[FOLIO-3389] Upgrade spring-module-core to Spring Boot 2.6 Created: 13/Jan/22  Updated: 07/Apr/22  Resolved: 07/Apr/22

Status: Closed
Project: FOLIO
Components: None
Affects versions: None
Fix versions: None

Type: Story Priority: P2
Reporter: Julian Ladisch Assignee: William Welling
Resolution: Done Votes: 0
Labels: security, security-reviewed, springway
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original estimate: Not Specified

Issue links:
Relates
relates to FOLIO-3456 Test coverage for spring-module-core,... Open
relates to FOLIO-3457 spring-module-core: h2database:h2 Rem... Closed
relates to FOLIO-3458 spring-module-core: postgresql Remote... Closed
relates to FOLIO-3459 spring-module-core: jackson-databind ... Closed
relates to EDGCMNSPR-10 Spring Boot 2.6 Closed
relates to FOLSPRINGS-32 Spring Boot 2.6 for folio-spring-base Closed
Sprint:
Development Team: None

 Description   

Upgrade Spring Boot (spring-boot-dependencies) from 2.5.3 to 2.6.x for Lotus.

Spring Boot 2.5.x end of support: 2022-05-19 https://spring.io/projects/spring-boot#support

Spring Boot 2.6.x end of support: 2022-11-24 https://spring.io/projects/spring-boot#support

Lotus official release: 2022-04-04

Spring Boot 2.5.x support ends long before FOLIO releases Morning Glory in ~ August 2022.

Therefore we need Spring Boot 2.6.x for Lotus to get security fixes if needed.

Provided that spring-module-core should be used for Lotus.



 Comments   
Comment by William Welling [ 13/Jan/22 ]

Thanks for the issue Julian Ladisch

Comment by Craig McNally [ 10/Feb/22 ]

The security team has reviewed this, and agree that this needs to be done for morning glory.  Once folio-spring-base has been updated and released, we'll need all spring-way modules to upgrade to the new version of folio-spring-base.  Oleksii Petrenko is this something you can help coordinate (e.g create stories for each of the modules that use spring-way stack)?

Generated at Thu Feb 08 23:27:45 UTC 2024 using Jira 1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d.