Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the maven group across 1 directory with 8 updates #1

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the maven group across 1 directory with 8 updates #1

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github May 15, 2024

Bumps the maven group with 8 updates in the /backend directory:

Package From To
org.yaml:snakeyaml 1.21 2.0
io.grpc:grpc-protobuf 1.28.1 1.53.0
com.google.protobuf:protobuf-java 3.8.0 3.16.3
org.hibernate:hibernate-core 5.4.17.Final 5.4.24.Final
org.postgresql:postgresql 42.2.6 42.3.9
com.amazonaws:aws-java-sdk-s3 1.11.878 1.12.261
org.liquibase:liquibase-core 3.8.0 4.8.0
mysql:mysql-connector-java 8.0.17 8.0.28

Updates org.yaml:snakeyaml from 1.21 to 2.0

Commits
  • c98ffba issue 561: add negative test case
  • e2ca740 Use Maven wrapper on github
  • 49d91a1 Fix target for github
  • 19e331d Disable toolchain for github
  • 42c7812 Cobertura plugin does not work
  • 03c82b5 Rename GlobalTagRejectionTest to be run by Maven
  • 6e8cd89 Remove cobertura
  • d9b0f48 Improve Javadoc
  • 519791a Run install and site goals under docker
  • 82f33d2 Merge branch 'master' into add-module-info
  • Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.28.1 to 1.53.0

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

v1.53.0

New Features

  • googleapis: Allow user set c2p bootstrap config (#9856)
  • xds: Add contain and stringMatcher in RouteConfiguration (#9845)
  • core: Add grpc-previous-rpc-attempts to the initial response metadata (#9686)
  • servlet: Implement gRPC server as a Servlet (#8596)
  • authz: Implement static authorization server interceptor (#8934)

Examples

  • servlet: Add servlet example (#8596)

Bug Fixes

  • xds: Update xds error handling logic. Specifically:
    • When the ads stream is closed only send errors to subscribers that haven't yet gotten results
    • Timers to detect missing resources don’t start until the adsStream is ready (#9745)
    • Call subscriber onError callback when xds client fails to connect to server (#9827)
  • core: Delay retriable stream master listener close until all sub streams are closed. This fixes the call executor lifecycle and prevents potential RejectedExecutionException. (#9754)
  • core: Free unused MessageProducer in RetriableStream (#9853), fixing a Netty buffer memory leak for cancelled RPCs
  • api: Fail with NullPointerException when a Metadata.Marshaller returns null bytes (#9781). This would previously cause a NullPointerException later during the RPC. Now the return value of the Marshaller is checked immediately, to help find the broken Marshaller

Behavior Changes

  • xds: Disallow duplicate addresses in the RingHashLB. (#9776)
  • xds: EDS weight sums are allowed up to max unsigned int (was max signed int) (#9765)
  • xds: Drop xds v2 support (#9760)

Dependencies

  • JUnit upgraded to 4.13.2
  • bazel: Dropped support for Bazel 4. We track the two most recent major versions of Bazel, Bazel 5 and 6. Bazel 4 may still work, but we are no longer testing it
  • bazel: Include Tomcat annotations dependency for @Generated as used by autovalue (#9762). Necessary for building xds and rls on Java 9+
  • bazel: Export deps from Maven Central-specific stand-in targets (#9780). Some Maven Central artifacts are a combination of multiple Bazel targets, like grpc-core is composed of //core:inprocess, //core:internal, //core:util, //api. There is a “//core:core_maven” target used by maven_install that uses the other targets. Previously the target used runtime_deps to discourage their use by Bazel users, but that could cause compilation failures from lack of hjars. These targets now use exports

Acknowledgement

@​cpovirk @​niloc132 @​stephenh @​olderwei @​pandaapo @​panxuefeng

v1.52.1

Bug Fixes

  • xds: Fix an internal bug in xds resource subscription that might cause xds stream not accepting response update for that resource type entirely. (#9810)

v1.52.0

gRPC Java 1.52.0 Release Notes

grpc-xds starting with 1.51.0 had a regression where resources might stop receiving updates. The trigger could happen hours or days after the binary had started. xDS users should avoid this release and use 1.50.x until patch releases with the fix are available. grpc/grpc-java#9809

API Changes

... (truncated)

Commits
  • 4ca6de0 Bump version to 1.53.0
  • 2a1bb12 Update README etc to reference 1.53.0
  • b1b2424 rls:Fix throttling in route lookup (b/262779100) (#9874) (#9879)
  • 501ca8f xds: Update logic so that an error being reported when stream is closed gets ...
  • b0635fa googleapis: Allow user set c2p bootstrap config (#9856)
  • b289519 xds: fixed RouteConfiguration not supporting contain and stringMatcher (#9845)
  • 706646f servlet: Implement gRPC server as a Servlet (#8596)
  • 44847bf Upgrade JUnit to 4.13.2
  • 5a2c94b core: Free unused MessageProducer in RetriableStream
  • 9de989b okhttp: Avoid DNS lookup in test
  • Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 3.8.0 to 3.16.3

Release notes

Sourced from com.google.protobuf:protobuf-java's releases.

Protobuf Release v3.16.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users

Protocol Buffers v3.16.1

Java

  • Improve performance characteristics of UnknownFieldSet parsing (#9371)

Protocol Buffers v3.16.0

C++

  • Fix compiler warnings issue found in conformance_test_runner #8189 (#8190)
  • Fix MinGW-w64 build issues. (#8286)
  • [Protoc] C++ Resolved an issue where NO_DESTROY and CONSTINIT are in incorrect order (#8296)
  • Fix PROTOBUF_CONSTINIT macro redefinition (#8323)
  • Delete StringPiecePod (#8353)
  • Fix gcc error: comparison of unsigned expression in '>= 0' is always … (#8309)
  • Fix cmake install on iOS (#8301)
  • Create a CMake option to control whether or not RTTI is enabled (#8347)
  • Fix endian.h location on FreeBSD (#8351)
  • Refactor util::Status (#8354)
  • Make util::Status more similar to absl::Status (#8405)
  • Fix -Wsuggest-destructor-override for generated C++ proto classes. (#8408)
  • Refactor StatusOr and StringPiece (#8406)
  • Refactor uint128 (#8416)
  • The ::pb namespace is no longer exposed due to conflicts.
  • Allow MessageDifferencer::TreatAsSet() (and friends) to override previous calls instead of crashing.
  • Reduce the size of generated proto headers for protos with string or bytes fields.
  • Move arena() operation on uncommon path to out-of-line routine
  • For iterator-pair function parameter types, take both iterators by value.
  • Code-space savings and perhaps some modest performance improvements in RepeatedPtrField.
  • Eliminate nullptr check from every tag parse.
  • Remove unused _$name$cached_byte_size fields.
  • Serialize extension ranges together when not broken by a proto field in the middle.
  • Do out-of-line allocation and deallocation of string object in ArenaString.

... (truncated)

Commits
  • b8c2488 Updating version.json and repo version numbers to: 16.3
  • 42e47e5 Refactoring Java parsing (3.16.x) (#10668)
  • 98884a8 Merge pull request #10556 from deannagarcia/3.16.x
  • 450b648 Cherrypick ruby fixes for monterey
  • b17bb39 Merge pull request #10548 from protocolbuffers/3.16.x-202209131829
  • c18f5e7 Updating changelog
  • 6f4e817 Updating version.json and repo version numbers to: 16.2
  • a7d4e94 Merge pull request #10547 from deannagarcia/3.16.x
  • 55815e4 Apply patch
  • 152d7bf Update version.json with "lts": true (#10535)
  • Additional commits viewable in compare view

Updates org.hibernate:hibernate-core from 5.4.17.Final to 5.4.24.Final

Changelog

Sourced from org.hibernate:hibernate-core's changelog.

Changes in 5.4.24.Final (November 17, 2020)

https://hibernate.atlassian.net/projects/HHH/versions/31892

** Bug * [HHH-14333] - Pessimistic Lock causes FOR UPDATE on outer join statements * [HHH-14329] - DirtinessTracker usage for enhanced entities doesn't respect mutable types * [HHH-14322] - HBM many-to-one property-ref broken since 5.3.2 due to HHH-12684 * [HHH-14317] - Avoid closing datasource in AgroalConnectionProvider if datasource is not initialized * [HHH-14316] - Avoid accessing state in DriverManagerConnectionProviderImpl if null * [HHH-14312] - Padded batch style entity loader ignores entity graph * [HHH-14310] - Document hibernate.query.in_clause_parameter_padding * [HHH-14288] - Complex batch insert query stopped to work * [HHH-14279] - Broken 'with key(...)' operator on entity-key maps * [HHH-14276] - Nested ID class using derived identifiers fails with strange AnnotationException: unable to find column reference in the @​MapsId mapping: game_id * [HHH-14257] - An Entity A with a map collection having as index an Embeddable with a an association to the Entity A fails with a NPE * [HHH-13310] - getParameterValue() not working for collections

** Improvement * [HHH-14332] - Make it easier for Quarkus SPI to avoid loading XML * [HHH-14325] - Add Query hint for specifying "query spaces" for native queries * [HHH-14158] - Upgrade Javassist to the latest version

** Task * [HHH-14324] - Add .gradletasknamecache to .gitignore * [HHH-14309] - Improve BulkOperationCleanupAction#affectedEntity * [HHH-14225] - CVE-2020-25638 Potential for SQL injection on use_sql_comments logging enabled

Changes in 5.4.23.Final (November 01, 2020)

https://hibernate.atlassian.net/projects/HHH/versions/31887

** Bug * [HHH-14279] - Broken 'with key(...)' operator on entity-key maps * [HHH-14275] - Broken link to Infinispan User Guide in Hibernate 5.3 User Guide * [HHH-14260] - Dead links in user guide * [HHH-14259] - HHH-13980 is not merged into 5.4 * [HHH-14249] - MultiLineImport fails when script contains blank spaces or tabs at the end of the last sql statement * [HHH-14247] - Automatic release scripts, wrong Jira release url * [HHH-14227] - Insert statements are not ordered with entities that use inheritance and reference a subclass

** Improvement * [HHH-14305] - Analyse retained heap after bootstrap to trim memory consumption * [HHH-14304] - Replacing eager initialization of LockingStrategy within AbstractEntityPersister * [HHH-14303] - Upgrade to JBoss Loging 3.4.1.Final * [HHH-14302] - Upgrade to Agroal 1.9 * [HHH-14301] - Upgrade to Byte Buddy 1.10.17

... (truncated)

Commits
  • 0b5d3a2 5.4.24.Final
  • 33123d2 HHH-14333 Pessimistic Lock causes FOR UPDATE on outer join statements
  • 84e37c1 HHH-14332 Make it easier for Quarkus SPI to avoid loading XML related resources
  • da8706e HHH-14329 Amend existing DirtyTrackingTest
  • 2669848 HHH-14329 consider mutable types always as potentially dirty when using Dirti...
  • 5ea0d92 HHH-14329 test case showing that DirtinessTracker usage for enhanced entities...
  • c444d5f HHH-14325 - Add Query hint for specifying "query spaces" for native queries
  • 49ae7bd HHH-14325 - Add Query hint for specifying "query spaces" for native queries
  • fe2230f HHH-14276 Amend style and formatting
  • a8fdb4d HHH-14276 Avoid quoting column name for looking up references during composit...
  • Additional commits viewable in compare view

Updates org.postgresql:postgresql from 42.2.6 to 42.3.9

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.3.8

What's Changed

Full Changelog: pgjdbc/pgjdbc@REL42.3.7...REL42.3.8

v42.3.7

What's Changed

Full Changelog: pgjdbc/pgjdbc@REL42.3.6...REL42.3.7

v42.3.6

What's Changed

Full Changelog: pgjdbc/pgjdbc@REL42.3.5...REL42.3.6

v42.3.5

What's Changed

New Contributors

Full Changelog: pgjdbc/pgjdbc@REL42.3.4...REL42.3.5

v42.3.4

What's Changed

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

Changelog

Notable changes since version 42.0.0, read the complete History of Changes.

The format is based on Keep a Changelog.

[Unreleased]

Changed

Added

Fixed

[42.7.3] (2024-04-14 14:51:00 -0400)

Changed

Fixed

  • fix: boolean types not handled in SimpleQuery mode [PR #3146](pgjdbc/pgjdbc#3146)
    • make sure we handle boolean types in simple query mode
    • support uuid as well
    • handle all well known types in text mode and change else if to switch
  • fix: released new versions of 42.2.29, 42.3.10, 42.4.5, 42.5.6, 42.6.2 to deal with NoSuchMethodError on ByteBuffer#position when running on Java 8

[42.7.2] (2024-02-21 08:23:00 -0500)

Security

  • security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

Changed

Added

[42.7.1] (2023-12-06 08:34:00 -0500)

Changed

  • perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing [PR #3044](pgjdbc/pgjdbc#3044)

Fixed

... (truncated)

Commits

Updates com.amazonaws:aws-java-sdk-s3 from 1.11.878 to 1.12.261

Changelog

Sourced from com.amazonaws:aws-java-sdk-s3's changelog.

1.12.261 2022-07-14

AWS Config

  • Features

    • Update ResourceType enum with values for Route53Resolver, Batch, DMS, Workspaces, Stepfunctions, SageMaker, ElasticLoadBalancingV2, MSK types

AWS Glue

  • Features

    • This release adds an additional worker type for Glue Streaming jobs.

AWS Outposts

  • Features

    • This release adds the ShipmentInformation and AssetInformationList fields to the GetOrder API response.

AWSKendraFrontendService

  • Features

    • This release adds AccessControlConfigurations which allow you to redefine your document level access control without the need for content re-indexing.

Amazon Athena

  • Features

    • This release updates data types that contain either QueryExecutionId, NamedQueryId or ExpectedBucketOwner. Ids must be between 1 and 128 characters and contain only non-whitespace characters. ExpectedBucketOwner must be 12-digit string.

Amazon Elastic Compute Cloud

  • Features

    • This release adds flow logs for Transit Gateway to allow customers to gain deeper visibility and insights into network traffic through their Transit Gateways.

Amazon S3

  • Bugfixes

    • Fixed possible issue in TransferManager's downloadDirectory operation where files could be downloaded to some sibling directories of the destination directory if the key contained specially-crafted relative paths.

Amazon SageMaker Service

  • Features

    • This release adds support for G5, P4d, and C6i instance types in Amazon SageMaker Inference and increases the number of hyperparameters that can be searched from 20 to 30 in Amazon SageMaker Automatic Model Tuning

AmazonNimbleStudio

  • Features

    • Amazon Nimble Studio adds support for IAM-based access to AWS resources for Nimble Studio components and custom studio components. Studio Component scripts use these roles on Nimble Studio workstation to mount filesystems, access S3 buckets, or other configured resources in the Studio's AWS account

CodeArtifact

  • Features

    • This release introduces Package Origin Controls, a mechanism used to counteract Dependency Confusion attacks. Adds two new APIs, PutPackageOriginConfiguration and DescribePackage, and updates the ListPackage, DescribePackageVersion and ListPackageVersion APIs in support of the feature.

Firewall Management Service

  • Features

    • Adds support for strict ordering in stateful rule groups in Network Firewall policies.

Inspector2

  • Features

    • This release adds support for Inspector V2 scan configurations through the get and update configuration APIs. Currently this allows configuring ECR automated re-scan duration to lifetime or 180 days or 30 days.

1.12.260 2022-07-13

... (truncated)

Commits
  • cb66c50 AWS SDK for Java 1.12.261
  • 685134e Update GitHub version number to 1.12.261-SNAPSHOT
  • 5555d84 AWS SDK for Java 1.12.260
  • ae88c8a Update GitHub version number to 1.12.260-SNAPSHOT
  • 93a0a7f AWS SDK for Java 1.12.259
  • 5ec7cb7 Update GitHub version number to 1.12.259-SNAPSHOT
  • 75fe4e1 AWS SDK for Java 1.12.258
  • 8b6bdb0 Update GitHub version number to 1.12.258-SNAPSHOT
  • eba6423 AWS SDK for Java 1.12.257
  • d2f0b05 Update GitHub version number to 1.12.257-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.liquibase:liquibase-core from 3.8.0 to 4.8.0

Release notes

Sourced from org.liquibase:liquibase-core's releases.

v4.8.0

Liquibase 4.8.0 release

Please report any issues to https://github.com/liquibase/liquibase/issues.

Notable Changes

Liquibase 4.8.0 introduces the following functionality:

  • The init hub subcommand that connects your local Liquibase activity to Liquibase Hub and sets up the Liquibase environment to use Liquibase Hub. [DAT-8769]

Note: For more information, see init hub and Getting Started with Liquibase Hub.

  • [PRO] The sqlcmd utility support to process complex SQL for MSSQL Server. Liquibase provides the liquibase.sqlcmd.conf file to pass arguments to your executor when running Liquibase Pro. [DAT-7447]

Note: For more information, see Using the SQLCMD integration and runWith attribute with Liquibase Pro and MSSQL Server.

  • Changes to the behavior of the XML parser, which no longer allows referencing external DTD files for security reasons. If you use externally defined entities or any other potentially insecure XML feature in your changelogs, set liquibase.secureParsing=false. [PR#2384] [LB-2218]

Note: For more information about the ways to set the parameter, see Command Parameters.

  • The upgrade of the postgresql (from 42.2.12 to 42.3.2) and h2 (from 2.0.206 to 2.1.210) drivers that Liquibase includes in the installation package. If you use those drivers and upgrade an existing Liquibase installation, remove the earlier versions of drivers from the LIQUIBASE_HOME/lib directory.

Enhancements

  • Implemented the SimpleObjectConstructor interface for DB2 on z/OS [DAT-8580]
  • Included the CLI instructions on how to use the properties file with a nonstandard name when running the init project subcommand [DAT-9041]
  • Improved the output message for init start-h2 when the H2 database driver is specified, but there is no connection detected [DAT-8992]
  • Added validation errors for the enableCheckConstraint, disableCheckConstraint, dropPackage, dropPackageBody Change Types [DAT-9017]
  • [PR#2367] [Mike Olivas] Added example rollback scripts to the example-changelog.sql file [LB-2220]
  • [PR#1648] [Daniel Gray] Improved the exception error message for the customChange node with no class attribute [LB-1144]
  • [PR#2222] [msimko81] Added the offline mode support for the rollback-sql <tag> operation [LB-2198]
  • [PR#2273] [Tsvi Zandany] Added the autocomplete quality checks commands for macOS
  • [PR#2308] [Valentin Blistin] Added the close method for the ClassLoaderResourceAccessor class [LB-2205]

Fixes

... (truncated)

Changelog

Sourced from org.liquibase:liquibase-core's changelog.

Liquibase Core Changelog

Changes in version 4.27.0 (2024.03.26)

Liquibase 4.27.0 is a major release

Liquibase 4.27.0 contains several New Capabilities and Notable Enhancements for Liquibase Pro users: DATABASECHANGELOGHISTORY table, Quality Checks Chains, Rollback Reports See the Liquibase 4.27.0 Release Notes for the complete set of release information.

Notable Changes

[PRO]

Liquibase DATABASECHANGELOGHISTORY table: See all changes that have been applied to your database

  • With the new DatabaseChangeLogHistory (DBCLH) Table, get a complete history of changes made to your database through Liquibase operations, including updates, rollbacks, dropAlls, tags, changelogsyncs, and repeated updates to the same ChangeSet. The DBCLH table is disabled by default, so Users must turn it on to start capturing historical data.
  • Learn more https://docs.liquibase.com/databasechangeloghistory

Quality Checks Chains: Perform multiple policy evaluations with a single Quality Check

  • Chain multiple Quality Checks together with logic conditionals (AND, OR, and NOT) for more flexibility to perform multiple evaluations in a single check. Useful to confirm complex best practices or governance issues. Check Chains are run like traditional single-condition existing Quality Checks
  • Learn more https://docs.liquibase.com/quality-checks

Observability: Rollback Reports: Understand and share the data on the execution of rollback commands

  • Easily scan and understand a high-level overview of the ChangeSets rolled back. Get a detailed view of both successful and failed rollbacks. Collaborate with your team with shareable report in PDF format
  • Learn more https://docs.liquibase.com/observability

Breaking Change

[PRO] Changelog

... (truncated)

Commits

Updates mysql:mysql-connector-java from 8.0.17 to 8.0.28

Changelog

Sourced from mysql:mysql-connector-java's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 8.4.0

  • WL#15706, Add OpenTelemetry tracing.

  • WL#16174, Support for VECTOR data type.

  • Fix for Bug#36380711, Tests failing due to removal of deprecated features.

  • Fix for Bug#113600 (Bug#36171575), Contribution: Fix join condition for retrieval of imported primary keys. Thanks to Henning Pöttker for his contribution.

  • WL#16196, GPL License Exception Update.

  • Fix for Bug#111031 (Bug#35392222), Contribution: Update SyntaxRegressionTest.java. Thanks to Abby Palmero for her contribution.

  • Fix for Bug#113599 (Bug#36171571), Contribution: Replace StringBuffer with StringBuilder in ValueEncoders. Thanks to Henning Pöttker for his contribution.

  • Fix for Bug#91550 (Bug#28297874), DatabaseMetaData specifies incorrect extra name characters.

  • Fix for Bug#113129 (Bug#36043145), setting the FetchSize on a Statement object does not affect.

  • Fix for Bug#22931632, GETPARAMETERBINDINGS() ON A PS RETURNS NPE WHEN NOT ALL PARAMETERS ARE BOUND.

  • WL#16147, Remove support for FIDO authentication.

  • Fix for Bug#110286 (Bug#35152855), Only call Messages.getString(...) when it's needed (when the SQLException is thrown). Thanks to Janick Reynders for his contribution.

  • Fix for Bug#23143279, CLIENT HANG WHEN LOADBALANCESTRATEGY IS BESTRESPONSETIME.

Version 8.3.0

  • Fix for Bug#107107 (Bug#34101635), Redundant "Reset stmt" when setting useServerPrepStmts&cachePrepStmts to true. Thanks to Marcos Albe for his contribution.

  • Fix for Bug#19845752, COMMENT PARSING IS NOT PROPER IN CONNECTOR JDBC.

  • Fix for Bug#112884 (Bug#36043166), Setting a large timeout leads to errors when executing SQL.

  • WL#16077, Upgrade 3rd party libraries and tools.

  • WL#16074, Upgrade Protocol Buffers dependency to protobuf-java-3.25.1.

  • Fix for Bug#35929119, Issue with mysql-connector-j 8.0.33 connector (XDEVAPI) - getsession is slow.

... (truncated)

Commits
  • 7ff2161 Updating copyright years
  • b13af38 Fix for DateTimeTest according to changes in MySQL server.
  • 5c7b775 Update in test for Bug#96900 (30355150).
  • e1169ee Fix for Bug#99260 (31189960), statement.setQueryTimeout,creates a database co...

@dependabot
Bump the maven group across 1 directory with 8 updates
9531020 
Bumps the maven group with 8 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `1.21` | `2.0` |
| [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.28.1` | `1.53.0` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.8.0` | `3.16.3` |
| [org.hibernate:hibernate-core](https://github.com/hibernate/hibernate-orm) | `5.4.17.Final` | `5.4.24.Final` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.2.6` | `42.3.9` |
| [com.amazonaws:aws-java-sdk-s3](https://github.com/aws/aws-sdk-java) | `1.11.878` | `1.12.261` |
| [org.liquibase:liquibase-core](https://github.com/liquibase/liquibase) | `3.8.0` | `4.8.0` |
| [mysql:mysql-connector-java](https://github.com/mysql/mysql-connector-j) | `8.0.17` | `8.0.28` |



Updates `org.yaml:snakeyaml` from 1.21 to 2.0
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.0..snakeyaml-1.21)

Updates `io.grpc:grpc-protobuf` from 1.28.1 to 1.53.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.28.1...v1.53.0)

Updates `com.google.protobuf:protobuf-java` from 3.8.0 to 3.16.3
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.8.0...v3.16.3)

Updates `org.hibernate:hibernate-core` from 5.4.17.Final to 5.4.24.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/5.4.24/changelog.txt)
- [Commits](hibernate/hibernate-orm@5.4.17...5.4.24)

Updates `org.postgresql:postgresql` from 42.2.6 to 42.3.9
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.2.6...REL42.3.9)

Updates `com.amazonaws:aws-java-sdk-s3` from 1.11.878 to 1.12.261
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.11.878...1.12.261)

Updates `org.liquibase:liquibase-core` from 3.8.0 to 4.8.0
- [Release notes](https://github.com/liquibase/liquibase/releases)
- [Changelog](https://github.com/liquibase/liquibase/blob/master/changelog.txt)
- [Commits](liquibase/liquibase@liquibase-parent-3.8.0...v4.8.0)

Updates `mysql:mysql-connector-java` from 8.0.17 to 8.0.28
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/release/8.x/CHANGES)
- [Commits](mysql/mysql-connector-j@8.0.17...8.0.28)

---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: io.grpc:grpc-protobuf
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.hibernate:hibernate-core
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.amazonaws:aws-java-sdk-s3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.liquibase:liquibase-core
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: mysql:mysql-connector-java
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants