Skip to main content

Ververica Platform 2.14.3

Release Date: 2025-12-11

Changelog

Ververica Platform 2.14.3 supports the following versions:

For Stream Edition:

  • 1.17.2-stream6-scala_2.12-java8
  • 1.17.2-stream6-scala_2.12-java11
  • 1.18.1-stream5-scala_2.12-java8
  • 1.18.1-stream5-scala_2.12-java11
  • 1.18.1-stream5-scala_2.12-java17
  • 1.19.3-stream2-scala_2.12-java8
  • 1.19.3-stream2-scala_2.12-java11
  • 1.19.3-stream2-scala_2.12-java17

For Spring Edition the following archives are available:

Improvements

Improved Handling of Incompatible Custom Resources

The platform now includes enhanced error handling for Custom Resources (CRs) that are incompatible with their CustomResourceDefinition (CRD). Previously, invalid CRs could cause reconciliation loops that led to operator instability or system unreachability. With this update, the platform gracefully handles these reconciliation failures, preventing disruptions and ensuring the system remains stable even when malformed resources are present.

Additionally, you can now configure the Kubernetes Operator to run in its own dedicated pod, providing further isolation and resource management control.

To enable the separate operator deployment, set separateDeployment: true in your Helm values configuration:

vvp:
k8sOperator:
enabled: true
separateDeployment: true # Enables the dedicated operator pod
identity: "vvp-1"
watchedNamespaces:
- <target-namespace-1>
- <target-namespace-2>

Bug fixes

Fixed Regression Causing Offline DDL Updates to Fail in 2.14.x

A regression introduced after version 2.12.0 caused the offline DDL update command to fail when running the vvp-persistence image, resulting in a Liquibase ClassNotFoundException for a required migration class. This prevented schema migrations from completing across databases such as PostgreSQL. The issue was caused by an unintended dependency exclusion and has now been resolved, with offline DDL updates working correctly again.

Stability Fixes

In this release we have also incorporated critical fixes originally identified in 2.14.2, including the resolution for lost checkpoint visibility and the correction of HA configuration issues introduced by the new HA settings. This release also backports the necessary high-availability fix required by customers upgrading from older versions, ensuring stable behavior without requiring an upgrade to 2.15.x. These changes were selectively cherry-picked from 2.15.0 to provide a safe and compatible upgrade path for environments still using VVP Flink 1.17.

  • Updated pypi/urllib3 to 2.6.1 to address CVE-2025-66471
  • Updated pypi/urllib3 to 2.6.1 to address CVE-2025-66418
  • Updated pypi/setuptools to 80.9.0 to address CVE-2025-47273
  • Updated pypi/protobuf to 4.25.8 to address CVE-2025-4565
  • Upgraded Spring Boot to 3.1.12
  • Updated nimbus-jose-jwt to 9.37.4 to address CVE-2025-53864
  • Updated bouncycastle to 1.80 to address CVE-2025-8916
  • Updated geoip2 to 2.17.0 to address CVE-2020-13956

Upgrade

As always, we recommend upgrading via Helm using the following commands:

$ helm repo add ververica https://charts.ververica.com
$ helm repo update
$ helm upgrade [RELEASE] ververica/ververica-platform --version 5.10.3 --values custom-values.yaml