I think the obvious answer as you mentioned is not to touch releases unless you have to.
On the other hand I'm not sure we want to add more dependencies on external libraries like caffeine unless there is a strong reason. We are already struggling with having way too many dependencies that complicate things. On Sat, Jun 9, 2018, 10:23 AM Jacques Le Roux <[email protected]> wrote: > Hi, > > After answering to Ben at https://issues.apache.org/jira/browse/OFBIZ-6747 > > I was wondering if, apart for security reasons, we would want to upgrade > libs in release branches. > > Actually it's obviously not needed, so just asking... > > Jacques > >
