Bump vaadin.version from 8.12.1 to 8.14.2

[dependabot]

Bumps vaadin.version from 8.12.1 to 8.14.2.
Updates vaadin-server from 8.12.1 to 8.14.2

Release notes

Sourced from vaadin-server's releases.

Vaadin Framework 8.14.2 is a maintenance release with the following fixes :

• fix: avoid ConcurrentModificationException in Binder
• fix: don't update bean property which is read-only bound
• fix: Ensure that side effects of readBean does not set hasChanges true
• fix: Do not allow border to grow row height
• fix: JavaDoc for setting page title
• fix: Grid column reorder with partially hidden joined header cells
• fix: compatibility Grid column reorder of partially hidden joined cells.

See 8.14.2 milestone for all changes

Vaadin Framework 8.14.1 is a maintenance release with the following fixes :

• fix: Add MPR UI id request parameter(part of Warranty fix in MPR project)
• fix: VaadinService.reinitializeSession fails if there are multiple VaadinSession in the HTTP session
• fix: ConcurrentModificationException in vaadin-shared on karaf-4.2.x

Behavior breaking changes

• fix: Add row limit of 500 to DataCommunicator row data requests to avoid denial of service attacks (CVE-2021-33609) There will be method to override this behavior in upcoming versions.

Internal Changes

• deprecate the vaadin-snapshot usage in Framework project, deploy snapshot release to vaadin-prerelease

See 8.14.1 milestone for all changes

Vaadin Framework 8.14.0 is a feature release contains a number of new features and bug fixes.

#Enhancements

• #12357 Reworked and cleaned up client-side TabSheet and Accordion.

#Fixes

• #12355 fix: Prevent deadlock in findOrCreateVaadinSession
• #12281 Fix validation in non-buffered Grid editor

#Deprecation

• #12348 Deprecating Flash component.

All changes in 8.14.0 can be found here

Vaadin Framework 8.14.0.beta1 is a pre-release for evaluating a number of new features and bug fixes. The API in this beta version is not considered final and may change based on user feedback.

#Enhancements

• #12357 Reworked and cleaned up client-side TabSheet and Accordion.

#Fixes

• #12355 fix: Prevent deadlock in findOrCreateVaadinSession
• #12281 Fix validation in non-buffered Grid editor

#Deprecation

... (truncated)

Commits

• 6bb9177 Remove obsolete comment and assert in Binder (#12456) (#12465)
• 6772825 fix: avoid ConcurrentModificationException in Binder (#12458) (#12464)
• 42edf05 fix: avoid ConcurrentModificationException in Binder (#12458) (#12464)
• 2723cce fix: don't update bean property which is read-only bound (#12457) (#12463)
• 53d266e fix: Ensure that side effects of readBean does not set hasChanges true (#12462)
• 6c9b3f0 Fix Grid column reorder with partially hidden joined header cells. (#12461)
• 4b3d4d2 Fix compatibility Grid column reorder of partially hidden joined cells. (#12460)
• 1fa2351 chore: avoid repackaging of google elemental dep and use it directly (#12459)
• 01d4fbc Use latest jetty 9.4 version for servlet test (#12448) (#12453)
• 0da11d0 fix: Do not allow border to grow row height (#12449) (#12452)
• Additional commits viewable in compare view

Updates vaadin-client from 8.12.1 to 8.14.2

Release notes

Sourced from vaadin-client's releases.

Vaadin Framework 8.14.2 is a maintenance release with the following fixes :

• fix: avoid ConcurrentModificationException in Binder
• fix: don't update bean property which is read-only bound
• fix: Ensure that side effects of readBean does not set hasChanges true
• fix: Do not allow border to grow row height
• fix: JavaDoc for setting page title
• fix: Grid column reorder with partially hidden joined header cells
• fix: compatibility Grid column reorder of partially hidden joined cells.

See 8.14.2 milestone for all changes

Vaadin Framework 8.14.1 is a maintenance release with the following fixes :

• fix: Add MPR UI id request parameter(part of Warranty fix in MPR project)
• fix: VaadinService.reinitializeSession fails if there are multiple VaadinSession in the HTTP session
• fix: ConcurrentModificationException in vaadin-shared on karaf-4.2.x

Behavior breaking changes

• fix: Add row limit of 500 to DataCommunicator row data requests to avoid denial of service attacks (CVE-2021-33609) There will be method to override this behavior in upcoming versions.

Internal Changes

• deprecate the vaadin-snapshot usage in Framework project, deploy snapshot release to vaadin-prerelease

See 8.14.1 milestone for all changes

Vaadin Framework 8.14.0 is a feature release contains a number of new features and bug fixes.

#Enhancements

• #12357 Reworked and cleaned up client-side TabSheet and Accordion.

#Fixes

• #12355 fix: Prevent deadlock in findOrCreateVaadinSession
• #12281 Fix validation in non-buffered Grid editor

#Deprecation

• #12348 Deprecating Flash component.

All changes in 8.14.0 can be found here

Vaadin Framework 8.14.0.beta1 is a pre-release for evaluating a number of new features and bug fixes. The API in this beta version is not considered final and may change based on user feedback.

#Enhancements

• #12357 Reworked and cleaned up client-side TabSheet and Accordion.

#Fixes

• #12355 fix: Prevent deadlock in findOrCreateVaadinSession
• #12281 Fix validation in non-buffered Grid editor

#Deprecation

... (truncated)

Commits

• 6bb9177 Remove obsolete comment and assert in Binder (#12456) (#12465)
• 6772825 fix: avoid ConcurrentModificationException in Binder (#12458) (#12464)
• 42edf05 fix: avoid ConcurrentModificationException in Binder (#12458) (#12464)
• 2723cce fix: don't update bean property which is read-only bound (#12457) (#12463)
• 53d266e fix: Ensure that side effects of readBean does not set hasChanges true (#12462)
• 6c9b3f0 Fix Grid column reorder with partially hidden joined header cells. (#12461)
• 4b3d4d2 Fix compatibility Grid column reorder of partially hidden joined cells. (#12460)
• 1fa2351 chore: avoid repackaging of google elemental dep and use it directly (#12459)
• 01d4fbc Use latest jetty 9.4 version for servlet test (#12448) (#12453)
• 0da11d0 fix: Do not allow border to grow row height (#12449) (#12452)
• Additional commits viewable in compare view

Updates vaadin-themes from 8.12.1 to 8.14.2

Release notes

Sourced from vaadin-themes's releases.

Vaadin Framework 8.14.2 is a maintenance release with the following fixes :

• fix: avoid ConcurrentModificationException in Binder
• fix: don't update bean property which is read-only bound
• fix: Ensure that side effects of readBean does not set hasChanges true
• fix: Do not allow border to grow row height
• fix: JavaDoc for setting page title
• fix: Grid column reorder with partially hidden joined header cells
• fix: compatibility Grid column reorder of partially hidden joined cells.

See 8.14.2 milestone for all changes

Vaadin Framework 8.14.1 is a maintenance release with the following fixes :

• fix: Add MPR UI id request parameter(part of Warranty fix in MPR project)
• fix: VaadinService.reinitializeSession fails if there are multiple VaadinSession in the HTTP session
• fix: ConcurrentModificationException in vaadin-shared on karaf-4.2.x

Behavior breaking changes

• fix: Add row limit of 500 to DataCommunicator row data requests to avoid denial of service attacks (CVE-2021-33609) There will be method to override this behavior in upcoming versions.

Internal Changes

• deprecate the vaadin-snapshot usage in Framework project, deploy snapshot release to vaadin-prerelease

See 8.14.1 milestone for all changes

Vaadin Framework 8.14.0 is a feature release contains a number of new features and bug fixes.

#Enhancements

• #12357 Reworked and cleaned up client-side TabSheet and Accordion.

#Fixes

• #12355 fix: Prevent deadlock in findOrCreateVaadinSession
• #12281 Fix validation in non-buffered Grid editor

#Deprecation

• #12348 Deprecating Flash component.

All changes in 8.14.0 can be found here

Vaadin Framework 8.14.0.beta1 is a pre-release for evaluating a number of new features and bug fixes. The API in this beta version is not considered final and may change based on user feedback.

#Enhancements

• #12357 Reworked and cleaned up client-side TabSheet and Accordion.

#Fixes

• #12355 fix: Prevent deadlock in findOrCreateVaadinSession
• #12281 Fix validation in non-buffered Grid editor

#Deprecation

... (truncated)

Commits

• 6bb9177 Remove obsolete comment and assert in Binder (#12456) (#12465)
• 6772825 fix: avoid ConcurrentModificationException in Binder (#12458) (#12464)
• 42edf05 fix: avoid ConcurrentModificationException in Binder (#12458) (#12464)
• 2723cce fix: don't update bean property which is read-only bound (#12457) (#12463)
• 53d266e fix: Ensure that side effects of readBean does not set hasChanges true (#12462)
• 6c9b3f0 Fix Grid column reorder with partially hidden joined header cells. (#12461)
• 4b3d4d2 Fix compatibility Grid column reorder of partially hidden joined cells. (#12460)
• 1fa2351 chore: avoid repackaging of google elemental dep and use it directly (#12459)
• 01d4fbc Use latest jetty 9.4 version for servlet test (#12448) (#12453)
• 0da11d0 fix: Do not allow border to grow row height (#12449) (#12452)
• Additional commits viewable in compare view

Updates vaadin-maven-plugin from 8.12.1 to 8.14.2

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)