[Cherry-pick to branch-1.3] [#11795] fix(docker): Upgrade bundled PostgreSQL JDBC driver (#11796) - #12697
Merged
jerryshao merged 1 commit intoAug 28, 2026
Conversation
…pache#11796) Upgrade the PostgreSQL JDBC driver downloaded into Docker and test helper packages from `42.7.0` to `42.7.11`. This updates the Gravitino Docker dependency script, Trino Docker/test helper references, integration test download URL, and documentation link. The Gravitino 1.3.0-rc6 image scan reports CRITICAL `CVE-2024-1597` for `/opt/gravitino/jdbc-drivers/postgresql-42.7.0.jar`. Fix: apache#11795 No API or configuration property changes. Docker/test helper scripts and documentation now reference PostgreSQL JDBC `42.7.11`. - Confirmed no `postgresql-42.7.0` references remain in the touched areas. - Verified `https://jdbc.postgresql.org/download/postgresql-42.7.11.jar` returns HTTP 200. (cherry picked from commit 95c07c7)
Contributor
There was a problem hiding this comment.
Pull request overview
This cherry-pick updates the bundled PostgreSQL JDBC driver references on branch-1.3 to the newer 42.7.11 release, ensuring the Docker images and integration tooling download/copy the upgraded driver consistently.
Changes:
- Bump PostgreSQL JDBC driver from
42.7.0to42.7.11across Docker packaging scripts, Dockerfile, and integration tooling. - Fix the Trino dependency script’s PostgreSQL driver existence check to correctly expand
${PG_VERSION}. - Update integration-test shared constant to download the new driver version.
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| trino-connector/integration-test/trino-test-tools/download_jar.sh | Update PostgreSQL driver JAR name/URL and copied artifact for IT tooling. |
| integration-test-common/src/test/java/org/apache/gravitino/integration/test/util/BaseIT.java | Update PostgreSQL JDBC driver download URL constant used by IT setup. |
| dev/docker/trino/trino-dependency.sh | Bump PG_VERSION and fix the file-existence check to use ${PG_VERSION} correctly. |
| dev/docker/trino/Dockerfile | Copy the upgraded PostgreSQL JDBC driver into the Trino iceberg plugin directory. |
| dev/docker/gravitino/gravitino-dependency.sh | Download the upgraded PostgreSQL JDBC driver into the Gravitino docker package. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Comment on lines
+57
to
61
| download_jar "postgresql-42.7.11.jar" \ | ||
| "https://jdbc.postgresql.org/download/postgresql-42.7.11.jar" \ | ||
| "$GRAVITINO_SERVER_DIR/catalogs/jdbc-postgresql/libs" | ||
| cp -rp $GRAVITINO_SERVER_DIR/catalogs/jdbc-postgresql/libs/postgresql-42.7.0.jar $GRAVITINO_SERVER_DIR/catalogs/lakehouse-iceberg/libs | ||
| cp -rp $GRAVITINO_SERVER_DIR/catalogs/jdbc-postgresql/libs/postgresql-42.7.11.jar $GRAVITINO_SERVER_DIR/catalogs/lakehouse-iceberg/libs | ||
| } |
Code Coverage Report
Files
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Cherry-pick Information:
branch-1.3