Update to Spring Boot 2.7.17

[onobc]

Let's update to Spring Boot 2.7.17 as well as any transitive dependency versions that we lock onto.

• flyway-core/8.5.13
• spring-security 5.7.11
• spring-framework 5.3.30
• more (I am sure there are...)

Lets also make sure we are on the latest Spring Cloud patches at this time.

[sandeepbal1989]

@onobc May be Snakeyaml can also be upgraded to use 2.0 with this release?
Spring-boot-2.7.17 has already started giving compatibility towards using the safeconstructor for snakeyaml-2.0

Usage e.g.
org.springframework.boot.json.YamlJsonParser private final Yaml yaml = new Yaml(new TypeLimitedConstructor());

[onobc]

Hi @sandeepbal1989 ,

We have already mitigated against the vulnerability in 1.x. Also, Spring Boot is still shipping w/ 1.30 (Dataflow is using the latest 1.33). but have no plans to bump up to 2.x When/if Boot updates to 2.x we will at that time.

If you have someone nagging you because of the CVE please just point them to our advisory https://github.com/spring-cloud/spring-cloud-dataflow/security/advisories/GHSA-578p-phm8-hcj9.

Thanks