profiles: Last-rite dev-java/spring-*

Although the Spring Framework is very much alive, our packages are
ancient and our infrastructure is not ready to update it any time
soon. If you want this then join the Java team and be prepared to do a
lot of work. Removal in 30 days.

diff --git a/profiles/package.mask b/profiles/package.mask
index 36b7fe7bac7aec2c11ccc93d41f7465708ea3885..179dff5f963b1f8f4d3026509ea437e183ae41c5 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -562,10 +562,11 @@ app-admin/amazon-ec2-init
 # Masked while being tested and reverse deps aren't fully compatible
 =dev-libs/openssl-1.1*
 
-# James Le Cuirot <chewi@gentoo.org> (03 Apr 2016)
-# Masking Spring Framework for the time being as 3.2.4 is old, has
-# multiple vulnerabilities, and we're not likely to update it
-# soon. Hopefully we can revisit it when the Maven stuff works out.
+# James Le Cuirot <chewi@gentoo.org> (26 Aug 2018)
+# Although the Spring Framework is very much alive, our packages are
+# ancient and our infrastructure is not ready to update it any time
+# soon. If you want this then join the Java team and be prepared to do
+# a lot of work. Removal in 30 days.
 dev-java/spring-aop
 dev-java/spring-beans
 dev-java/spring-core