[
https://issues.apache.org/jira/browse/GEODE-8472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17187894#comment-17187894
]
Owen Nichols commented on GEODE-8472:
-------------------------------------
Hi Brent, several of these have already been bumped on support/1.12, however
nobody has yet proposed a 1.12.1 release. We are much further along on 1.13.0,
perhaps that would meet your needs. In particular:
beanutils is already 1.9.4 in Geode 1.12.0, support/1.12, support/1.13, and
develop
jgroups cannot upgrade (ever). The earliest we could consider a change would
be Geode 2.0. Any change to this library would break backward compatibility.
apache-shiro was 1.14.1 in Geode 1.12.0, but is currently 1.6.0 on
support/1.12, 1.5.3 on support/1.13, and 1.6.0 on develop
spring-web was 5.2.1.RELEASE in Geode 1.12.0, but is currently 5.2.5 on
support/1.12, support/1.13 and develop.
Any changes need to come into develop first before backporting. Bumping spring
to 5.2.8 sounds great. We normally look for a volunteer to bump dependencies
on develop anyway after a release, so look for that email in the coming weeks.
Backporting the spring bump to support branches still in support sounds like a
great proposal to make on the geode dev list (probably after 1.13 has shipped)
> Bump dependency library versions
> --------------------------------
>
> Key: GEODE-8472
> URL: https://issues.apache.org/jira/browse/GEODE-8472
> Project: Geode
> Issue Type: Bug
> Components: build
> Affects Versions: 1.12.0
> Reporter: Brent Driskill
> Priority: Major
>
> The following libraries need to be updated:
> beanutils: 1.9.3 -> 1.9.4
> jgroups: 3.6.14 -> 3.6.20
> apache-shiro: 1.4.1 -> 1.4.2
> spring-web: 5.2.1 -> 5.2.8
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
