Dear colleagues,

many of you added dependencies to ILIAS and various services and functions heavily depend on the libraries we added. This is nice, but comes with a downside: outdated libraries pose a serious thread, to the security of our system as well as to the future of our codebase. Since the testing of ILIAS 7 will begin soon, this is a good moment to update our dependencies.

The TB therefore asks every maintainer that has added dependencies to the core, be it via composer, bower, npm or by hand, to update these dependencies to an up to date version asap. If this is not possible for any reason, we kindly ask for a short message explaining the problem.

For the libraries added via composer, you find a list of the responsible maintainers here [1] and directions on how to update the dependency here [2]. Please note, that `composer install` already flags the libraries imsglobal/lti, technosophos/LibRIS and zendframework/zend-httphandlerrunner as abandoned. For the libraries added via npm, you find the according information here [3] and here [4]. For libraries added via bower, this would be a good moment move them over to npm, since bower is now deprecated for ILIAS [5]. The same goes for libraries added by hand to the libs-folder or some component directory.

If there are any questions or problems, feel free to contact us as always.

[1] https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/composer.json#L90 [2] https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/libs/composer#update-a-s... [3] https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/package.json#L59 [4] https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/docs/development/js/thir... [5] https://github.com/ILIAS-eLearning/ILIAS/pull/2667

Best regards! -- Richard Klees

on behalf of the Technical Boardd of the ILIAS Society

Lead Developer Qualifizierungsmanagement

Mobil: +49 (0)173 / 52 56 924 Fon: +49 (0)221 / 46 75 76 - 56 Fax: +49 (0)221 / 46 75 76 - 09

--------------------------------------------- CaT Concepts and Training GmbH Vorgebirgstraße 338 50969 Köln

Fon: +49 (0) 221 / 46 75 76 - 00 Fax: +49 (0) 221 / 46 75 76 - 09 --------------------------------------------- Geschäftsführung:

Sven Kapust, Gerald Konrad, Alexandra Oehlke, Sandra Röbbelen, Volker Röbbelen, Denis Witt

Amtsgericht Köln HRB 57804 Ust-ID-Nr.: DE 814694228 Sitz: Köln ---------------------------------------------