Liferay Support for Spring 5.x
written-by
Madhusudan Sharma
How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!
While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.
legacy-article
learn-legacy-article-disclaimer-text
Issue
- Since, Spring 6.0.x supports JDK 17-21, while Liferay DXP 7.4 supports JDK 8 and JDK 11, hence upgrading to Spring 6.0.x for Liferay is currently not possible. Also, Spring 5.x's End of Support (from Spring) is by the end of Aug-2024,
- How will Liferay handle potential security vulnerabilities or bugs in Spring 5.x after its EOSL (i.e. post Aug 2024)?
- If there is a bug in Spring 5.x for the module that is used by Liferay, and given the fact that Spring 5.x is no longer supported. How will Liferay provide its support to an unsupported framework?
Resolution
- Indeed, upgrading to Spring 6.0.x is not suggested right now because it requires Jakarta EE 9.0-10 and JDK 17-21.
- Our latest versions of Liferay DXP (starting from 2024.Q2) support JDK 17-21 but not the Jakarta EE 9.0-10.
- However, we have plans to move the Liferay DXP to Jakarta EE 10 in 2025.
- Additionally, Spring offers extended support through the end of 2026.
- In the meantime, security vulnerabilities in our Liferay DXP due to the usage of spring will be patched by us.
did-this-article-resolve-your-issue