[FOLIO-3389] Upgrade spring-module-core to Spring Boot 2.6 Created: 13/Jan/22 Updated: 07/Apr/22 Resolved: 07/Apr/22 |
|
| Status: | Closed |
| Project: | FOLIO |
| Components: | None |
| Affects versions: | None |
| Fix versions: | None |
| Type: | Story | Priority: | P2 |
| Reporter: | Julian Ladisch | Assignee: | William Welling |
| Resolution: | Done | Votes: | 0 |
| Labels: | security, security-reviewed, springway | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original estimate: | Not Specified | ||
| Issue links: |
|
||||||||||||||||||||||||||||
| Sprint: | |||||||||||||||||||||||||||||
| Development Team: | None | ||||||||||||||||||||||||||||
| Description |
|
Upgrade Spring Boot (spring-boot-dependencies) from 2.5.3 to 2.6.x for Lotus. Spring Boot 2.5.x end of support: 2022-05-19 https://spring.io/projects/spring-boot#support Spring Boot 2.6.x end of support: 2022-11-24 https://spring.io/projects/spring-boot#support Lotus official release: 2022-04-04 Spring Boot 2.5.x support ends long before FOLIO releases Morning Glory in ~ August 2022. Therefore we need Spring Boot 2.6.x for Lotus to get security fixes if needed. Provided that spring-module-core should be used for Lotus. |
| Comments |
| Comment by William Welling [ 13/Jan/22 ] |
|
Thanks for the issue Julian Ladisch |
| Comment by Craig McNally [ 10/Feb/22 ] |
|
The security team has reviewed this, and agree that this needs to be done for morning glory. Once folio-spring-base has been updated and released, we'll need all spring-way modules to upgrade to the new version of folio-spring-base. Oleksii Petrenko is this something you can help coordinate (e.g create stories for each of the modules that use spring-way stack)? |