I've opened a PR  just now with new SQLTemplateProcessor
implementation based on new Cayenne own parser (instead of Velocity).
It doesn't support all features of Velocity but it's enough to
seamlessly replace Velocity in all core and test code in Cayenne, plus
it's faster (up to x15 in case of cache hit) and should have less
memory footprint (though I've only checked speed and memory is my
guess as new parser smaller and have no runtime).
Plus cayenne-server now free of velocity and commons-lang
dependencies, next step will be removing of commons-collections (it
will be the last one).
VelocitySQLTemplateProcessor now comes in optional auto-loaded module
(cayenne-velocity), so if you relied on some advanced features of
Velocity in your SQLTemplates you still can use it. And Velocity is
still used for cgen templates.
See PR  and Jira ticket  for details.
Any thoughts or concerns?