Hello Oak community,

we are using Apache Jackrabbit Oak with MongoDB as a document store backend.

We are facing a security concern: MongoDB 5.0 has reached end-of-life
and its APT repository signing key has expired (EXPKEYSIG
B00A0BD1E2C63C11). This means MongoDB 5.0 no longer receives security
patches, leaving production deployments potentially exposed to
unaddressed vulnerabilities.

The official Oak documentation (MongoDocumentStore) currently lists
MongoDB 5.0 as the supported version for Oak 1.62.0+, with "soon 6.0"
in parentheses. We also noticed that in OAK-9447,
a comment from October 2024 mentions that testing with MongoDB 6 had
recently started.

Could you please provide an update on:

  1. What is the current status of MongoDB 6.0 compatibility testing?
  2. Is there an expected timeline for officially supporting MongoDB 6.0?

Thank you,
Marco Matessi

Reply via email to