Broadleaf Commerce Discussion Forums

Hi all,

I can't seem to find any documentation on how to upgrade specifc jars e.g. spring security or any other third party jar which BLC uses?!? As, every third party libraries have there release cycles and BLC must be having there own, I think this is a pretty standard requirement to upgrade various jars for the time being(for security fix update lets say!), so is there any neat solution to this?

Thanks!

You can redeclare the transitive dependency in your own pom.xml and specify the version that you like. However, it will not have been tested explicitly with Broadleaf and so there are no guarantees that it will work.

If you find instances of these and you need a specific dependency version for whatever reason, we are more than happy to oblige dependent jar upgrades in patch releases if there are no migratory impacts.