Staying current with Commerce Cloud and Composable Storefront

In this blog, we essentially cover the following key elements:

• Upgrade to SAP Commerce Cloud, Composable Storefront 6 (or later), the latest update of Commerce Cloud, and Node.js 18, now
• Versions of Composable Storefront that are not current will result in build errors; you will not be able to deploy new code. For version information, refer to Update Release Policy and Publication Frequency for Composable Storefront Libraries.

To stay current on Composable Storefront and avoid errors on new builds, you must upgrade to Composable Storefront 6 (or later version) and/or Node.js 18 now.

You must be using a current update of Composable Storefront because of the following important note:

• Composable Storefront / Spartacus depends on 3^rd-party libraries. If a high security issue is discovered with 3^rd-party dependencies that are end-of-life (such as Node.js 14), support will be withdrawn from Commerce Cloud with short notice (1-2 weeks). A “high security issue” is an issue that has a vulnerability score (CVSSv3 score) of 7 or higher. For background information on vulnerability scoring, see https://nvd.nist.gov and https://blogs.sap.com/tag/cvss-v3.

This event will be enforced starting in 2024 or because of the event described above (whichever comes first), versions of Composable Storefront that are not current will result in build errors, and you will not be able to deploy new code.

As a reminder, according to the SAP Commerce Cloud Supplemental Terms and Conditions, you must run a version of SAP Commerce Cloud that is current. Your organization is responsible for installing new releases and upgrading the SAP Commerce Cloud software.

For information on Composable Storefront and what versions are current, including which Commerce Cloud backends are supported, see the Update Release Policy and Publication Frequency for Composable Storefront Libraries. For more information on which Composable Storefront updates work with which versions of Node.js and Angular, see the Composable Storefront Dependencies Matrix.

References:

• SAP Commerce Cloud Supplemental Terms and Conditions,
• Update Release Policy and Publication Frequency for Composable Storefront Libraries
• Release notes for SAP Commerce Cloud JS storefront hosting
• Manifest components reference

For any questions, don’t hesitate to contact your account team.

Sincerely,

The SAP Commerce Cloud Team