[Snyk] Fix for 3 vulnerabilities

[snyk-io]

Snyk has created this PR to fix 3 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• debezium-server/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-IONETTY-18170202	170	software.amazon.awssdk:kinesis: 2.13.13 -> 2.48.4 Major version upgrade No Path Found Proof of Concept
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-IONETTY-18170204	170	software.amazon.awssdk:kinesis: 2.13.13 -> 2.48.4 Major version upgrade No Path Found Proof of Concept
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-IONETTY-18170213	125	software.amazon.awssdk:kinesis: 2.13.13 -> 2.48.4 Major version upgrade No Path Found No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Vulnerabilities that could not be fixed

• Upgrade:
  • Could not upgrade io.quarkus:quarkus-smallrye-health@1.4.1.Final to io.quarkus:quarkus-smallrye-health@2.3.0.Final; Reason could not apply upgrade, dependency is managed externally ; Location: provenance does not contain location

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[snyk-io]

This update contains a high-risk major version upgrade for Quarkus and a low-risk minor version upgrade for the AWS SDK.

High Risk: io.quarkus:quarkus-smallrye-health@1.4.1.Final → 2.3.0.Final

This is a major platform upgrade from Quarkus 1.x to 2.x, which introduces significant breaking changes and requires developer action. It is not specific to the smallrye-health extension but applies to the entire Quarkus platform.

Key Breaking Changes:

• Java 11 Required: Quarkus 2.0 drops support for Java 8 and requires at least JDK 11 to run.
• Core Engine Upgrade: The underlying web engine, Vert.x, has been upgraded from version 3 to 4, which may introduce subtle behavioral changes.
• MicroProfile 4.0: The application now targets MicroProfile 4.0, which includes updates to all underlying SmallRye implementations.
• Configuration and API Changes: The official migration guide lists several breaking changes, including updates to the Kubernetes client, gRPC annotations (@GrpcService is now @GrpcClient), and removal of deprecated Qute annotations.

Recommendation: A dedicated migration effort is required. Developers must consult the Quarkus 2.0 Migration Guide to address the necessary changes. This upgrade should not be merged without thorough testing and potential code modifications.

Low Risk: software.amazon.awssdk:kinesis@2.13.13 → 2.48.4

This is a minor version upgrade within the AWS SDK for Java v2. The SDK maintains a strong backward compatibility promise for minor version updates. The changes between these versions consist primarily of new features, performance improvements, and bug fixes. No breaking API changes are documented for the Kinesis client in this version range.

Source: AWS SDK for Java v2 Changelog

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.