ScalarDB 3.15 Release Notes
This page includes a list of release notes for ScalarDB 3.15.
v3.15.9​
Release date: August 2, 2026
Summary​
This release updates the deprecation policy for both Community and Enterprise editions, fixes transaction abort, rollback, pause, and metadata cache invalidation issues, and upgrades several dependencies to address security vulnerabilities.
Community edition​
Improvements​
- Changed the deprecation policy so that APIs and configurations marked as deprecated will now be removed in 4.0.0 instead of 5.0.0. (#3520)
Bug fixes​
- Fixed a bug where aborting an in-flight, group-committed transaction by ID via
DistributedTransactionManager.rollback(String)/abort(String)could be lost when the Coordinator group commit feature was enabled. (#3619) - Upgraded the Jackson, Netty, Azure Cosmos DB, and Azure Blob Storage libraries to fix security issues: CVE-2026-42579, CVE-2026-42583, CVE-2026-42584, CVE-2026-42587, CVE-2026-44249, CVE-2026-45416, CVE-2026-45674, CVE-2026-47691, CVE-2026-50010, CVE-2026-54512, CVE-2026-54513, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-59901, and GHSA-r7wm-3cxj-wff9 (#3754)
- Upgraded the PostgreSQL JDBC driver and the Netty library to fix security issues: CVE-2026-42198, CVE-2026-42579, CVE-2026-45674, CVE-2026-47691, and CVE-2026-54291 (#3761)
Enterprise edition​
Improvements​
ScalarDB Cluster​
- Changed the deprecation policy so that APIs marked as deprecated will now be removed in 4.0.0 instead of 5.0.0.
Bug fixes​
ScalarDB Cluster​
- Fixed a bug where a
rollbackthat exceeded the cluster's request-forwarding hop limit was silently reported as successful instead of surfacing the failure, which could leave records prepared until lazy recovery. - Fixed a race condition where pausing a cluster node or the Transaction Coordinator could report success while the node remained unpaused. This could happen when an unpause or another pause request was issued concurrently, and also when a pause that waits for outstanding requests timed out after an earlier pause had already succeeded.
- Upgraded the Jackson and Netty libraries to fix security issues: CVE-2026-42579, CVE-2026-42583, CVE-2026-42584, CVE-2026-42587, CVE-2026-44249, CVE-2026-45416, CVE-2026-45674, CVE-2026-47691, CVE-2026-50010, CVE-2026-54512, CVE-2026-54513, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-59901, and GHSA-r7wm-3cxj-wff9
- Upgraded the Bouncy Castle library and the grpc_health_probe binary to fix security issues: CVE-2025-14813, CVE-2026-5598, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39821, CVE-2026-39822, CVE-2026-39836, CVE-2026-42499, and CVE-2026-42504
ScalarDB SQL​
- Fixed an issue where
CachedMetadata#invalidateNamespaceNamesCache()did not actually invalidate the cached list of namespaces, causingSHOW NAMESPACESand related operations to potentially return stale results until the cache TTL expired.
v3.15.8​
Release date: April 15, 2026
Summary​
This release includes improvements and bug fixes.
- MySQL Connector/J replaced with MariaDB Connector/J. SSL is no longer enabled by default. If you connect to MySQL 8.0 or later with
caching_sha2_passwordauthentication, addsslMode=REQUIREDorallowPublicKeyRetrieval=trueto your JDBC URL. No action is required forjdbc:mysql://URLs because ScalarDB automatically appendspermitMysqlSchemefor compatibility.
Community edition​
Improvements​
- Replaced MySQL Connector/J with MariaDB Connector/J due to licensing concerns. (#3428)
- Inserting or updating records with TIME (microsecond precision), TIMESTAMP (millisecond precision), and TIMESTAMPTZ (millisecond precision) column values will truncate out-of-range precision rather than throwing an exception. (#3393)
- Shortened JDBC index names using a hash when they exceed the maximum identifier length supported by the underlying database. (#3481)
Bug fixes​
- Upgraded the Netty library to fix security issues: CVE-2026-33870 and CVE-2026-33871 (#3452)
Enterprise edition​
Improvements​
ScalarDB SQL​
- Updated the TIMESTAMPTZ literal to make optional the space character before the UTC timezone
Zcharacter. For example,2021-03-04 12:30:45.123Zis now accepted, in addition to the current format2021-03-04 12:30:45.123 Z. Also, when selecting a TIMESTAMPTZ column, the value is printed without a space before theZ. - Fixed an issue where the shadow jar was unnecessarily published to GitHub Packages for the CLI module.
- Inserting or updating records with TIME (microsecond precision), TIMESTAMP (millisecond precision), and TIMESTAMPTZ (millisecond precision) column values will truncate out-of-range precision rather than throwing an exception.
Bug fixes​
ScalarDB Cluster​
- Upgraded
grpc_health_probeto fix security issues: CVE-2025-59250 and CVE-2026-25679 - Upgraded the Netty library to fix security issues: CVE-2026-33870 and CVE-2026-33871
- Upgraded
grpc_health_probeto fix a security issue: CVE-2026-34986.
ScalarDB SQL​
- Fixed a bug where duplicate column names were allowed in CREATE TABLE statements.
- Fixed missing strict date validation on time-related type formatters, which could allow invalid dates (e.g., February 30) to be silently accepted instead of rejected.
v3.15.7​
Release date: March 6, 2026
Summary​
This release includes several bug fixes.
Community edition​
Bug fixes​
- On Oracle, when importing a table with a column using the
NUMBER(1)data type, which is usually used for BOOLEAN data, that column can now be mapped to ScalarDB BOOLEAN using ScalarDB Schema Loaderoverride-columns-typesetting. (#3239) - Upgraded the Jackson library to fix a security issue: GHSA-72hv-8253-57qq (#3394)
Enterprise edition​
Bug fixes​
ScalarDB Cluster​
- Upgraded
grpc_health_probeto fix security issues: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, and CVE-2025-61730 - Upgraded the Kubernetes Java Client to fix a security issue: CVE-2024-29371
- Excluded
com.microsoft.azure:adal4jfrom the Kubernetes Java Client to fix security issues: CVE-2023-52428, CVE-2021-31684, and CVE-2023-1370 - Upgraded the Jackson library to fix a security issue: GHSA-72hv-8253-57qq
ScalarDB SQL​
- Fixed a
ClassCastExceptionthat occurred inStatementUtils.appendTerm()when handlingDATE,TIME,TIMESTAMP, andTIMESTAMPTZvalues. These values are now correctly formatted as string literals instead of being incorrectly cast to String.
v3.15.6​
Release date: November 26, 2025
Summary​
This release includes several bug fixes and vulnerability fixes.
Community edition​
Enhancements​
- Add integration tests for Cassandra 4 and 5. (#3143)
Bug fixes​
- Upgraded the Cosmos DB library to fix a security issue. CVE-2025-55163 (#3105)
- Upgraded the SQLServer driver to fix a security issue. CVE-2025-59250 (#3223)
Enterprise edition​
Bug fixes​
ScalarDB Cluster​
- Fixed a bug where
ResultSetin SQL API returned incorrect results when duplicate column names were present. - Upgraded the gRPC library to fix a security issue. CVE-2025-55163
- Upgraded
grpc_health_probeto fix security issues: CVE-2025-47907, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, and CVE-2025-58188.
v3.15.5​
Release date: July 16, 2025
Summary​
This release includes several bug fixes and vulnerability fixes.
Community edition​
Bug fixes​
- Fixed error handling for mutations in Cassandra. (#2827)
Enterprise edition​
Bug fixes​
ScalarDB Cluster​
- Fixed a bug where the data tag was updated even when it was not specified in update or upsert operations.
- Fixed a bug where an
UnsupportedOperationExceptionwas thrown when executing put operations on tables without ABAC policies, when ABAC was enabled. - Upgraded
grpc_health_probeto fix a security issue. CVE-2025-22874
v3.15.4​
Release date: June 21, 2025
Summary​
This release includes fixes for vulnerabilities and bugs.
Community edition​
Bug fixes​
- Add exception handling for DateTimeParseException on column value conversion. (#2662)
- Upgraded the PostgreSQL driver to fix security issues. CVE-2025-49146 (#2772)
- Fixed potential connection leak when using
jdbcstorage and Scan operation fails because the target table doesn't exist. (#2766)
Enterprise edition​
Bug fixes​
ScalarDB Cluster​
- Fixed a memory leak issue when the coordinator group commit feature is enabled.
- Upgraded the OpenSearch Java client to fix a security issue. CVE-2025-27820
v3.15.3​
Release date: May 15, 2025
Summary​
This release includes fixes for vulnerabilities and bugs, and adds support for running ScalarDB Cluster on the Omnistrate service.
Community edition​
Bug fixes​
- Fixed an issue with
DistributedStorageAdmin.getNamespaceNames()API when using the DynamoDB storage with the namespace prefix settingscalar.db.dynamo.namespace.prefix. The namespace names returned by this method wrongly contained the prefix. (#2641)
Enterprise edition​
Improvements​
ScalarDB Cluster​
- Added support for the Omnistrate service. Now, you can run ScalarDB Cluster in the Omnistrate service.
Bug fixes​
ScalarDB Cluster​
- Upgraded
grpc_health_probeto fix a security issue. CVE-2025-22869
v3.15.2​
Release date: March 24, 2025
Summary​
This release has several improvements and bug fixes.
Community edition​
Improvements​
- ScalarDB BIGINT datatype will now be mapped to Oracle's NUMBER(16). (#2566)
Bug fixes​
- Upgraded the Netty library to fix a security issue. CVE-2025-24970 (#2552)
Enterprise edition​
Enhancements​
ScalarDB Cluster​
- Added a configuration option (
scalar.db.transaction.enabled) to enable or disable the transaction feature in ScalarDB Cluster. The default value istrue.
Bug fixes​
ScalarDB Cluster​
- Fixed a bug related to the metadata cache behavior when using auth in the SQL interface.
- Fixed configurations for the embedding feature.
- Fixed a bug that allowed superusers to execute ABAC administrative operations for non-existing users.
- Fixed a bug a table-not-found error occurs when dropping empty ABAC system tables.
v3.15.1​
Release date: February 20, 2025
Summary​
This release includes numerous enhancements, improvements, and bug fixes. The 3.15.0 release has been discarded, making this the first official release for 3.15.
Community edition​
Enhancements​
- Introduced operation attributes, providing the capability to include additional key-value information in operations. (#2333)
- Add the new time-related data types DATE, TIME, TIMESTAMP, and TIMESTAMPTZ. (#2468 #2491)
Improvements​
- ScalarDB now supports MySQL 8.4, 8.0; PostgreSQL 17, 16, 15, 14, and 13; Amazon Aurora PostgreSQL 16, 15, 14, and 13; Amazon Aurora MySQL 3, and 2. (#2302)
- Use the MariaDB Connector/J JDBC driver for any connection URL starting with
jdbc:mariadb(#2391) - Removed unnecessary loggings in the statement handlers for Cassandra and Cosmos DB. (#2469)
Bug fixes​
- Added validation for primary key columns in the Cosmos DB adapter. The validation ensures that the text values of the primary key columns do not contain illegal characters (
:,/,\,#, and?). (#2292) - Fixed the behavior of multiple mutations for the same record in a transaction in Consensus Commit. (#2340)
- Fixed the behavior when deleting a non-existing record in the Cosmos adapter. (#2341)
- Fixed bugs in GetBuilder and ScanBuilder. (#2352)
Enterprise edition​
Enhancements​
ScalarDB Cluster​
- Added support for operation attributes introduced in #2333 to ScalarDB Cluster.
- Added the attribute-based access control feature.
- Added support for the time-related types introduced in #2468 to ScalarDB Cluster.
- Added support for the metadata API for ABAC introduced in scalar-labs/scalardb-sql#708.
- Added vector search capability to ScalarDB Cluster by integrating LangChain4j.
ScalarDB SQL​
- Added support for operation attributes to DMLs. Also added support for read tags and write tags in ABAC to DMSs.
- Support the time-related types DATE, TIME, TIMESTAMP, and TIMESTAMPTZ.
- Added metadata API for ABAC.
- Added SQL statements for ABAC.
Bug fixes​
ScalarDB Cluster​
- Upgraded
grpc_health_probeto fix security issues. CVE-2024-45337 CVE-2024-45338
ScalarDB SQL​
- [Spring Data JDBC For ScalarDB] Fixed a bug
existsById()API not working - Fix an issue causing the SQL statement parser to reject negative numeric literal for columns of type INT and BIGINT.
v3.15.0​
Enterprise Options​
ScalarDB Analytics​
Enhancements​
- ScalarDB time-related types support.
- DynamoDB data source.
Improvements​
- Accumulate query events into log file per query.
Bug fixes​
- Avoid error due to duplicate catalog initialization.