Bump the maven-minor-and-patch group across 1 directory with 27 updates

[dependabot]

Bumps the maven-minor-and-patch group with 27 updates in the / directory:

Package	From	To
org.openjfx:javafx-controls	17.0.13	17.0.20
org.openjfx:javafx-base	17.0.13	17.0.20
org.openjfx:javafx-graphics	17.0.13	17.0.20
org.kordamp.ikonli:ikonli-javafx	12.3.1	12.4.0
org.kordamp.ikonli:ikonli-feather-pack	12.3.1	12.4.0
org.kordamp.ikonli:ikonli-feather-pack	12.3.1	12.4.0
org.apache.commons:commons-collections4	4.4	4.6.0
commons-io:commons-io	2.20.0	2.22.0
ch.qos.logback:logback-classic	1.5.38	1.6.5
org.projectlombok:lombok	1.18.34	1.18.48
com.oracle.database.jdbc:ojdbc11	23.5.0.24.07	23.26.3.0.0
com.oracle.database.nls:orai18n	23.5.0.24.07	23.26.3.0.0
com.microsoft.sqlserver:mssql-jdbc	12.8.2.jre11	12.10.2.jre11
com.h2database:h2	2.3.232	2.5.252
org.xerial:sqlite-jdbc	3.46.1.3	3.53.4.0
org.apache.maven.plugins:maven-compiler-plugin	3.13.0	3.16.0
org.apache.maven.plugins:maven-surefire-plugin	3.5.0	3.6.0
org.jacoco:jacoco-maven-plugin	0.8.12	0.8.15
org.apache.maven.plugins:maven-jar-plugin	3.4.2	3.5.1
org.apache.maven.plugins:maven-shade-plugin	3.6.0	3.6.2
org.apache.maven.plugins:maven-source-plugin	3.3.1	3.4.0
org.apache.maven.plugins:maven-javadoc-plugin	3.11.2	3.12.0
org.apache.maven.plugins:maven-dependency-plugin	3.7.0	3.11.0
org.apache.maven.plugins:maven-assembly-plugin	3.6.0	3.8.0
org.apache.maven.plugins:maven-resources-plugin	3.3.1	3.5.0
org.apache.maven.plugins:maven-antrun-plugin	3.1.0	3.2.0
org.apache.maven.plugins:maven-clean-plugin	3.2.0	3.5.0
org.openjfx:javafx-base	17.0.13	17.0.20
org.openjfx:javafx-graphics	17.0.13	17.0.20
org.apache.maven:apache-maven	3.9.9	3.10.0

Updates org.openjfx:javafx-controls from 17.0.13 to 17.0.20

Updates org.openjfx:javafx-base from 17.0.13 to 17.0.20

Updates org.openjfx:javafx-graphics from 17.0.13 to 17.0.20

Updates org.kordamp.ikonli:ikonli-javafx from 12.3.1 to 12.4.0

Release notes

Sourced from org.kordamp.ikonli:ikonli-javafx's releases.

Release v12.4.0

Changelog

🚀 Features

• 89496db javafx: Let icon units be specified, closes #150
• fc56a22 Update MaterialDesign2 to 7.4.47, closes #172
• 11e2b07 Generate GraalVM native compatible reflect config resources
• 2f70561 Register font resources with GraalVM native-image resources, closes #170
• b339ae8 Add OSGi support, closes #35
• fcdcf1f Add icon pack for Font Awesome 6
• 3de249e Add new icon font bytedance

🐛 Fixes

• c9a8564 Fix license headers

🔄️ Changes

• 0112bf0 Reformat code

🛠 Build

• 1e9f03c Enforce bytecode compatibility
• 7c6d423 Configure SBOM generation in release
• eaff777 Remove twitter from release configuration
• f34e72d Update license headers
• 6edecf3 Update packaging settings
• ab7922b Update packaging settings
• 4e08324 Add missing fontawesome6 module to ikonli-browser
• 1d52729 Fix broken build due to Gradle shenanigans
• 7314cc2 Add Fontawesome6 to sample apps
• 3217bf3 Update Gradle wrapper to 8.12
• d5ab4c9 Remove modularity plugin
• e24fee3 Update build settings
• ae9a419 Update GH actions
• 575d929 Simplify GH workflow configuration
• 48ef788 Update GH workflows
• 90240e2 Update license headers
• 5d4541f Update release settings
• aa278aa Add security settings
• f187b6b Tweak release configuration

📝 Documentation

• 26ebee4 Update resource locations of icon packs cheat sheets
• e7cd80b Update badges in readme [skip ci]

---

• df4a82b Releasing version 12.4.0
• 529fcee Bump for next development cycle

Contributors

We'd like to thank the following people for their contributions:

... (truncated)

Commits

• df4a82b Releasing version 12.4.0
• 89496db feat(javafx): Let icon units be specified
• fc56a22 feat: Update MaterialDesign2 to 7.4.47
• 11e2b07 feat: Generate GraalVM native compatible reflect config resources
• 1e9f03c build: Enforce bytecode compatibility
• 7c6d423 build: Configure SBOM generation in release
• 2f70561 feat: Register font resources with GraalVM native-image resources
• 0112bf0 refactor: Reformat code
• eaff777 build: Remove twitter from release configuration
• f34e72d build: Update license headers
• Additional commits viewable in compare view

Updates org.kordamp.ikonli:ikonli-feather-pack from 12.3.1 to 12.4.0

Release notes

Sourced from org.kordamp.ikonli:ikonli-feather-pack's releases.

Release v12.4.0

Changelog

🚀 Features

• 89496db javafx: Let icon units be specified, closes #150
• fc56a22 Update MaterialDesign2 to 7.4.47, closes #172
• 11e2b07 Generate GraalVM native compatible reflect config resources
• 2f70561 Register font resources with GraalVM native-image resources, closes #170
• b339ae8 Add OSGi support, closes #35
• fcdcf1f Add icon pack for Font Awesome 6
• 3de249e Add new icon font bytedance

🐛 Fixes

• c9a8564 Fix license headers

🔄️ Changes

• 0112bf0 Reformat code

🛠 Build

• 1e9f03c Enforce bytecode compatibility
• 7c6d423 Configure SBOM generation in release
• eaff777 Remove twitter from release configuration
• f34e72d Update license headers
• 6edecf3 Update packaging settings
• ab7922b Update packaging settings
• 4e08324 Add missing fontawesome6 module to ikonli-browser
• 1d52729 Fix broken build due to Gradle shenanigans
• 7314cc2 Add Fontawesome6 to sample apps
• 3217bf3 Update Gradle wrapper to 8.12
• d5ab4c9 Remove modularity plugin
• e24fee3 Update build settings
• ae9a419 Update GH actions
• 575d929 Simplify GH workflow configuration
• 48ef788 Update GH workflows
• 90240e2 Update license headers
• 5d4541f Update release settings
• aa278aa Add security settings
• f187b6b Tweak release configuration

📝 Documentation

• 26ebee4 Update resource locations of icon packs cheat sheets
• e7cd80b Update badges in readme [skip ci]

---

• df4a82b Releasing version 12.4.0
• 529fcee Bump for next development cycle

Contributors

We'd like to thank the following people for their contributions:

... (truncated)

Commits

• df4a82b Releasing version 12.4.0
• 89496db feat(javafx): Let icon units be specified
• fc56a22 feat: Update MaterialDesign2 to 7.4.47
• 11e2b07 feat: Generate GraalVM native compatible reflect config resources
• 1e9f03c build: Enforce bytecode compatibility
• 7c6d423 build: Configure SBOM generation in release
• 2f70561 feat: Register font resources with GraalVM native-image resources
• 0112bf0 refactor: Reformat code
• eaff777 build: Remove twitter from release configuration
• f34e72d build: Update license headers
• Additional commits viewable in compare view

Updates org.kordamp.ikonli:ikonli-feather-pack from 12.3.1 to 12.4.0

Release notes

Sourced from org.kordamp.ikonli:ikonli-feather-pack's releases.

Release v12.4.0

Changelog

🚀 Features

• 89496db javafx: Let icon units be specified, closes #150
• fc56a22 Update MaterialDesign2 to 7.4.47, closes #172
• 11e2b07 Generate GraalVM native compatible reflect config resources
• 2f70561 Register font resources with GraalVM native-image resources, closes #170
• b339ae8 Add OSGi support, closes #35
• fcdcf1f Add icon pack for Font Awesome 6
• 3de249e Add new icon font bytedance

🐛 Fixes

• c9a8564 Fix license headers

🔄️ Changes

• 0112bf0 Reformat code

🛠 Build

• 1e9f03c Enforce bytecode compatibility
• 7c6d423 Configure SBOM generation in release
• eaff777 Remove twitter from release configuration
• f34e72d Update license headers
• 6edecf3 Update packaging settings
• ab7922b Update packaging settings
• 4e08324 Add missing fontawesome6 module to ikonli-browser
• 1d52729 Fix broken build due to Gradle shenanigans
• 7314cc2 Add Fontawesome6 to sample apps
• 3217bf3 Update Gradle wrapper to 8.12
• d5ab4c9 Remove modularity plugin
• e24fee3 Update build settings
• ae9a419 Update GH actions
• 575d929 Simplify GH workflow configuration
• 48ef788 Update GH workflows
• 90240e2 Update license headers
• 5d4541f Update release settings
• aa278aa Add security settings
• f187b6b Tweak release configuration

📝 Documentation

• 26ebee4 Update resource locations of icon packs cheat sheets
• e7cd80b Update badges in readme [skip ci]

---

• df4a82b Releasing version 12.4.0
• 529fcee Bump for next development cycle

Contributors

We'd like to thank the following people for their contributions:

... (truncated)

Commits

• df4a82b Releasing version 12.4.0
• 89496db feat(javafx): Let icon units be specified
• fc56a22 feat: Update MaterialDesign2 to 7.4.47
• 11e2b07 feat: Generate GraalVM native compatible reflect config resources
• 1e9f03c build: Enforce bytecode compatibility
• 7c6d423 build: Configure SBOM generation in release
• 2f70561 feat: Register font resources with GraalVM native-image resources
• 0112bf0 refactor: Reformat code
• eaff777 build: Remove twitter from release configuration
• f34e72d build: Update license headers
• Additional commits viewable in compare view

Updates org.apache.commons:commons-collections4 from 4.4 to 4.6.0

Updates commons-io:commons-io from 2.20.0 to 2.22.0

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.5

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.5

2026-09-30 Release of logback version 1.6.5

• Fixed a vulnerability CVE-2026-104721 closely related to CVE-2026-19880. The fix in version 1.6.3, which strips forward and backward slashes from MDC values, was insufficient. An MDC value could still contain relative path components such as .., variable references such as /, or characters that are special in file name patterns and email addresses. This latest vulnerability was found and reported by François Martin (GitHub: @​martinfrancois, https://github.com/martinfrancois).

MDCBasedDiscriminator, used by SiftingAppender, now rejects MDC values instead of stripping characters from them. An MDC value is rejected if it is empty, if it is longer than 64 characters, if it contains the sequence .., or if it contains any of the following characters: / \ $ { } [ ] ( ) | ? * + % , @. When an MDC value is rejected, the discriminator returns the value of its DefaultValue property. A warning is emitted for each rejected value. These warnings are rate-limited.

• When compression is enabled, TimeBasedRollingPolicy and SizeAndTimeBasedRollingPolicy now also remove old log files that were never compressed, for example because the application was not running at rollover time. Previously, such files were ignored by maxHistory and accumulated indefinitely. This issue was discussed in discussions/1032. See TimeBasedRollingPolicy.

• SimpleInvocationGate, deprecated in version 1.6.3, is now marked for removal. Use FixedIntervalInvocationGate instead.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit d1b829dcdb9fd98511c64401beb1419a9c9384aa associated with the tag v_1.6.5. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.6.4

2026-09-24 Release of logback version 1.6.4

• Variable substitution is again applied to the scan attribute of the <configuration> element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of <propertiesConfigurator>. This regression was reported in issues/1065 by vaibhavjain2.

• OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes.

• Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock.

• Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. This issue was reported in issues/1038 by hcantunc. The fix was contributed in PR #1055 by seonwoo_jung.

• TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. The fix was contributed in PR #1051 by seonwoo_jung. See TimeBasedRollingPolicy.

• If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi.

• The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 07d291ca0d280bc5da934ec9ff5f1da634fd7937 associated with the tag v_1.6.4. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Full Changelog: qos-ch/logback@v_1.6.3...v_1.6.4

Logback 1.6.3

2026-08-14 Release of logback version 1.6.3

• In response CVE-2026-19880, MDCBasedDiscriminator (used by SiftingAppender) now strips forward and backward slashes (/, \) from MDC values before they are used as discriminating keys. This prevents path segments from escaping into destinations controlled by an attacker. When sanitisation actually changes a value, a warning is emitted; the warning is rate-limited (a small batch, then a lull of about ten minutes).

• Colour console support is split out into a dedicated JansiConsoleAppender. It wraps stdout or stderr with Jansi so ANSI escape sequences (for example coloured patterns) render correctly on terminals that need it, notably Windows. Prefer this class over the older path described next. See the appenders documentation.

• The withJansi property on ConsoleAppender is deprecated. Existing configurations that still set <withJansi>true</withJansi> continue to work for compatibility, but new setups should use JansiConsoleAppender instead.

• ConsoleAppender no longer treats the process console as an exclusive resource: stopping it does not close System.out / System.err. JansiConsoleAppender pairs each AnsiConsole.systemInstall() with systemUninstall() on stop, so repeated start/stop cycles do not leave Jansi installed or tear down streams shared with the rest of the JVM. Related behavior is covered by tests for issues/1063.

• Invocation throttling helpers were reworked: SimpleInvocationGate is renamed FixedIntervalInvocationGate, and BatchedFixedIntervalInvocationGate allows a short burst of invocations before applying a fixed lull. The sanitisation warning above uses the batched gate.

• The JPMS module-info for logback-core now exports the ch.qos.logback.core.property package, which had been missing from the module descriptor.

... (truncated)

Commits

• d1b829d prepare release 1.6.5
• 065b9b2 enhance protectin against mischievious MDC values in MDCBasedDiscriminator
• b69beab complete commit in relation to discussion_1032
• 7266c0b fix intermittently failing SocketAppenderMessageLossTest rest condition
• a633bb0 fix intermittently failing SocketAppenderMessageLossTest rest condition
• 2bc5bcc renamed tbrp and eclosingTBRP, other minor changes
• 2cd8762 fix typo in AGENTS.md
• 647846c fix errors when running tests under intellij IDEA
• 1048917 removed ConsoleCharsetPropertyDefiner.java
• 39b5002 added 'since' and 'forRemoval' attributes to SimpleInvocationGate @​Deprecatio...
• Additional commits viewable in compare view

Updates org.projectlombok:lombok from 1.18.34 to 1.18.48

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.48 (September 1st, 2026)

• BREAKING CHANGE/BUGFIX: @Builder(builderClassName = "Builder") now generates an error, because the type names collide. #3857 (found after release)
• PLATFORM: JDK27 support added #4072.
• BUGFIX: @SneakyThrows usage on JDK26 no longer results in class files that require lombok.jar to be on the runtime classpath (which should not be neccessary). #4040.
• FEATURE: New config key lombok.checkReturnValueAnnotation (values: none, lombok; default: none) lets lombok generate @lombok.CheckReturnValue on generated methods where the return value should not be ignored, such as @With methods and @Builder.build(). A future lombok release may flip the default to lombok. #4013.
• PROMOTION: @SuperBuilder has been promoted to the main package. Otherwise, no changes have been made to the annotation. The old experimental annotation will remain for a few versions, at which point it will be marked as a deprecated annotation. Eventually it'll be removed. If you had lombok.config configuration for this annotation, the configuration keys for this feature have been renamed. #2209.
• OLD-CRUFT: lombok.experimental.Wither and lombok.Delegate are deprecated remnants; these features were moved (to respectively lombok.With and lombok.experimental.Delegate over 5 years ago. They are now removed entirely. If your project is dependent on an older version of lombok which still has those; fret not, lombok still processes these annotations. It just no longer includes them in the jar.
• FEATURE: CheckerFramework: Lombok now adds @SideEffectFree to constructors it makes if you have enabled checker framework via lombok.config.
• BUGFIX: CheckerFramework: Lombok would add @SideEffectFree to the build() method of any generated builder, even if it is a builder for invoking a method; in that case, the side-effect-free nature of build() mirrors the side-effect-free nature of the method invocation you've built. Lombok now checks if the method it generated a builder for is side effect free / 'check return type'.

v1.18.46 (April 22nd, 2026)

• PLATFORM: JDK26 support added #4019.
• PLATFORM: Spring Tools Suite 5 supported #3985.
• BUGFIX: @Jacksonized no longer stops generating @JsonProperty once an explicit @JsonIgnore annotations is encountered #4022.
• BUGFIX: In eclipse, mixing @Jacksonized and fluent = true no longer causes the error com.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface. #3934.
• BUGFIX: Some finishing touches for v1.18.44's support of Jackson3 #4004.

v1.18.44 (March 11th, 2026)

• FEATURE: @Jacksonized now supports both Jackson2 and Jackson3; you'll get a warning until you configure which one (or even both!) you want lombok to generate. #3950.
• BUGFIX: On JDK25, val and @ExtensionMethod could sometimes cause erroneous errors (in that you see errors but compilation succeeds anyway) using javac. #3947.
• BUGFIX: @Jacksonized + fields marked transient would result in those transient fields being serialised which is surprising (and thus undesired) behaviour. #3936.

v1.18.42 (September 18th, 2025)

• FEATURE: All the various @Log annotations now allow you to change their access level (they still default to private). #2280. Thanks to new contributor Liam Pace!
• BUGFIX: Javadoc parsing was broken in Netbeans and ErrorProne for JDK25 #3940.

v1.18.40 (September 4th, 2025)

• PLATFORM: JDK25 support added #3859.
• BUGFIX: Recent versions of eclipse (or the eclipse-based java lang server for VSCode) caused java.lang.IllegalArgumentException: Document does not match the AST. [Issue #3886](projectlombok/lombok#3886).
• PERFORMANCE: @ExtensionMethod is now significantly faster [Issue #3866](projectlombok/lombok#3866).
• BUGFIX: the command line config tool would emit incorrect output for nullity annotations. [Issue #3931](projectlombok/lombok#3931).
• FEATURE: @Jacksonized @Accessors(fluent=true) automatically creates the relevant annotations such that Jackson correctly identifies fluent accessors. [Issue #3265](projectlombok/lombok#3265), [Issue #3270](projectlombok/lombok#3270).
• IMPROBABLE BREAKING CHANGE: From versions 1.18.16 to 1.18.38, lombok automatically copies certain Jackson annotations (e.g., @JsonProperty) from fields to the corresponding accessors (getters/setters). However, it turned out to be harmful in certain situations. Thus, Lombok does not automatically copy those annotations any more. You can restore the old behavior using the config key lombok.copyJacksonAnnotationsToAccessors = true.

v1.18.38 (March 31st, 2025)

• PLATFORM: JDK24 support added.
• FEATURE: Lombok's nullity annotation now supports JSpecify out of the box, using config key jspecify.
• BUGFIX: Recent eclipse releases would get you 'negative length' error. The bug had always been in lombok but didn't matter until recent releases. [Issue #3823](projectlombok/lombok#3823).
• BUGFIX: The 'extract local variable' refactor script of VSCode wouldn't replace all occurrences if run on a method call to a lombok generated method. [Issue #3783](projectlombok/lombok#3783).

v1.18.36 (November 15th, 2024)

• PLATFORM: JDK23 support added.
• BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-maven-plugin will now compile.

Commits

• b48657c [version] pre-release version bump v1.18.48
• d1d0039 Merge branch 'jdk27'
• 1a23dad [review][refactor] No meaningful changes: Improved comments, javadoc, and cle...
• 40cdde8 [changelog] JDK27 support
• 25eae29 Add Danish Nawab to AUTHORS
• 10ab92b Support JDK27: end positions moved from EndPosTable to JCTree.endpos
• af01b7a Document the new configuration syntax for listy things
• 1be3857 There is no more HtAccess
• 405985d Semantic sections for website
• 04b7340 [trivial] fixing some outdated tests (tests were broken, not lombok).
• Additional commits viewable in compare view

Updates com.oracle.database.jdbc:ojdbc11 from 23.5.0.24.07 to 23.26.3.0.0

Updates com.oracle.database.nls:orai18n from 23.5.0.24.07 to 23.26.3.0.0

Updates com.microsoft.sqlserver:mssql-jdbc from 12.8.2.jre11 to 12.10.2.jre11

Release notes

Sourced from com.microsoft.sqlserver:mssql-jdbc's releases.

[12.10.2] Hotfix & Stable Release

Fixed issues

• Address a hostname validation vulnerability by securely parsing certificate common names. microsoft/mssql-jdbc#2803 What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.

[12.10.1] Stable Release

Fixed issues

• Make ibm security module optional #2679
• Invalidate existing enclave session during connection (re)connect #2680
• Update readFromFile() in ConfigurableRetryLogic to handle filePath #2681
• Increased the max noOfRedirections and updated the message. #2682
• Fixed New Type Param Definitions logic in doExecutePreparedStatement #2683
• Fixed session recovery for Azure SQL DB in redirect mode connected #2684

[12.10.0] Stable Release

Added

• Added provision to set SQLServerBulkCopy options in PreparedStatement #2555

Changed

• Changed the scope of BULK_COPY_OPERATION_CACHE to connection #2594
• Added "requireSecret" exclude tag for tests which require adding a secret to app registration #2596
• Added com.ibm.security.auth.module and com.sun.security.auth.module as option import #2609
• Updated driver dependency versions #2614

Fixed issues

• Introduced timeouts for MSAL calls #2562
• Fixed getGeneratedKeys functionality for execute API #2554
• Fixed ISQLServerConnection java doc reference #2560
• Fixed OffsetDateTime conversion for pre-Gregorian dates #2568
• Fix for driver cutting out the question mark from columns labels (aliases) #2569
• Fixed issue with SQLServerBulkCopy from CSV with setEscapeColumnDelimerts set to true #2575
• Fixed issue for finding mssql-jdbc.properties location in test environments #2579
• Fixed issue for IBM Semeru Runtime Certified Edition for z/OS and Kerberos #2581
• Set appropriate value to requestedEncryptionLevel for encrypt=STRICT #2597
• Add test for ManagedIdentityWithEncryptStrict #2599
• Check for null when getting DTV values (JDBC spec compliance - getBinaryStream /getAsciiStream will return null when the value is null) #2600
• Removed scheme from URI before fetching path for CRL path check #2622

[12.9.0] Preview Release

Added

• Added configurable retry logic feature, supporting both statement, and connection, retry #2396#2519
• Added JDK 23 support #2515

Changed

• Reverted "Execute Stored Procedures Directly" feature, as well as subsequent changes related to the feature #2488
• Changed MSAL logging from FINEST to FINER #2489
• Updated project pom file to pull dependencies from public Azure Artifacts Feed #2504
• Changed how Kerberos authentication acquires subject to provide compatibility for Kerberos with Java 23 and above #2539
• Removed user and password check for AccessTokenCallback #2549

Fixed issues

... (truncated)

Commits

• See full diff in compare view

Updates com.h2database:h2 from 2.3.232 to 2.5.252

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

version-2.5.250

... (truncated)

Commits

• f986838 in preparation for a release
• 06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
• 1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
• 4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
• 95b6af0 Merge pull request #4417 from andreitokar/issue-4395
• 6ec30b6 #4395 disallow constraints between temporary and permanent tables
• 0f0f856 Merge pull request #4416 from andreitokar/issue-4405
• f718b76 #4405 SecureFileStore.readFully() may skip decryption
• e231ff7 #4405 SecureFileStore.readFully() may skip
• 4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
• Additional commits viewable in compare view

Updates org.xerial:sqlite-jdbc from 3.46.1.3 to 3.53.4.0

Release notes

Sourced from org.xerial:sqlite-jdbc's releases.

Release 3.53.4.0

Changelog

🚀 Features

sqlite

• upgrade to sqlite 3.53.4 (3c55d7a)

🐛 Fixes

• bound utf-8 reader to the terminating nul in extension-functions (a6f4d4d)

🛠 Build

deps

• bump org.graalvm.buildtools:native-maven-plugin (c72dc32)
• bump org.graalvm.buildtools:native-maven-plugin (f5aaf0e)
• bump EndBug/add-and-commit from 10 to 11 (0a6a8f2)
• bump org.graalvm.buildtools:native-maven-plugin (843cd86)
• bump org.graalvm.buildtools:native-maven-plugin (16aa812)
• bump org.graalvm.sdk:nativeimage from 25.1.3 to 25.2.4 (47e20b2)

deps-dev

• bump com.tngtech.archunit:archunit-junit5 (db432fd)
• bump org.apache.maven.plugins:maven-jar-plugin (7650e24)

Contributors

We'd like to thank the following people for their contributions: Gauthier, Javid Khan

Release 3.53.2.1

Changelog

🐛 Fixes

jdbc

• map DATETIME column type to Types.TIMESTAMP (19ac6bb), closes #1436
• throw SQLException from createConnection on invalid URL (fe636b7)
• escape resolved table name in getExportedKeys query (b8eca2a)
• escape catalog and schema in foreign key metadata queries (ff4b847)
• escape table type values in getTables metadata query (33eaa19)
• escape table name in getColumns metadata query (a5149f8)

pool

• reset connection before notifying listeners on close (57f6cfa), closes #821

unscoped

• fallback to isAlpineLinux when map_files contains no musl entries (7537528), closes #1382

🔄️ Changes

• spotless apply (eec4fc5)

... (truncated)

Commits

• cab7981 chore(release): 3.53.4.0 [skip ci]
• d52d7d6 chore: update native libraries
• 3c55d7a feat(sqlite): upgrade to sqlite 3.53.4
• c72dc32 build(deps): bump org.graalvm.buildtools:native-maven-plugin
• a6f4d4d fix: bound utf-8 reader to the terminating nul in extension-functions
• f5aaf0e build(deps): bump org.graalvm.buildtools:native-maven-plugin
• 0a6a8f2 build(deps): bump EndBug/add-and-commit from 10 to 11
• db432fd build(deps-dev): bump com.tngtech.archunit:archunit-junit5
• 843cd86 build(deps): bump org.graalvm.buildtools:native-maven-plugin
• 16aa812 build(deps): bump org.graalvm.buildtools:native-maven-plugin
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

• Recompile when dependencies change (#1102) @​wilx
• Fix incremental detection of empty sources, 3.x (#1075) @​wilx

🐛 Bug Fixes

• [MCOMPILER-578] - Track outputs across compiler executions (#1091) @​wilx
• Build fails when annotation processor list is empty (but present) (#1077) @​wilx
• [MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @​wilx
• Make mcompiler-120 IT locale independent (#1063) @​anilvdl

📝 Documentation updates

• [MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @​wilx
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @​potiuk

👻 Maintenance

• Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @​slawekjaranowski
• Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @​slawekjaranowski
• Port the site documentation from APT to Markdown (#1110) @​slachiewicz
• Verify against Maven 4.0.0-rc-6 (#1105) @​slachiewicz
• Fix tests on Jenkins (#1100) @​slawekjaranowski
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @​potiuk
• Refactor compiler mojo to use dependency injection and improve string… (#1066) @​slachiewicz
• Fix ITs for Maven 3.10.x (#1061) @​slawekjaranowski
• Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @​cdouillard

📦 Dependency updates

• Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]
• use latest Maven 4 (#1045) @​hboutemy
• Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]
• Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]
• Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]
• Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]
• Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]
• Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

3.15.0

... (truncated)

Commits

• e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
• c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
• ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
• beb0eda Recompile when dependencies change (#1102)
• a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
• 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
• 2132f5b configure ATR project
• 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
• acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
• 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.0 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

• Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @​AzazelSensei

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.