Patching Standards
Active Evaluation FINOS Labs This material is provisional and has not been published as a formal FINOS standard.
Home / Standards / APP-001
APP-001

Estate-Wide Patch Application

Patch feeds should support automated discovery and application across dependency estates.

Status
Pre-Draft
Category
Patch Application
Applies to
Enterprise recipients, Tooling providers, Patch providers

Requirement

OSERA feeds and metadata SHOULD support estate-wide discovery of available backpatches, including transitive dependency use cases.

Rationale

The July 7 update described applying every available backpatch across an estate using broad matching options:

groupId = *
artifactId = *
transitive = true

This model depends on reliable feed metadata, predictable versions, and recipient evidence that lets enterprises route validation.

Evidence

Tooling SHOULD be able to show which applications, dependency paths, and artifact coordinates would change before applying patches.