| The same version of Commons DBCP2 has been used since 2015. Version 2.1.1 was released in 2015.https://github.com/DSpace/DSpace/blob/b574fb141a9424d3d0776647b0fcba01173fd837/pom.xml#L1106
 https://commons.apache.org/proper/commons-dbcp/changes-report.html
 Since then several minor releases have been released, last 2.8.0 on 2020-09-21. It is a simple quick win to upgrade. A review of the release changes in the link above should tell you something about the improvements, none are huge. But I think it's a good rule of thumb not to let too long pass without updating dependencies.  
                                                            Support for JDBC 4.2. (in Java 8) added in DBCP2 2.5.0The underlying Apache Commons Pool library will get upgraded from v. 2.4.2 to 2.8.1Various bug fixes Needs to be forked in the pom like is done for the postgres-driver based on Java version. I will submit a pull request soonish. See also. |