Hi Mathias, an upgrade is planned, at least for DSpace 10:
https://github.com/DSpace/dspace-angular/issues/4372Ideally, every DSpace version that is currently under support should be running on an angular version which is currently supported. But with DSpace being run by volunteers and angular support windows being quite a bit shorter than the DSpace support window, this will be pretty hard.
Best Max On 30.09.25 16:19, 'Mathias Stocker' via DSpace Developers wrote:
Hi thereAccording to https://wiki.lyrasis.org/display/DSPACE/ DSpace+Software+Support+Policy> The DSpace Committers provide security updates/support for the***most recent three (3) major releases <https://wiki.lyrasis.org/display/ DSPACE/Releases#Releases-ReleaseNumberingScheme> *of the platform.As i can see, the version 7 branch of dspace-angular uses v15 for Angular, version 8 branch uses v17 and version 9 branch uses v18.The only active supported Angular version of these three is v18, which is supported until this november (!).This leads to transient dependency vulnerabilities.In our project we have multiple moderate to critical security alerts which are related to the outdated Angular version used.The same questions arise with regard to the backend. At least without paid enterprise support for the Spring framework.IMHO updating to newer / maintained Framework versions should be part of the actively maintained DSpace versions.Is there any ongoing discussion in this matter? Would you accept PRs increasing the Framework version? Best regards Mathias --All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx <https:// www.lyrasis.org/about/Pages/Code-of-Conduct.aspx>---You received this message because you are subscribed to the Google Groups "DSpace Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:dspace- [email protected]>. To view this discussion visit https://groups.google.com/d/msgid/dspace- devel/240d6465-c6c1-4d34-8914-1c905d4cbc0dn%40googlegroups.com <https:// groups.google.com/d/msgid/dspace-devel/240d6465- c6c1-4d34-8914-1c905d4cbc0dn%40googlegroups.com? utm_medium=email&utm_source=footer>.
-- Herr Max Nuding Softwareentwickler / Abt. IT-Dienste für Forschung und Lehre Kommunikations-, Informations-, Medienzentrum (KIM) Universität Konstanz 78457 Konstanz Tel.: +49.7531.88-4658 Raum: B 707 -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx--- You received this message because you are subscribed to the Google Groups "DSpace Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/dspace-devel/8b09b251-324c-46f2-a347-ae712666bab5%40uni-konstanz.de.
smime.p7s
Description: S/MIME Cryptographic Signature
