Hiya Carey Assuming you mean upgrading within GoCD itself, please see https://github.com/gocd/gocd/discussions/12947#discussioncomment-10071870 - I suspect because it's non-trivial.
Current GoCD Hibernate version will not work with Spring 5+, and Spring Security will need upgrading alongside Spring. Sequence of events probably needs to go - Decommission legacy Spring usages of non-persistence features e.g Velocity templating (DONE) - Upgrade Hibernate from 3.6 to 4.0 to 5.0 to 5.1 to 5.2 (to 5.3 to 5.4 to 5.5 if you're lucky and compatible with existing Spring 4.3...) https://github.com/gocd/gocd/issues/10262 - Upgrade Spring Framework to v5 at least. Upgrade Spring Security. - Upgrade Spring Framework to v6. Upgrade Spring Security. Figuring out the matrix of compatible versions when going back so far between Hibernate, Spring and Spring Security is probably not for the faint-hearted, if one doesn't want to change everything at the same time. I understand anecdotally from the earlier team that maintained GoCD within Thoughtworks that the Hibernate upgrade beyond 3.6 had been attempted and was difficult (or perhaps it'd have been done long ago), but I have not tried it myself yet. If you want to help out and do so in public, with a goal to getting all of GoCD's tests passing and releasable, I am interested in the journey. The Hibernate upgrade is the next thing I want to attempt with GoCD when I have some space/enthusiasm. -Chad On Thu, Sep 26, 2024 at 3:28 PM 'Carey Tews' via go-cd < go-cd@googlegroups.com> wrote: > One of the "remediations" of our Cyber Essentials Plus (UK) audit requires > us to upgrade Spring Framework to >= 6.1.13 on our build server. > > Is there a reason not to do this? > Has anyone had experience doing it? > > I'm going to do this on my own on a dev system, but I'm concerned that > it's not possible, for some reason. > > I love GoCD and have been using it since 2017, and my life is not a living > hell, because of it. > > Would love to get some advice. > > Thanks :-) > > Carey > > -- > You received this message because you are subscribed to the Google Groups > "go-cd" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to go-cd+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/go-cd/eb8c8572-1441-4750-b928-9e8d63418555n%40googlegroups.com > <https://groups.google.com/d/msgid/go-cd/eb8c8572-1441-4750-b928-9e8d63418555n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "go-cd" group. To unsubscribe from this group and stop receiving emails from it, send an email to go-cd+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/go-cd/CAA1RwH-3Gz%2BSnCH_f4UD6Peh-MnhBbzuiSdzfWnrrh9yFxDnKg%40mail.gmail.com.
