Details
-
Feature Request
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
Description
User Story (Required on creation):
H2 2.x fixes a number of vulnerabilities that show up in people's scanning tools and in some cases also affect the Camunda product. Updating the H2 version to 2.0 resolves these issues and reduces friction for people adopting and working with Camunda.
Functional Requirements (Required before implementation):
- H2 2.x is a supported environment
- H2 2.x latest version is shipped in all Camunda artifacts that currently ship H2 1.4
- The migration guide informs users about this major version change and provides pointers for how to upgrade (note that https://github.com/h2database/h2database/releases/tag/version-2.0.202 recommends to re-create a persistent database without providing exact steps; see also http://h2database.com/html/migration-to-v2.html)
Technical Requirements (Required before implementation):
- Understand H2's versioning policy and see if we should support a certain minor version or just support H2 2 (note that the current version is called 2.1.210)
Limitations of Scope (Optional):
- It is not feasible for us to fully explain how to do a backup and restore of data between H2 1.4 and 2.0