Using Geode 1.12.8 with GemFire 9.10.13 should be fine. In general, we suggest using a server version that is higher or equal than the client version. 9.10.13 is based on Geode 1.12.7, so technically to have matching versions it would be nice to update the server.
But in practice, the only time that really matters is if we have to change the client-server protocol in a patch version. That is pretty rare. It definitely hasn't changed in Geode 1.12.8. I think the only changes are the log4j version update and a server side bug fix. So there shouldn't be an issue upgrading the client. -Dan ________________________________ From: Ashish Choudhary <aashish.choudha...@gmail.com> Sent: Wednesday, February 23, 2022 9:59 AM To: user@geode.apache.org <user@geode.apache.org> Subject: Geode Java Client Upgrade Compatibility Hi Team, We plan to upgrade geode from 1.12.0 to 1.12.8 to fix the vulnerability with Apache Shiro. The server version is 9.10.13(Gemfire), and as per the documentation, it is compatible with geode 1.12. https://gemfire.docs.pivotal.io/910/gemfire/release_notes.html<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgemfire.docs.pivotal.io%2F910%2Fgemfire%2Frelease_notes.html&data=04%7C01%7Cdasmith%40vmware.com%7C143ff92648cd4c6c3a2108d9f6f6501a%7Cb39138ca3cee4b4aa4d6cd83d9dd62f0%7C0%7C0%7C637812360041259691%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=wb1h6Cmv70uts2tX0N5MOPmicxek8Bv9oxnQTDEb5oo%3D&reserved=0> Can someone please confirm if there would be an issue in upgrading to a minor version 1.12.8 here? Thanks, Ashish