使用 IDEA 自帶的依賴分析工具必須升級(jí)的依賴存在高危漏洞推薦使用OWASP Dependency-Check或Snyk掃描span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-shellmvn dependency-check:check /code/span/span解決依賴沖突的技巧問題Maven 依賴解析采用最短路徑優(yōu)先和第一聲明優(yōu)先原則可能導(dǎo)致舊版本覆蓋新版本。解決方案顯式聲明期望的版本span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javadependencies !-- 顯式聲明 Spring Framework 版本避免被傳遞依賴覆蓋 -- dependency groupIdorg.springframework/groupId artifactIdspring-core/artifactId versionspan stylecolor:#b755016.1/spanspan stylecolor:#b75501.3/span/version /dependency /dependencies /code/span/span快速檢測(cè)技巧在 IDEA 的 Maven 依賴樹中搜索RELEASESpring 新版本已不使用RELEASE后綴搜索到的基本都是舊版本。問題五URL 尾斜杠匹配策略變更行為變化版本行為Spring Boot 2.x/api/user/get 和 /api/user/get/ 視為同一接口Spring Boot 3.x/api/user/get 和 /api/user/get/ 視為不同接口常見導(dǎo)致尾斜杠的情況Case 1類注解帶尾斜杠span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#015692RequestMapping(/api/user/)/span span stylecolor:#015692public/span span stylecolor:#015692class/span span stylecolor:#b75501UserController/span { span stylecolor:#015692PostMapping(login)/span span stylecolor:#656e77// 實(shí)際路徑/api/user/login/span } /code/span/spanCase 2空字符串映射span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#015692RequestMapping(/api/user)/span span stylecolor:#015692public/span span stylecolor:#015692class/span span stylecolor:#b75501UserController/span { span stylecolor:#015692PostMapping()/span span stylecolor:#656e77// 實(shí)際路徑/api/user/帶尾斜杠/span } /code/span/spanCase 3根路徑映射span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#015692PostMapping(/)/span span stylecolor:#656e77// 實(shí)際路徑/帶尾斜杠/span /code/span/span**** 檢查方式IDEA Endpoints 工具窗口查看所有端點(diǎn)SpringDoc UI訪問 Swagger 頁面檢查臨時(shí)解決方案不推薦長期使用span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaspan stylecolor:#015692import/span org.springframework.context.annotation.Configuration; span stylecolor:#015692import/span org.springframework.web.servlet.config.annotation.PathMatchConfigurer; span stylecolor:#015692import/span org.springframework.web.servlet.config.annotation.WebMvcConfigurer; span stylecolor:#015692Configuration/span span stylecolor:#015692public/span span stylecolor:#015692class/span span stylecolor:#b75501WebConfiguration/span span stylecolor:#015692implements/span span stylecolor:#b75501WebMvcConfigurer/span { span stylecolor:#015692Override/span span stylecolor:#015692public/span span stylecolor:#015692void/span span stylecolor:#b75501configurePathMatch/span(PathMatchConfigurer configurer) { span stylecolor:#656e77// 設(shè) 置 為 true 以 忽 略 尾 斜 杠 恢 復(fù) 舊 版 本 行 為/span configurer.setUseTrailingSlashMatch(span stylecolor:#b75501true/span); } } /code/span/span注意__ ·setUseTrailingSlashMatch在 Spring 6.x 后已標(biāo)記為廢棄后續(xù)版本將刪除。建議逐步修正所有端點(diǎn)去除尾斜杠。根本解決方案修正所有 Controller 的路徑映射通知前端團(tuán)隊(duì)同步修改調(diào)用路徑如果有硬編碼的 URL全局搜索并修正使用測(cè)試確保前后端調(diào)用正常問題六Apache POI / EasyExcel 升級(jí)背景Apache POI 舊版本 5.0存在多個(gè) CVE 安全漏洞必須升級(jí)。推薦方案對(duì)于新項(xiàng)目直接使用FastExcelspan stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javadependency groupIdcn.idev.excel/groupId artifactIdfastexcel/artifactId versionspan stylecolor:#b755011.0/spanspan stylecolor:#b75501.0/span/version /dependency /code/span/span對(duì)于使用 EasyExcel 的舊項(xiàng)目span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javadependency groupIdcom.alibaba/groupId artifactIdeasyexcel/artifactId versionspan stylecolor:#b755014.0/spanspan stylecolor:#b75501.3/span/version /dependency /code/span/span說明EasyExcel 已不再維護(hù)FastExcel 是社區(qū)維護(hù)的替代方案API 基本兼容。遷移注意事項(xiàng)EasyExcel 跨大版本升級(jí)2.x → 4.xAPI 變化較大主要改動(dòng)1.監(jiān)聽器接口方法簽名調(diào)整2.部分工具類包路徑變更3.自定義轉(zhuǎn)換器需要適配新接口建議參考官方遷移文檔EasyExcel官方文檔 - 基于Java的Excel處理工具 | Easy Excel 官網(wǎng)問題七JDK 模塊化限制--add-opens問題現(xiàn)象某些依賴庫使用反射訪問 JDK 內(nèi)部 API在 JDK 9 模塊化系統(tǒng)下會(huì)報(bào)錯(cuò)span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaInaccessibleObjectException: Unable to make field accessible: span stylecolor:#015692module/span java.base does not span stylecolor:#54790dopens java.net/span to unnamed span stylecolor:#015692module/span /code/span/span解決方案在 IDEA 運(yùn)行配置中添加 VM 參數(shù)開啟 VM 參數(shù)配置默認(rèn)隱藏解決方案在 IDEA 運(yùn)行配置中添加 VM 參數(shù)開啟 VM 參數(shù)配置默認(rèn)隱藏常見需要開放的模塊span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-java--add-opens java.base/java.langALL-UNNAMED --add-opens java.base/java.utilALL-UNNAMED --add-opens java.base/java.lang.reflectALL-UNNAMED --add-opens java.base/sun.nio.chALL-UNNAMED /code/span/span問題八過期配置屬性警告問題現(xiàn)象啟動(dòng)時(shí)出現(xiàn)警告span stylecolor:#000000span stylebackground-color:#fefef2code classlanguage-javaProperty span stylecolor:#54790dspring.xxx.yyy/span is deprecated /code/span/span解決方案查看 Spring Boot 官方遷移文檔使用 IDEA 的智能提示查看替代屬性修改配置文件 常見過期屬性application.yml或配置中心)常見過期屬性過期屬性替代屬性spring.datasource.type自動(dòng)推斷無需配置spring.jpa.properties.hibernate.temp.use_jdbc_metadata_defaults已移除management.metrics.export.prometheus.enabledmanagement.prometheus.metrics.export.enabled完整測(cè)試清單升級(jí)完成后務(wù)必進(jìn)行全面的回歸測(cè)試Spring Security認(rèn)證、授權(quán)是否正常SpringDocAPI 文檔是否可訪問 /swagger-ui/index.html 數(shù)據(jù)庫操作JPA/MyBatis 是否正常工作緩存Redis/Caffeine 等緩存是否生效消息隊(duì)列RabbitMQ/Kafka 等是否正常定時(shí)任務(wù)Scheduled/Quartz 是否按預(yù)期執(zhí)行文件上傳/下載文件 IO 操作是否正常業(yè)務(wù)功能核心業(yè)務(wù)流程是否正常重點(diǎn)關(guān)注有代碼改動(dòng)的地方性能測(cè)試對(duì)比升級(jí)前后的性能指標(biāo)升級(jí)感悟框架層面的變化趨勢(shì)通過這次升級(jí)我觀察到現(xiàn)代框架的一些發(fā)展趨勢(shì)校驗(yàn)更嚴(yán)格Spring 不再容忍 URL 尾斜杠的模糊匹配循環(huán)依賴檢測(cè)更嚴(yán)格默認(rèn)禁止Hibernate 對(duì)實(shí)體狀態(tài)的校驗(yàn)更精確安全性優(yōu)先默認(rèn)配置更保守廢棄不安全的 API強(qiáng)制升級(jí)修復(fù)已知漏洞現(xiàn)代化 APILambda DSL 配置風(fēng)格函數(shù)式編程支持更簡(jiǎn)潔的 API 設(shè)計(jì)依賴選擇建議基于這次升級(jí)經(jīng)驗(yàn)對(duì)于第三方庫的選擇建議優(yōu)先選擇? 國際主流項(xiàng)目Apache、Spring 生態(tài)等? 有完善文檔和測(cè)試的項(xiàng)目? 活躍維護(hù)且社區(qū)規(guī)模大的項(xiàng)目? 語義化版本管理清晰的項(xiàng)目謹(jǐn)慎選擇?? 缺乏自動(dòng)化測(cè)試的項(xiàng)目?? 長期未更新的項(xiàng)目?? API 設(shè)計(jì)不穩(wěn)定、頻繁 Breaking Change 的項(xiàng)目?? 文檔不全、維護(hù)團(tuán)隊(duì)不穩(wěn)定的項(xiàng)目自動(dòng)化遷移的價(jià)值OpenRewrite 等自動(dòng)化工具在大版本升級(jí)中的價(jià)值無可替代減少 90% 以上的機(jī)械性改動(dòng)避免手工替換導(dǎo)致的遺漏保持代碼風(fēng)格和注釋降低升級(jí)風(fēng)險(xiǎn)建議在日常開發(fā)中也關(guān)注此類工具提升團(tuán)隊(duì)整體效率。