Spring 4.3.9 upgrade for SmartGWT 6.1

[smartiro]

Hi,

SmartGWT 6.1 dependencies include Spring 4.3.9. Our security team flagged that and is asking if we can use 4.3.18 instead.
Can we?

Thanks!

[Isomorphic]

Yes, you absolutely can. We will update the distributed copies as well shortly. Just be sure to upgrade all the Spring libraries to the same revision.

And in general, so long as the third party library you'd like to upgrade is a minor revision away from the one we shipped originally, you should be fine - unless they explicitly state in the release notes that they've broken binary compatibility.