xxubai opened a new pull request, #11796: URL: https://github.com/apache/gravitino/pull/11796
### What changes were proposed in this pull request? Upgrade the PostgreSQL JDBC driver downloaded into Docker and test helper packages from `42.7.0` to `42.7.11`. This updates the Gravitino Docker dependency script, Trino Docker/test helper references, integration test download URL, and documentation link. ### Why are the changes needed? The Gravitino 1.3.0-rc6 image scan reports CRITICAL `CVE-2024-1597` for `/opt/gravitino/jdbc-drivers/postgresql-42.7.0.jar`. Fix: #11795 ### Does this PR introduce _any_ user-facing change? No API or configuration property changes. Docker/test helper scripts and documentation now reference PostgreSQL JDBC `42.7.11`. ### How was this patch tested? - Confirmed no `postgresql-42.7.0` references remain in the touched areas. - Verified `https://jdbc.postgresql.org/download/postgresql-42.7.11.jar` returns HTTP 200. - Ran `./gradlew spotlessApply`. - Ran `git diff --check`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
