Menards uses Spring Boot 2.7. I want to know how to know if there are security updates for this version that we need to apply. How do I go about finding out?

[Brandon Chance]

 

[Todd Robbins]

Hello Brandon,

 

Spring Boot release notes are published here: https://github.com/spring-projects/spring-boot/releases/tag/v2.7.18

 

Spring Boot version 2.7 is now "End of OSS Support" and requires commercial support. Spring Runtime support is available on it's own or included in VMware Tanzu Application Platform, VMware Tanzu Application Service and Azure Spring Apps Enterprise. Commercial support comes with access to Spring Commercial repository for access to commercial patches.

 

Regards,

Todd

[Brandon Chance]

We have commercial support. Since 2.7 is end-of-lifed, it was explained to me that I need to find out what security patches released into 3.x have/can be ported to 2.7.x so that I can apply them to our environment. Brandon Chance IS Manager, Intranet and Labor Scheduling | Desk: 715-876-4007 | Cell: 715-225-3238

[Todd Robbins]

New commercial patches of Spring 2.7 will continue to be released with security fixes. 2.7.19 is not yet released but will become available on Spring Commercial Repository.

[Brandon Chance]

Thanks Todd. I went to the site you linked below. Where would I find 2.7.19 once it’s released? Brandon Chance IS Manager, Intranet and Labor Scheduling | Desk: 715-876-4007 | Cell: 715-225-3238

[Todd Robbins]

HI Brandon, The release bits will be made available on the Commercial Repository: https://repo.spring.vmware.com

 

This is still slated for later this month of February (tentatively scheduled for the 22nd). The release notes will be updated in Git and also the Tanzu docs for Spring Commercial: https://docs.vmware.com/en/VMware-Tanzu-Spring-Runtime/Commercial/Tanzu-Spring-Runtime/guide-artifact-repository-developers.html