r-sidd commented on PR #1167: URL: https://github.com/apache/flink-kubernetes-operator/pull/1167#issuecomment-5119921742
> This is the second CVE-driven bump in the `flink-autoscaler-plugin-jdbc` dependency family, after #1165 (derby). Rather than one PR/JIRA per driver, it would be cleaner to consolidate the JDBC plugin's database dependency bumps into a single PR (and ideally a single JIRA), so the whole family is reviewed and CI-validated together. > > While at it, worth checking the rest of the same umbrella for available updates / advisories in the same pass. > > postgresql and derby are both `<scope>test</scope>` here, so these are test/CI dependencies rather than shipped artifacts, which is worth stating in the JIRA so the security severity is scoped correctly. Thanks @Dennis-Mircea - will consolidate the derby bump (#1165) into this PR so both are reviewed and CI-validated together under a single changeset. Checked the remaining deps - no CVEs so no updates needed there. Will update this PR shortly. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
