[BUILD-960] Update h2 db to version 2.1.x Created: 25/Nov/22  Updated: 20/Dec/22  Resolved: 28/Nov/22

Status: Closed
Project: Build
Component/s: None
Affects Version/s: None
Fix Version/s: BOM 6.2.27

Type: Task Priority: Neutral
Reporter: Federico Grilli Assignee: Federico Grilli
Resolution: Done Votes: 0
Labels: maintenance
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
relation
is related to BUILD-936 Update to jackrabbit-2.20.7 Closed
is related to MAGNOLIA-8638 Getting h2 error while upgrading 6.2.... Closed
Template:
Acceptance criteria:
Empty
Task DoR:
Empty
Release notes required:
Yes
Team: Foundation
Work Started:

 Description   

H2 is not recommended for production and is used mainly as an embedded db for development or evaluation purposes. Magnolia normally keeps it in sync with the version used by JackRabbit.
Also, according to some vulnerability detection tools, Magnolia results affected by h2 1.4.x CVEs, even though it is actually not (see BUILD-609).

The latest major h2 version (2.1.x) introduces breaking changes when updating from the version currently bundled with Magnolia (1.4.x) which may disrupt work for devs.
Document this in release notes and mention how to workaround the issue. See https://jira.magnolia-cms.com/browse/MAGNOLIA-8638?focusedId=331710&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-331710


Generated at Sun Feb 11 23:46:49 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.