From 2c7718038dd1c26ebef6448ddc15bc397895be5d Mon Sep 17 00:00:00 2001
From: Mohit Yadav <105265192+mohityadav766@users.noreply.github.com>
Date: Wed, 24 Sep 2025 08:54:32 +0530
Subject: [PATCH] Fix Vulnerability (#23504)

* Fix Vulnerability

* Update database schema

---------

Co-authored-by: Sriharsha Chintalapani <harshach@users.noreply.github.com>

(cherry picked from commit 99213010481dc303c7c0471069dae872f671d3fd)
---
 openmetadata-service/pom.xml                                  | 4 ++--
 .../service/governance/workflows/WorkflowHandler.java         | 4 ++--
 pom.xml                                                       | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/openmetadata-service/pom.xml b/openmetadata-service/pom.xml
index 1d7a0ea06a8..034c1343269 100644
--- a/openmetadata-service/pom.xml
+++ b/openmetadata-service/pom.xml
@@ -36,7 +36,7 @@
     <logback-core.version>1.5.18</logback-core.version>
     <logback-classic.version>1.5.18</logback-classic.version>
     <resilience4j-ratelimiter.version>2.3.0</resilience4j-ratelimiter.version>
-    <kubernetes-client.version>21.0.1</kubernetes-client.version>
+    <kubernetes-client.version>24.0.0</kubernetes-client.version>
   </properties>
 
   <dependencyManagement>
@@ -912,7 +912,7 @@
     <dependency>
       <groupId>org.flowable</groupId>
       <artifactId>flowable-engine</artifactId>
-      <version>7.0.1</version>
+      <version>7.2.0</version>
     </dependency>
     <dependency>
       <groupId>io.github.jamsesso</groupId>
diff --git a/openmetadata-service/src/main/java/org/openmetadata/service/governance/workflows/WorkflowHandler.java b/openmetadata-service/src/main/java/org/openmetadata/service/governance/workflows/WorkflowHandler.java
index aa9579f1565..946228ba25b 100644
--- a/openmetadata-service/src/main/java/org/openmetadata/service/governance/workflows/WorkflowHandler.java
+++ b/openmetadata-service/src/main/java/org/openmetadata/service/governance/workflows/WorkflowHandler.java
@@ -57,7 +57,7 @@ public class WorkflowHandler {
             .setJdbcUsername(config.getDataSourceFactory().getUser())
             .setJdbcPassword(config.getDataSourceFactory().getPassword())
             .setJdbcDriver(config.getDataSourceFactory().getDriverClass())
-            .setDatabaseSchemaUpdate(ProcessEngineConfiguration.DB_SCHEMA_UPDATE_FALSE);
+            .setDatabaseSchemaUpdate(ProcessEngineConfiguration.DB_SCHEMA_UPDATE_TRUE);
 
     if (ConnectionType.MYSQL.label.equals(config.getDataSourceFactory().getDriverClass())) {
       processEngineConfiguration.setDatabaseType(ProcessEngineConfiguration.DATABASE_TYPE_MYSQL);
@@ -93,7 +93,7 @@ public class WorkflowHandler {
         .setJdbcPassword(currentProcessEngineConfiguration.getJdbcPassword())
         .setJdbcDriver(currentProcessEngineConfiguration.getJdbcDriver())
         .setDatabaseType(currentProcessEngineConfiguration.getDatabaseType())
-        .setDatabaseSchemaUpdate(ProcessEngineConfiguration.DB_SCHEMA_UPDATE_FALSE);
+        .setDatabaseSchemaUpdate(ProcessEngineConfiguration.DB_SCHEMA_UPDATE_TRUE);
 
     // Setting Async Executor Configuration
     processEngineConfiguration
diff --git a/pom.xml b/pom.xml
index 383acfa8150..928fee6faf5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,7 +112,7 @@
     <httpasyncclient.version>4.1.5</httpasyncclient.version>
     <openapiswagger.version>2.2.25</openapiswagger.version>
     <httpclient.version>4.5.14</httpclient.version>
-    <spring.version>6.2.10</spring.version>
+    <spring.version>6.2.11</spring.version>
     <log4j.version>2.21.0</log4j.version>
     <org.junit.jupiter.version>5.9.3</org.junit.jupiter.version>
     <dropwizard-health.version>4.0.14</dropwizard-health.version>