Re: [go-cd] Upgrade Spring Framework

2024-09-26 Thread 'Carey Tews' via go-cd
I'll stop responding by email. I didn't consider the fact that the email "chain" would be included in each message. Duh. A million apologies. -- You received this message because you are subscribed to the Google Groups "go-cd" group. To unsubscribe from this group and stop receiving emails fro

RE: [go-cd] Upgrade Spring Framework

2024-09-26 Thread 'Carey Tews' via go-cd
prohibited. From: go-cd@googlegroups.com On Behalf Of Chad Wilson Sent: Thursday, September 26, 2024 9:40 AM To: go-cd@googlegroups.com Subject: Re: [go-cd] Upgrade Spring Framework Caution: This is an external email. Please take care when clicking links or opening attachments. When in doubt

Re: [go-cd] Upgrade Spring Framework

2024-09-26 Thread Chad Wilson
e‑mail. > > Please notify the sender immediately by e‑mail if you have received this > e‑mail by mistake and delete this e‑mail from your system. > > If you are not the intended recipient you are notified that disclosing, > copying, distributing or taking any action in relian

RE: [go-cd] Upgrade Spring Framework

2024-09-26 Thread 'Carey Tews' via go-cd
information is strictly prohibited. From: go-cd@googlegroups.com On Behalf Of Chad Wilson Sent: Thursday, September 26, 2024 8:50 AM To: go-cd@googlegroups.com Subject: Re: [go-cd] Upgrade Spring Framework Caution: This is an external email. Please take care when clicking links or opening

Re: [go-cd] Upgrade Spring Framework

2024-09-26 Thread Chad Wilson
Hiya Carey Assuming you mean upgrading within GoCD itself, please see https://github.com/gocd/gocd/discussions/12947#discussioncomment-10071870 - I suspect because it's non-trivial. Current GoCD Hibernate version will not work with Spring 5+, and Spring Security will need upgrading alongside Spri

[go-cd] Upgrade Spring Framework

2024-09-26 Thread 'Carey Tews' via go-cd
One of the "remediations" of our Cyber Essentials Plus (UK) audit requires us to upgrade Spring Framework to >= 6.1.13 on our build server. Is there a reason not to do this? Has anyone had experience doing it? I'm going to do this on my own on a dev system, but I'm concerned that it's not possi