[Snyk] Fix for 2 vulnerabilities

[snyk-io]

Snyk has created this PR to fix 2 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• pom.xml
• debezium-testing/debezium-testing-openshift/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-17440598	255	com.fasterxml.jackson.core:jackson-databind: 2.10.0 -> 2.18.8 io.fabric8:openshift-client: 4.6.4 -> 6.0.0 io.strimzi:api: 0.16.2 -> 0.23.0 Major version upgrade No Path Found Proof of Concept
	Incomplete List of Disallowed Inputs SNYK-JAVA-COMFASTERXMLJACKSONCORE-17440366	182	com.fasterxml.jackson.core:jackson-databind: 2.10.0 -> 2.18.8 io.fabric8:openshift-client: 4.6.4 -> 6.0.0 io.strimzi:api: 0.16.2 -> 0.23.0 Major version upgrade No Path Found No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[snyk-io]

This update includes two high-risk major version upgrades and one medium-risk minor version upgrade. Both io.fabric8:openshift-client and io.strimzi:api introduce significant breaking changes that require developer action and careful migration planning before merging.

Top 3 Most Impactful Upgrades

• io.fabric8:openshift-client 4.6.4 → 6.0.0 (HIGH)
• io.strimzi:api 0.16.2 → 0.23.0 (HIGH)
• com.fasterxml.jackson.core:jackson-databind 2.10.0 → 2.18.8 (MEDIUM)

---

io.fabric8:openshift-client 4.6.4 → 6.0.0

This is a major version upgrade across two major versions (v4 → v6) with significant breaking changes that require code modifications.

Key Breaking Changes:

• API/Implementation Split: The client has been split into openshift-client-api and openshift-client modules. You should now use openshift-client-api as a compile dependency and openshift-client as a runtime dependency. [1]
• Client Instantiation: Direct instantiation via new DefaultOpenShiftClient() is deprecated. You must now use the KubernetesClientBuilder to create client instances. [1, 15]
• Package and DSL Changes: Several model classes have been moved to new packages, and numerous DSL methods have been removed or changed. For example, the delete operation became non-blocking by default in v6. [1, 25]

Recommendation: This upgrade requires a careful code refactoring. Review the official v5 and v6 migration guides to update client instantiation, package imports, and DSL method calls.

*Source: [Fabric8 v6 Migration Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.