Skip to main content

Fire Arrow Server 1.14.1

· 2 min read
Till Gerken
Till Gerken
CTO

Fire Arrow Server 1.14.1 has been released.

  • (bugfix) Expired drop-privilege tokens are now cleaned up on schedule instead of failing every run and logging an error hourly
  • (maintenance) The Oracle database driver has been removed from the shipped artifact

Bug Fixes​

Scheduled Cleanup of Drop-Privilege Tokens Failed​

The $drop-privilege operation introduced in 1.14.0 records each token it mints so that expired tokens can be retained for audit and then purged after drop-privilege-cleanup-after-days (default 14). A background job runs on a fixed interval to delete tokens past that window.

On 1.14.0 that job failed on every run. Instead of deleting anything, it raised an error on each interval, so the log filled with a recurring failure roughly once an hour and expired drop-privilege tokens were never removed from the database. The job ran unconditionally, so every 1.14.0 deployment saw the recurring error even if $drop-privilege was never called and no tokens were ever minted.

1.14.1 fixes the cleanup job so it deletes expired drop-privilege tokens as intended. The recurring error stops after upgrade, and tokens older than the retention window are purged on the next run. No configuration change is required. Deployments that never used $drop-privilege have no tokens to remove and simply stop logging the error.

Dependency Upgrades​

The Oracle JDBC driver is no longer bundled with Fire Arrow Server. Oracle has never been a supported database backend, but the driver was reaching the shipped artifact indirectly through an upstream dependency, and it carries a proprietary (non-open-source) license. It has been removed from both the runtime and test dependencies, so Oracle no longer appears in the software bill of materials. Supported backends are unaffected and no operator action is required.