Skip to content

Conversation

r-sidd
Copy link
Contributor

@r-sidd r-sidd commented Sep 30, 2025

What is the purpose of the change

Bump derby version to 10.17.1.0

Brief change log

The current version 10.15.2.0 has a direct vulnerability - CVE Record: CVE-2022-46337.
To remediate this, we can upgrade this package to latest 10.17.1.0

Current - Maven Repository: org.apache.derby » derby » 10.15.2.0

Latest - Maven Repository: org.apache.derby » derby » 10.17.1.0

FYI:
The derby release notes mentioned that the support for java versions earlier than 21 were removed.
But the scope for derby is mainly for the Integration tests. I've run the tests in local and the build is successful.

Verifying this change

This change is a trivial rework / code cleanup without any test coverage.

Does this pull request potentially affect one of the following parts:

  • Dependencies (does it add or upgrade a dependency): yes
  • The public API, i.e., is any changes to the CustomResourceDescriptors: no
  • Core observer or reconciler logic that is regularly executed: no

Documentation

  • Does this pull request introduce a new feature? no
  • If yes, how is the feature documented? not applicable

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant