May 4, 2024
Tip
|
The 2.x versions are Spring Boot 3 compatible. |
Tip
|
If coming from a version prior to 2.0.0-GA, then see the 2.0.2 upgrade guide. |
Iterating on our previous pattern for handling externally-executed checkout payment transactions (esp. with 3DS verification & hosted payment page interactions), the improved pattern re-balances responsibilities between frontend & backend apps & makes the overall interaction more robust in its effort to transition successfully executed payment transactions into finalized checkouts.
For more details on the improved pattern, see our Externally-Executed Checkout Payment Transactions documentation.
Note
|
The improved pattern is enabled by default. If you wish to continue using the legacy pattern, it can be enabled via the following property: broadleaf.payment.legacy-external-payment-pattern-enabled=true . Doing so will disable several of the key components used for the improved pattern.
|
To review the security related content, see 2.0.2 notes as these are the same.
Tip
|
You will need your login credentials originally provided for accessing the Broadleaf nexus. Security fixes often involve dependency updates to remediate issues being tracked in external OSS components. It is worth considering adopting releases with security fixes (even Broadleaf Severity LOW) to avoid any possibility of transitive exposure in your codebase. |
Microservices release 2.1.1 is congruent with:
Required.
@broadleaf/admin-components
1.10.8
@broadleaf/admin-stripe-components
1.10.8
Other modules: 1.10.7 (unchanged)
Recommended.
Required for updated externally-executed 3DS/HPP checkout pattern
@broadleaf/commerce-browse
1.5.10 and 1.6.2
@broadleaf/commerce-cart
1.5.10 and 1.6.2
@broadleaf/commerce-content
1.5.10 and 1.6.2
Other modules: 1.5.9 and 1.6.1 (unchanged)
Commerce Quote UI 1.0.0 (unchanged)
Payment JS SDK 1.3.0 (unchanged)
Recommended.
Open Api 2.1.1-1.0
Recommended.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
This is the same as Release Train 2.0.2-GA.
Order Operation Services 2.0.2
This is the same as Release Train 2.0.2-GA.
Important to address issues with the TenantServices 2.1.0 migration scripts