[jira] [Commented] (GEODE-8472) Bump dependency library versions

["Owen Nichols (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GEODE-8472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17187894#comment-17187894 ] 

Owen Nichols commented on GEODE-8472:
-------------------------------------

Hi Brent, several of these have already been bumped on support/1.12, however nobody has yet proposed a 1.12.1 release.  We are much further along on 1.13.0, perhaps that would meet your needs.  In particular:

beanutils is already 1.9.4 in Geode 1.12.0, support/1.12, support/1.13, and develop

jgroups cannot upgrade (ever).  The earliest we could consider a change would be Geode 2.0.  Any change to this library would break backward compatibility.

apache-shiro was 1.14.1 in Geode 1.12.0, but is currently 1.6.0 on support/1.12, 1.5.3 on support/1.13, and 1.6.0 on develop

spring-web was 5.2.1.RELEASE in Geode 1.12.0, but is currently 5.2.5 on support/1.12, support/1.13 and develop.

Any changes need to come into develop first before backporting. Bumping spring to 5.2.8 sounds great.  We normally look for a volunteer to bump dependencies on develop anyway after a release, so look for that email in the coming weeks.  Backporting the spring bump to support branches still in support sounds like a great proposal to make on the geode dev list (probably after 1.13 has shipped)

> Bump dependency library versions
> --------------------------------
>
>                 Key: GEODE-8472
>                 URL: https://issues.apache.org/jira/browse/GEODE-8472
>             Project: Geode
>          Issue Type: Bug
>          Components: build
>    Affects Versions: 1.12.0
>            Reporter: Brent Driskill
>            Priority: Major
>
> The following libraries need to be updated:
> beanutils: 1.9.3 -> 1.9.4
> jgroups: 3.6.14 -> 3.6.20
> apache-shiro: 1.4.1 -> 1.4.2
> spring-web: 5.2.1 -> 5.2.8



--
This message was sent by Atlassian Jira
(v8.3.4#803005)