Skip to content

Bump com.h2database:h2 from 2.2.220 to 2.4.240 - #133

Merged
rnc merged 1 commit into
masterfrom
dependabot/maven/com.h2database-h2-2.4.240
Sep 9, 2026
Merged

Bump com.h2database:h2 from 2.2.220 to 2.4.240#133
rnc merged 1 commit into
masterfrom
dependabot/maven/com.h2database-h2-2.4.240

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps com.h2database:h2 from 2.2.220 to 2.4.240.

Release notes

Sourced from com.h2database:h2's releases.

Version 2.4.240

... (truncated)

Commits
  • c8eb81b in preparation for a release
  • 7ff5ee5 Merge pull request #4260 from JackPGreen/update-maven-central-url
  • da4c337 Merge pull request #4271 from IrisesD/master
  • d053544 feat: allow CATALOG in CREATE SCHEMA and DROP SCHEMA (#4277)
  • a448d91 Merge pull request #4273 from naive924/feat/compactThreads
  • 6672123 fix: change log
  • 858e74a fix: MVStore.compact: run map copy in parallel by default (¼ cores, override ...
  • bce0ec1 feat: parallel map copy option for MVStore.compact()
  • d8a6cc3 Fix command syntax in help.csv
  • c45413c Merge pull request #4266 from andreitokar/issue-4208-2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.h2database:h2](https://github.com/h2database/h2database) from 2.2.220 to 2.4.240.
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](h2database/h2database@version-2.2.220...version-2.4.240)

---
updated-dependencies:
- dependency-name: com.h2database:h2
  dependency-version: 2.4.240
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 9, 2026
@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 67 dependencies

Detected 39 vulnerabilities (1 Critical, 18 High, 19 Medium, 1 Low)

+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |               LIBRARY               |       ID       |                                               TOP FIX                                                |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | netty-handler-4.1.118.Final.jar     | CVE-2026-75595 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final,         |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.137.Final, https://github.com/netty/netty.git -       |
|          |                                     |                | netty-4.2.17.Final                                                                                   |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-4.1.118.Final.jar       | CVE-2026-42583 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.133.Final,                        |
|          |                                     |                | io.netty:netty-codec:4.1.133.Final,io.netty:netty-codec-compression:4.2.13.Final,                    |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.2.13.Final                                              |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-4.1.118.Final.jar       | CVE-2026-59901 | io.netty:netty-codec-compression:4.2.16.Final,io.netty:netty-codec:4.1.136.Final                     |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.118.Final.jar  | CVE-2026-33870 | io.netty:netty-codec-http:4.1.132.Final,io.netty:netty-codec-http:4.2.10.Final                       |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.118.Final.jar  | CVE-2026-42584 | Upgrade to version io.netty:netty-codec-http:4.1.133.Final, https://github.com/netty/netty.git -     |
|          |                                     |                | netty-4.2.13.Final,io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git -      |
|          |                                     |                | netty-4.1.133.Final                                                                                  |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.118.Final.jar  | CVE-2026-42587 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.13.Final,                         |
|          |                                     |                | io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git - netty-4.1.133.Final,    |
|          |                                     |                | io.netty:netty-codec-http2:4.1.133.Final,io.netty:netty-codec-http2:4.2.13.Final,                    |
|          |                                     |                | io.netty:netty-codec-http:4.1.133.Final                                                              |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.118.Final.jar  | CVE-2026-55831 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final    |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.118.Final.jar  | CVE-2026-55833 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final    |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.118.Final.jar  | CVE-2026-56745 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final,   |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                     |                | netty-4.2.16.Final                                                                                   |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.118.Final.jar | CVE-2025-55163 | Upgrade to version  https://github.com/netty/netty.git - 4.2.4.Final,                                |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.124.Final,io.netty:netty-codec-http2:4.1.124.Final,   |
|          |                                     |                | io.netty:netty-codec-http2:4.2.4.Final                                                               |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.118.Final.jar | CVE-2026-33871 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.132.Final,                        |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.2.11.Final                                              |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.118.Final.jar | CVE-2026-42587 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.13.Final,                         |
|          |                                     |                | io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git - netty-4.1.133.Final,    |
|          |                                     |                | io.netty:netty-codec-http2:4.1.133.Final,io.netty:netty-codec-http2:4.2.13.Final,                    |
|          |                                     |                | io.netty:netty-codec-http:4.1.133.Final                                                              |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.118.Final.jar | CVE-2026-56819 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final,io.netty:netty-codec-http2:4.2.16.Final, |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                     |                | netty-4.2.16.Final                                                                                   |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.118.Final.jar | CVE-2026-59900 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final                                          |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.118.Final.jar     | CVE-2026-44249 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.15.Final,                         |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.135.Final                                             |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.118.Final.jar     | CVE-2026-45416 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.15.Final,                         |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.135.Final                                             |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.118.Final.jar     | CVE-2026-50010 | Upgrade to version  https://github.com/netty/netty.git - 4.1.135.Final                               |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.118.Final.jar     | CVE-2026-62243 | Upgrade to version io.netty:netty-handler:4.1.137.Final,io.netty:netty-handler:4.2.17.Final          |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.118.Final.jar     | CVE-2026-75596 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final,         |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.2.17.Final, https://github.com/netty/netty.git -        |
|          |                                     |                | netty-4.1.137.Final                                                                                  |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-21.0.jar                      | CVE-2023-2976  | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                                  |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-4.1.118.Final.jar       | CVE-2025-58057 | Upgrade to version io.netty:netty-all:4.1.125.Final,io.netty:netty-codec-http:4.1.125.Final,         |
|          |                                     |                | io.netty:netty-codec-http2:4.2.5.Final,io.netty:netty-codec-http:4.2.5.Final,                        |
|          |                                     |                | io.netty:netty-codec-compression:4.2.5.Final, https://github.com/netty/netty.git -                   |
|          |                                     |                | netty-4.1.125.Final,io.netty:netty-all:4.2.5.Final,io.netty:netty-codec-http2:4.1.125.Final,         |
|          |                                     |                | io.netty:netty-codec:4.1.125.Final, https://github.com/netty/netty.git - netty-4.2.5.Final           |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2025-58056 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.5.Final,                          |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.125.Final,io.netty:netty-codec-http:4.2.5.Final,      |
|          |                                     |                | io.netty:netty-codec-http:4.1.125.Final                                                              |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2025-58057 | Upgrade to version io.netty:netty-all:4.1.125.Final,io.netty:netty-codec-http:4.1.125.Final,         |
|          |                                     |                | io.netty:netty-codec-http2:4.2.5.Final,io.netty:netty-codec-http:4.2.5.Final,                        |
|          |                                     |                | io.netty:netty-codec-compression:4.2.5.Final, https://github.com/netty/netty.git -                   |
|          |                                     |                | netty-4.1.125.Final,io.netty:netty-all:4.2.5.Final,io.netty:netty-codec-http2:4.1.125.Final,         |
|          |                                     |                | io.netty:netty-codec:4.1.125.Final, https://github.com/netty/netty.git - netty-4.2.5.Final           |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2025-67735 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.8.Final,                          |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.129.Final                                             |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-41417 | Upgrade to version io.netty:netty-codec-http:4.1.133.Final,io.netty:netty-codec-http:4.2.13.Final    |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-42580 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.133.Final,                        |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.2.13.Final,io.netty:netty-codec-http:4.1.133.Final,     |
|          |                                     |                | io.netty:netty-codec-http:4.2.13.Final                                                               |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-42581 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.13.Final,                         |
|          |                                     |                | io.netty:netty-codec-http:4.1.133.Final, https://github.com/netty/netty.git - netty-4.1.133.Final,   |
|          |                                     |                | io.netty:netty-codec-http:4.2.13.Final                                                               |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-42585 | Upgrade to version io.netty:netty-codec-http:4.2.13.Final,io.netty:netty-codec-http:4.1.133.Final    |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-50020 | Upgrade to version  https://github.com/netty/netty.git - 4.1.135.Final                               |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-56746 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final,   |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                     |                | netty-4.2.16.Final                                                                                   |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-59898 | io.netty:netty-codec-http:4.1.136.Final,io.netty:netty-codec-http:4.2.16.Final                       |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-59899 | io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final                       |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-59903 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.137.Final,                        |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.2.17.Final                                              |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.118.Final.jar  | CVE-2026-59921 | io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final                       |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http2-4.1.118.Final.jar | CVE-2025-58057 | Upgrade to version io.netty:netty-all:4.1.125.Final,io.netty:netty-codec-http:4.1.125.Final,         |
|          |                                     |                | io.netty:netty-codec-http2:4.2.5.Final,io.netty:netty-codec-http:4.2.5.Final,                        |
|          |                                     |                | io.netty:netty-codec-compression:4.2.5.Final, https://github.com/netty/netty.git -                   |
|          |                                     |                | netty-4.1.125.Final,io.netty:netty-all:4.2.5.Final,io.netty:netty-codec-http2:4.1.125.Final,         |
|          |                                     |                | io.netty:netty-codec:4.1.125.Final, https://github.com/netty/netty.git - netty-4.2.5.Final           |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http2-4.1.118.Final.jar | CVE-2026-47244 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.15.Final,                         |
|          |                                     |                | https://github.com/netty/netty.git - netty-4.1.135.Final                                             |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http2-4.1.118.Final.jar | CVE-2026-48043 | Upgrade to version  https://github.com/netty/netty.git - 4.1.135.Final                               |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http2-4.1.118.Final.jar | CVE-2026-50560 | Upgrade to version  https://github.com/netty/netty.git - 4.1.135.Final                               |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| LOW      | guava-21.0.jar                      | CVE-2020-8908  | Upgrade to version com.google.guava:guava:32.0.0-android, https://github.com/google/guava.git -      |
|          |                                     |                | v32.0.0                                                                                              |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

path-mapped-pathdb-3.3-SNAPSHOT.pom
|-- path-mapped-pathdb-datastax-3.3-SNAPSHOT.jar
	|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
	|-- netty-handler-4.1.118.Final.jar [1 CRITICAL, 5 HIGH]
		|-- netty-codec-4.1.118.Final.jar [2 HIGH, 1 MEDIUM]
	|-- cassandra-driver-core-3.12.1.jar
		|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
		|-- netty-handler-4.1.118.Final.jar [1 CRITICAL, 5 HIGH]
	|-- cassandra-driver-mapping-3.12.1.jar
		|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
path-mapped-storage-3.3-SNAPSHOT.jar
|-- netty-codec-http2-4.1.118.Final.jar [5 HIGH, 4 MEDIUM]
	|-- netty-codec-http-4.1.118.Final.jar [6 HIGH, 13 MEDIUM]
	|-- netty-codec-4.1.118.Final.jar [2 HIGH, 1 MEDIUM]
	|-- netty-handler-4.1.118.Final.jar [1 CRITICAL, 5 HIGH]
|-- netty-codec-http-4.1.118.Final.jar [6 HIGH, 13 MEDIUM]
	|-- netty-codec-4.1.118.Final.jar [2 HIGH, 1 MEDIUM]
	|-- netty-handler-4.1.118.Final.jar [1 CRITICAL, 5 HIGH]
|-- netty-handler-4.1.118.Final.jar [1 CRITICAL, 5 HIGH]
	|-- netty-codec-4.1.118.Final.jar [2 HIGH, 1 MEDIUM]
|-- s3-2.21.20.jar
	|-- netty-nio-client-2.21.20.jar
		|-- netty-codec-http2-4.1.118.Final.jar [5 HIGH, 4 MEDIUM]
		|-- netty-codec-http-4.1.118.Final.jar [6 HIGH, 13 MEDIUM]
		|-- netty-codec-4.1.118.Final.jar [2 HIGH, 1 MEDIUM]
		|-- netty-handler-4.1.118.Final.jar [1 CRITICAL, 5 HIGH]


No Policy violations were detected

Project 'path-mapped-storage' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=a525e644-1c7f-4265-a1f6-f949714f4deb
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=a6f4fbb9a2544f0c8b6685dec5ba58dee9596f69943146098106ab43cb758822

Mend AI scan succeeded.

Support Token: 003b6db76cb9046f3ba7c944a5af2412e1788956346869
SAST scan output
*no findings*

Full logs and artifacts

@rnc
rnc merged commit b02d952 into master Sep 9, 2026
3 checks passed
@rnc
rnc deleted the dependabot/maven/com.h2database-h2-2.4.240 branch September 9, 2026 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant