Ververica DocsVerverica Docs
Docs Home
Viewing docs for
Self-ManagedNot available for BYOC
Looking for Ververica Platform 3.x release notes?

Ververica Platform 2.15.12

Applies toSelf-Managed v2
2 min read
On this page

Release Date: 2026-10-07

Changelog

Apache Flink®

Ververica Platform 2.15.12 supports the following versions:

  • Apache Flink® 1.20
  • Apache Flink® 1.19
  • Apache Flink® 1.18

Ververica Platform 2.15.12 supports Apache Flink® 1.20, Apache Flink® 1.19, and Apache Flink® 1.18 under SLA.

For Stream Edition:

  • 1.18.1-stream9-scala_2.12-java8
  • 1.18.1-stream9-scala_2.12-java11
  • 1.18.1-stream9-scala_2.12-java17
  • 1.19.3-stream7-scala_2.12-java8
  • 1.19.3-stream7-scala_2.12-java11
  • 1.19.3-stream7-scala_2.12-java17
  • 1.20.5-stream1-scala_2.12-java8
  • 1.20.5-stream1-scala_2.12-java11
  • 1.20.5-stream1-scala_2.12-java17

For Spring Edition the following archives are available:

This is a patch release with improvements, bug fixes, and security fixes.

Improvements

  • Larger connector and UDF uploads. You can now upload custom connector and UDF JAR files of up to 500 MB, up from 150 MB. The limit is fixed and not configurable. If an ingress controller runs in front of Ververica Platform, raise its request body size limit to match. Flink session clusters still reject JAR files larger than 100 MiB, as set by the Flink rest.server.max-content-length option.
  • Spring Boot 4.0. Ververica Platform services now run on Spring Boot 4.0.8, which keeps the platform on a supported Spring Boot release line. The upgrade requires no action from you.

Bug Fixes

  • Automatic SSL no longer overrides security.ssl.algorithms. When you enable automatic SSL for a deployment with the flink.security.ssl.enabled: true annotation, Ververica Platform previously replaced security.ssl.algorithms with a fixed cipher list. The configured value now follows the same precedence as every other Flink configuration option, and the default cipher list includes TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, and TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384.
  • Deleting a deployment no longer leaves orphaned records. Deleting a deployment now removes all of its job, event, and savepoint records. Previously, a deployment with more than about 1,000 records of one type, or an AppManager restart during the cleanup, could leave orphaned records behind. These records were never cleaned up and could slow down AppManager startup over time. AppManager now also sweeps for orphaned records one minute after startup and then every hour, so records left behind by earlier versions are removed automatically.

Vulnerability Fixes (Inside Apache Flink®)

  • The Flink images are unchanged from 2.15.11 (1.20.5-stream1, 1.19.3-stream7, 1.18.1-stream9), so there are no new fixes to report.

Vulnerability Fixes (Outside of Apache Flink®)

Upgrade

We recommend upgrading with Helm using the following commands:

BASH
1$ helm repo add ververica https://charts.ververica.com
2$ helm repo update
3$ helm upgrade [RELEASE] ververica/ververica-platform --version 5.11.12 --values custom-values.yaml
Was this helpful?