Update dependency org.liquibase:liquibase-core to v4.28.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.liquibase:liquibase-core (source)	4.0.0 -> 4.28.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

liquibase/liquibase (org.liquibase:liquibase-core)

v4.28.0

v4.27.0

Liquibase 4.27.0 contains several New Capabilities and Notable Enhancements for Liquibase Pro users: DATABASECHANGELOGHISTORY table, Quality Checks Chains, Rollback Reports
See the Liquibase 4.27.0 Release Notes for the complete set of release information.

v4.26.0

[!IMPORTANT]
Liquibase 4.26.0 contains several Notable Changes for Liquibase Pro users: Advanced IF conditionals, Simpler Regex-based pattern checks, and Checks Run Reports.

[!NOTE]
See the Liquibase 4.26.0 Release Notes for the complete set of release information.

v4.25.1

v4.25.0

v4.24.0

v4.23.2

v4.23.1

v4.23.0

v4.22.0

v4.21.1

v4.21.0

v4.20.0

Liquibase v4.20.0 is a patch release

API Breaking Changes

• Remove Liquibase Hub auto-registration prompts and no longer support new Liquibase Hub registrations. Please get in touch with customer support with any questions. (DAT-13419) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3886
• Refactor of commands: diff, diffchangelog, generatechangelog DAT-6606, DAT-6607, DAT-6623, DAT-6613 by @​filipelautert in https://github.com/liquibase/liquibase/pull/3775

Enhancements

• Automate deployment of XSDs to new beta landing site by @​sayaliM0412 in https://github.com/liquibase/liquibase/pull/3867
• Issue 3584: Add support for relativeToChangelogFile for ChangeLogProperty class/property attribute by @​jasonlyle88 in https://github.com/liquibase/liquibase/pull/3595
• Jakartaee CDI for liquibase by @​xazap in https://github.com/liquibase/liquibase/pull/3642
• Use variable for maven version by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3895
• More maven version pinning by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3887
• Update db changelog xsd to 4.20 by @​suryaaki2 in https://github.com/liquibase/liquibase/pull/3918
• [PRO] Refactor of commands: diff, diffchangelog, generatechangelog DAT-6606, DAT-6607 and DAT-6613 by @​filipelautert in https://github.com/liquibase/liquibase-pro/pull/824
• [PRO] Update pro xsd and flow schema to 4.20 by @​suryaaki2 in https://github.com/liquibase/liquibase-pro/pull/861

Security, Driver and other updates

• Bump actions/cache from 3.2.5 to 3.2.6 by @​dependabot in https://github.com/liquibase/liquibase/pull/3851
• [PRO] Bump jsqlparser from 4.5 to 4.6 by @​dependabot in https://github.com/liquibase/liquibase-pro/pull/842
• [PRO] Bump mockito-core from 3.8.0 to 3.12.4 by @​dependabot in https://github.com/liquibase/liquibase-pro/pull/845
• [PRO] Bump actions/checkout from 2 to 3 by @​dependabot in https://github.com/liquibase/liquibase-pro/pull/846
• [PRO] Bump actions/setup-java from 2 to 3 by @​dependabot in https://github.com/liquibase/liquibase-pro/pull/847
• [PRO] Bump schdck/create-env-json from 1 to 2 by @​dependabot in https://github.com/liquibase/liquibase-pro/pull/848
• [PRO] Bump maven-compiler-plugin from 3.10.1 to 3.11.0 by @​dependabot in https://github.com/liquibase/liquibase-pro/pull/850

Fixes

• Safely call snakeyaml methods that have been changed in last versions. by @​filipelautert in https://github.com/liquibase/liquibase/pull/3904
• Only show structured log license message after value providers are registered (DAT-13362) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3850
• Pin maven version for sonar scan by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3880
• Fix CheckSum generation issues + improvements by @​MalloD12 in https://github.com/liquibase/liquibase/pull/3616
• Structured logging MdcKey renaming by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3875
• Revert "Fix CheckSum generation issues + CURRENT_CHECKSUM_ALGORITHM_VERSION updated from 8 to 9." by @​filipelautert in https://github.com/liquibase/liquibase/pull/3892
• [PRO] only show structured log license message after value providers are registered (DAT-13362) by @​StevenMassaro in https://github.com/liquibase/liquibase-pro/pull/839
• [PRO] Pin maven to 3.8.7 by @​wwillard7800 in https://github.com/liquibase/liquibase-pro/pull/855
• [PRO] GitHub action maven version pin by @​StevenMassaro in https://github.com/liquibase/liquibase-pro/pull/859

New Contributors

• @​sayaliM0412 made their first contribution in https://github.com/liquibase/liquibase/pull/3867
• @​jasonlyle88 made their first contribution in https://github.com/liquibase/liquibase/pull/3595
• @​xazap made their first contribution in https://github.com/liquibase/liquibase/pull/3642

Full Changelog: liquibase/liquibase@v4.19.1...v4.20.0

Get Certified

Learn all the Liquibase fundamentals from free online courses by Liquibase experts and see how to apply them in the real world at https://learn.liquibase.com/.

Read the Documentation

Please check out and contribute to the continually improving docs, now at https://docs.liquibase.com/.

Meet the Community

Our community has built a lot. From extensions to integrations, you’ve helped make Liquibase the amazing open source project that it is today. Keep contributing to making it stronger:

Contribute code
Make doc updates
Help by asking and answering questions
Set up a chat with the Product team

Thanks to everyone who helps make the Liquibase community strong!

File Descriptions

• Liquibase CLI -- Includes open source + commercial functionality
• liquibase-x.y.z.tar.gz -- Archive in tar.gz format
• liquibase-x.y.z.zip -- Archive in zip format
• liquibase-windows-x64-installer-x.y.z.exe -- Installer for Windows
• liquibase-macos-installer-x.y.z.dmg -- Installer for MacOS
• Primary Libraries - For embedding in other software
  • liquibase-core-x.y.z.jar – Base Liquibase library (open source)
  • liquibase-commerical-x.y.z.jar – Additional commercial functionality
• liquibase-additional-x.y.z.zip – Contains additional, less commonly used files
  • Additional libraries such as liquibase-maven-plugin.jar and liquibase-cdi.jar
  • Javadocs for all the libraries
  • Source archives for all the open source libraries
  • ASC/MD5/SHA1 verification hashes for all files

v4.19.1

Liquibase v4.19.1 is a patch release

Enhancements

• Publish liquibase-extension-testing to github packages (DAT-12833) by @​abrackx in https://github.com/liquibase/liquibase/pull/3697
• Add support for multiple schemas to dbDoc command by @​zpanderson in https://github.com/liquibase/liquibase/pull/1834
• No need redundant conditions. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3553
• Replace expressions with type arguments with diamond type <>. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3591
• Remove duplicate conditions in expressions and branches of if statements. They are used due to oversight. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3548
• Replace constant charset String literal with the predefined StandardC… by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3568
• Normalize path of SQL changelog file when parsing (DAT-11891) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3664
• Delegate change set equality tests by @​droy-sandbox in https://github.com/liquibase/liquibase/pull/3550
• (DAT-6636)Refactor of TagExistsCommandStep and extraction of code to new LockServiceCommandStep by @​filipelautert in https://github.com/liquibase/liquibase/pull/3667
• Refactors CalculateChecksumCommandStep by @​filipelautert in https://github.com/liquibase/liquibase/pull/3696
• CORE-3044 avoid locking if no updates pending by @​RichardBradley in https://github.com/liquibase/liquibase/pull/2190
• Warning in case of missing liquibase files instead of throwing an exception by @​mhewedy in https://github.com/liquibase/liquibase/pull/3081
• Remove redundant modifiers. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3594
• Update maven-bundle-plugin instructions to export package containing XSD files by @​GeertZondervan in https://github.com/liquibase/liquibase/pull/3597
• Remove redundant conditions that covered by a subsequent condition. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3590
• Add support for db2 view comments (DAT-12529) by @​abrackx in https://github.com/liquibase/liquibase/pull/3723
• Remove unnecessary cast expressions. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3670
• Performance improvements by @​filipelautert in https://github.com/liquibase/liquibase/pull/3588
• Implemented a summary of change sets which get filtered out during update (DAT-12068) by @​wwillard7800 in https://github.com/liquibase/liquibase/pull/3730
• Support tabular format for history command by @​fbiville in https://github.com/liquibase/liquibase/pull/3541
• Remove Unnecessary operation/modifier: by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3657
• Update and rename bug_report.md to bug_report.yaml by @​kevin-atx in https://github.com/liquibase/liquibase/pull/3728
• Improve command line help message format by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3829
• Use StandardCharsets constant instead. (DAT-12853) by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3725
• Update SnakeYAML usage - do not call deprecated methods by @​asomov in https://github.com/liquibase/liquibase/pull/3632
• Avoid global mutable state of Non-final fields in enumeration types. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3727
• Use constants instead of arrays with known lengths of zero by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3716
• Simplify lambda expressions when possible by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3736
• [PRO] Added new modifyChangeSets tag to support specification of runWith attribute for all change sets in include or includeAll
• [PRO] DAT-7922 Implement a check for one change per changeset by @​wwillard7800 in https://github.com/liquibase/liquibase-pro/pull/790
• [PRO] DAT-11915 Correctly escape SQL to enable and disable triggers on PostgreSQL by @​wwillard7800 in https://github.com/liquibase/liquibase-pro/pull/799
• [PRO] DAT-10157: add database scope for reserved words checks by @​StevenMassaro in https://github.com/liquibase/liquibase-pro/pull/802
• [PRO] DAT-13189 safely set code point limit for SnakeYaml by @​StevenMassaro in https://github.com/liquibase/liquibase-pro/pull/827
• [PRO] DAT-13440: show changesetsRolledback only after rollback is complete by @​StevenMassaro in https://github.com/liquibase/liquibase-pro/pull/838
• [PRO] DAT-12568 by @​jnewton03 in https://github.com/liquibase/liquibase-pro/pull/844

Fixes

• Fixes generate-changelog table/view comment and table/view column comment generation for MSSQL (DAT-12045) by @​abrackx in https://github.com/liquibase/liquibase/pull/3563
• Fully qualified path to the changelog or snapshot in S3 is not allowed, so needs better msg (DAT-11478) by @​diadiushko in https://github.com/liquibase/liquibase/pull/3564
• (DAT-12039) :detect circular references in includeAll statement by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3695
• improve logging around paths that do not exist (DAT-12038) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3669
• normalize path of json and yaml changelogs when parsing (DAT-11891) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3711
• deprecate DefaultLoggerConfiguration (DAT-11970) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3706
• Rework dropProcedure for Snowflake Log message when dropAll fails (DAT-12916) by @​wwillard7800 in https://github.com/liquibase/liquibase/pull/3702
• fix: snowflake has wrong priority by @​Yogurt-lei in https://github.com/liquibase/liquibase/pull/3572
• Do not add default schema name to getSchemas method to avoid one schema by @​LonwoLonwo in https://github.com/liquibase/liquibase/pull/3704
• #​3035 add Double data type class to avoid incorrect double(0) database by @​LonwoLonwo in https://github.com/liquibase/liquibase/pull/3703
• Stop publishing liquibase-extension-testing to Github on branch builds (DAT-13038) by @​abrackx in https://github.com/liquibase/liquibase/pull/3726
• do not support setting column comments on a view in Snowflake (DAT-12530) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3710
• Fix NullPointerException for case sensitive collations by @​ivan909020 in https://github.com/liquibase/liquibase/pull/3699
• (DAT-13269) pass proper branch name and add required field by @​jnewton03 in https://github.com/liquibase/liquibase/pull/3765
• Consistent ARG-suffix for 'defaultSchemaName'-Parameter by @​SIEDA-EliasHeydrich in https://github.com/liquibase/liquibase/pull/3662
• Removing explicit LiquibaseServletListener references by @​Thunderforge in https://github.com/liquibase/liquibase/pull/3677
• Add Snowflake structured data types to unmodifiable Data Types by @​LonwoLonwo in https://github.com/liquibase/liquibase/pull/3752
• Fix #​3690 primaryKeyExists does not work on DB2z by @​MichaelKern-IVV in https://github.com/liquibase/liquibase/pull/3691
• Replace old stream creation with java.nio. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3686
• github-action (DAT-13527) by @​jnewton03 in https://github.com/liquibase/liquibase/pull/3827
• Do not duplicate clearCheckSums logic by @​fbiville in https://github.com/liquibase/liquibase/pull/3628
• Fixing #​3708 - AddColumn fix for H2 version 1.4.200 by @​KarolyNevelos in https://github.com/liquibase/liquibase/pull/3709
• Added default values to private Scope constructor by @​MarkTJohnson in https://github.com/liquibase/liquibase/pull/3756
• Improved concurrency support by using ConcurrentHashMaps by @​jurgenkleverwal in https://github.com/liquibase/liquibase/pull/3799
• fixing lookahead for last line comment method by @​mwiede in https://github.com/liquibase/liquibase/pull/3717
• Do not calculate checksum when loading changelogs by @​filipelautert in https://github.com/liquibase/liquibase/pull/3790
• set up maven using simpler GitHub action by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3835
• safely set code point limit for SnakeYaml (DAT-13189) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3807
• Fix failing EnvironmentValueProviderTest by @​nvoxland in https://github.com/liquibase/liquibase/pull/3783
• show changesetsRolledback only after rollback is complete (DAT-13440) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3846

Security, Driver and other updates

OWASP Dependency Check: Reported Vulnerabilities
snakeyaml.jar - This is a "critical" vulnerability reported against the snakeyaml library. Note: Liquibase code is not vulnerable to this attack, but users can manually upgrade to the newest version of snakeyaml library, and will be upgraded to the unaffected snakeyaml 2.0 version in the next release. If you are interested, you can track the PR at https://github.com/liquibase/liquibase/pull/3865

• Bump junit-jupiter-params from 5.9.1 to 5.9.2 by @​dependabot in https://github.com/liquibase/liquibase/pull/3673
• Bump ant from 1.10.11 to 1.10.13 by @​dependabot in https://github.com/liquibase/liquibase/pull/3672
• Bump firebird-testcontainers-java from 1.2.0 to 1.3.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3653
• Bump actions/delete-package-versions from 3 to 4 by @​dependabot in https://github.com/liquibase/liquibase/pull/3649
• Bump maven-plugin-plugin from 3.7.0 to 3.7.1 by @​dependabot in https://github.com/liquibase/liquibase/pull/3698
• Bump assertj-core from 3.23.1 to 3.24.2 by @​dependabot in https://github.com/liquibase/liquibase/pull/3705
• Bump jaybird from 4.0.8.java8 to 5.0.0.java8 by @​dependabot in https://github.com/liquibase/liquibase/pull/3659
• Bump mariadb-java-client from 3.1.0 to 3.1.2 by @​dependabot in https://github.com/liquibase/liquibase/pull/3729
• Bump snowflake-jdbc from 3.13.26 to 3.13.27 by @​dependabot in https://github.com/liquibase/liquibase/pull/3751
• Bump picocli from 4.7.0 to 4.7.1 by @​dependabot in https://github.com/liquibase/liquibase/pull/3742
• Bump actions/cache from 3.2.3 to 3.2.4 by @​dependabot in https://github.com/liquibase/liquibase/pull/3750
• Bump actions/cache from 3.2.4 to 3.2.5 by @​dependabot in https://github.com/liquibase/liquibase/pull/3809
• Bump maven-deploy-plugin from 3.0.0 to 3.1.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3802
• Bump maven-shade-merge-manifest-transformer from 0.0.2 to 0.0.3 by @​dependabot in https://github.com/liquibase/liquibase/pull/3779
• Bump postgresql from 42.5.1 to 42.5.3 by @​dependabot in https://github.com/liquibase/liquibase/pull/3778
• Bump jaxb-runtime from 4.0.1 to 4.0.2 by @​dependabot in https://github.com/liquibase/liquibase/pull/3786
• Bump jaxb-core from 4.0.1 to 4.0.2 by @​dependabot in https://github.com/liquibase/liquibase/pull/3787
• Bump sqlite-jdbc from 3.40.0.0 to 3.40.1.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3772
• Bump maven-enforcer-plugin from 3.1.0 to 3.2.1 by @​dependabot in https://github.com/liquibase/liquibase/pull/3759
• Bump jaybird from 5.0.0.java8 to 5.0.1.java8 by @​dependabot in https://github.com/liquibase/liquibase/pull/3760
• Bump mssql-jdbc from 11.2.1.jre8 to 12.2.0.jre8 by @​dependabot in https://github.com/liquibase/liquibase/pull/3761
• Bump ojdbc8 from 21.8.0.0 to 21.9.0.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3808
• Bump postgresql from 42.5.3 to 42.5.4 by @​dependabot in https://github.com/liquibase/liquibase/pull/3831
• Migrate setup-java action to use Temurin by @​gdams in https://github.com/liquibase/liquibase/pull/3607

New Contributors

• @​zpanderson made their first contribution in https://github.com/liquibase/liquibase/pull/1834
• @​droy-sandbox made their first contribution in https://github.com/liquibase/liquibase/pull/3550
• @​mhewedy made their first contribution in https://github.com/liquibase/liquibase/pull/3081
• @​GeertZondervan made their first contribution in https://github.com/liquibase/liquibase/pull/3597
• @​Yogurt-lei made their first contribution in https://github.com/liquibase/liquibase/pull/3572
• @​gdams made their first contribution in https://github.com/liquibase/liquibase/pull/3607
• @​ivan909020 made their first contribution in https://github.com/liquibase/liquibase/pull/3699
• @​SIEDA-EliasHeydrich made their first contribution in https://github.com/liquibase/liquibase/pull/3662
• @​Thunderforge made their first contribution in https://github.com/liquibase/liquibase/pull/3677
• @​KarolyNevelos made their first contribution in https://github.com/liquibase/liquibase/pull/3709
• @​MarkTJohnson made their first contribution in https://github.com/liquibase/liquibase/pull/3756
• @​jurgenkleverwal made their first contribution in https://github.com/liquibase/liquibase/pull/3799
• @​mwiede made their first contribution in https://github.com/liquibase/liquibase/pull/3717

Full Changelog: liquibase/liquibase@v4.17.2...v4.19.1

Get Certified

Learn all the Liquibase fundamentals from free online courses by Liquibase experts and see how to apply them in the real world at https://learn.liquibase.com/.

Read the Documentation

Please check out and contribute to the continually improving docs, now at https://docs.liquibase.com/.

Meet the Community

Our community has built a lot. From extensions to integrations, you’ve helped make Liquibase the amazing open source project that it is today. Keep contributing to making it stronger:

Contribute code
Make doc updates
Help by asking and answering questions
Set up a chat with the Product team

Thanks to everyone who helps make the Liquibase community strong!

File Descriptions

• Liquibase CLI -- Includes open source + commercial functionality
• liquibase-x.y.z.tar.gz -- Archive in tar.gz format
• liquibase-x.y.z.zip -- Archive in zip format
• liquibase-windows-x64-installer-x.y.z.exe -- Installer for Windows
• liquibase-macos-installer-x.y.z.dmg -- Installer for MacOS
• Primary Libraries - For embedding in other software
  • liquibase-core-x.y.z.jar – Base Liquibase library (open source)
  • liquibase-commerical-x.y.z.jar – Additional commercial functionality
• liquibase-additional-x.y.z.zip – Contains additional, less commonly used files
  • Additional libraries such as liquibase-maven-plugin.jar and liquibase-cdi.jar
  • Javadocs for all the libraries
  • Source archives for all the open source libraries
  • ASC/MD5/SHA1 verification hashes for all files

Full Changelog: liquibase/liquibase@v4.19.0...v4.19.1

v4.19.0

Liquibase v4.19.0 is a patch release with an XSD upgrade.

Enhancements

• Simplify assert calls and replaced with simpler and equivalent calls. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3497
• Delete unused import statement. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3522
• Added call to modifyChangeSet during execute method to allow the changeSet to be correctly set on the executor DAT-12388 by @​wwillard7800 in https://github.com/liquibase/liquibase/pull/3511
• Remove unnecessary local variables that add nothing to the comprehensibility of a method. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3373
• Allow loading gzipped data files by @​mike-seger in https://github.com/liquibase/liquibase/pull/3379
• Use try-with-resources Statement when is possible. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3374
• Define and reuse constants. Use an empty array styles to convert a collection to an array. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3500
• Add support for block comment rollback commands on SQL changesets by @​krishnaenugandula in https://github.com/liquibase/liquibase/pull/1399
• Allow primary key on addColumn for H2 by @​nick318 in https://github.com/liquibase/liquibase/pull/3372
• Additional (optional) tableType attribute on the CreateTableChange by @​MartinRied in https://github.com/liquibase/liquibase/pull/3108
• Include "path" in databasechangelog's description column for all change types with "path" attributes by @​MichaelKern-IVV in https://github.com/liquibase/liquibase/pull/3244
• #​1466: Add ignore:true changeset attribute to Formatted SQL changeLogs by @​skrivenko in https://github.com/liquibase/liquibase/pull/3377
• #​1290: Forbid empty changeSet id and author by @​skrivenko in https://github.com/liquibase/liquibase/pull/3397
• Allow to drop and create a view for a Postgres database if replacing the view would fail by @​rozenshteyn in https://github.com/liquibase/liquibase/pull/3399
• Rename DatabaseObjectComparator class to be DatabaseObjectCollectionComparator for clarity DAT-10112 by @​wwillard7800 in https://github.com/liquibase/liquibase/pull/3544
• Do not lower case the ProvidedValue description if the string is capitalized, i.e. it starts with 2 upper-case characters DAT-12614 by @​wwillard7800 in https://github.com/liquibase/liquibase/pull/3589
• Use 'Integer.compare' instead by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3528
• Simplify 'Map' operations. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3527
• Remove unnecessary semicolon. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3571
• Missing Override annotations. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3558
• Prevents redundant loop iterations. Early loop exit in 'if' condition. by @​arturobernalg in https://github.com/liquibase/liquibase/pull/3547
• DAT 6635 - Implement TagCommand by @​filipelautert in https://github.com/liquibase/liquibase/pull/3570
• DAT-12576 update release workflow to attach artifact by run_id by @​ap-liquibase in https://github.com/liquibase/liquibase/pull/3629
• DAT-12365 update install4j script to version 10.x by @​jnewton03 in https://github.com/liquibase/liquibase/pull/3641
• Upgrades installer JDK version for next release. by @​filipelautert in https://github.com/liquibase/liquibase/pull/3440
• remove licenses that were moved to individual extensions (DAT-12784) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3646
• DAT-12597 include commercial sources and javadoc in reversion by @​ap-liquibase in https://github.com/liquibase/liquibase/pull/3671
• DAT-7686 Feature Request to control Sqlplus default liquibase.sqlplus.conf behavior

Security, Driver, and other updates

• Bump mariadb-java-client from 3.0.8 to 3.1.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3471
• Bump testcontainers-bom from 1.17.5 to 1.17.6 by @​dependabot in https://github.com/liquibase/liquibase/pull/3477
• Bump snowflake-jdbc from 3.13.22 to 3.13.25 by @​dependabot in https://github.com/liquibase/liquibase/pull/3475
• Bump slf4j-jdk14 from 2.0.3 to 2.0.4 by @​dependabot in https://github.com/liquibase/liquibase/pull/3485
• Bump maven-install-plugin from 3.0.1 to 3.1.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3484
• Bump castlabs/get-package-version-id-action from 2.0 to 2.1 by @​dependabot in https://github.com/liquibase/liquibase/pull/3490
• Bump sqlite-jdbc from 3.39.4.0 to 3.40.0.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3510
• Bump jaybird from 4.0.6.java8 to 4.0.8.java8 by @​dependabot in https://github.com/liquibase/liquibase/pull/3509
• Bump mockito-inline from 4.8.1 to 4.10.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3580
• Bump targetMavenVersion from 3.8.5 to 3.8.6 by @​dependabot in https://github.com/liquibase/liquibase/pull/3593
• Bump junit-jupiter-params from 5.8.1 to 5.9.1 by @​dependabot in https://github.com/liquibase/liquibase/pull/3592
• Bump jaybird from 4.0.6.java8 to 4.0.8.java8 by @​dependabot in https://github.com/liquibase/liquibase/pull/3602
• Bump slf4j-jdk14 from 2.0.4 to 2.0.6 by @​dependabot in https://github.com/liquibase/liquibase/pull/3566
• Bump snowflake-jdbc from 3.13.25 to 3.13.26 by @​dependabot in https://github.com/liquibase/liquibase/pull/3579
• Bump robinraju/release-downloader from 1.6 to 1.7 by @​dependabot in https://github.com/liquibase/liquibase/pull/3603
• Bump ojdbc8 from 21.7.0.0 to 21.8.0.0 by @​dependabot in https://github.com/liquibase/liquibase/pull/3551
• Bump up the max number of code points for JSON/YAML parser DAT-12657 by @​wwillard7800 in https://github.com/liquibase/liquibase/pull/3552
• Bump actions/cache from 3.0.11 to 3.2.3 by @​dependabot in https://github.com/liquibase/liquibase/pull/3654
• update changelog version - 4.19 by @​suryaaki2 in https://github.com/liquibase/liquibase/pull/3676
• Update changelog xsd 4.19 by @​suryaaki2 in https://github.com/liquibase/liquibase/pull/3678
• Bump targetMavenVersion from 3.8.5 to 3.8.7 by @​dependabot in https://github.com/liquibase/liquibase/pull/3634
• Update release-published.yml by @​jnewton03 in https://github.com/liquibase/liquibase/pull/3540
• DAT-12783 Adding extension license information by @​wwillard7800 in https://github.com/liquibase/liquibase/pull/3614

Fixes

• fix overwriteOutputFile parameter for GenerateChangelog (DAT-12036) by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3543
• Avoid ClassCastException when loading LogService from Scope by @​mattbertolini in https://github.com/liquibase/liquibase/pull/3518
• Adds exclusions for mariadb newly added waffle dependency. by @​filipelautert in https://github.com/liquibase/liquibase/pull/3559
• Correctly handle indexes with descending columns in snapshot DAT-11447 by @​wwillard7800 in https://github.com/liquibase/liquibase/pull/3535
• Fix getting default schema issue for firebird by @​MalloD12 in https://github.com/liquibase/liquibase/pull/3390
• Fix generatedSQL logic to allow setting up a function as a default value for MySQL version 8 by @​MalloD12 in https://github.com/liquibase/liquibase/pull/3362
• DAT-11579: when generating changelogs for MySQL, ignore table column order for PKs by @​StevenMassaro in https://github.com/liquibase/liquibase/pull/3486
• Included SQL to return unique constraints for Sybase by @​crenan in https://github.com/liquibase/liquibase/pull/3517
• Add varbinary and binary support for DB2 - fixes #​3408 by @​mihaelaDev in https://github.com/liquibase/liquibase/pull/3428
• Added support for COMPUTED values inside CSV files for loadData change by @​zbynekvavros in https://github.com/liquibase/liquibase/pull/944
• Prevent Executors collision due to hash used as a Map's key part by @​Dasiu in https://github.com/liquibase/liquibase/pull/3533
• Breaks out of LockService.init loop after validations are completed by @​filipelautert in https://github.com/liquibase/liquibase/pull/3576
• implement SingletonObject to solve #​2349 by @​yairogen in https://github.com/liquibase/liquibase/pull/3624
• Postgresql - Fallback to default schema name in SequenceSnapshotGenerator when this is null by @​djochim in https://github.com/liquibase/liquibase/pull/3637

OWASP Dependency Check: Reported Vulnerabilities

• snakeyaml.jar - This is a "critical" vulnerability reported against the snakeyaml library. We are currently on the newest version of snakeyaml and there is no fix for the issue as of yet.

New Contributors

• @​mike-seger made their first contribution in https://github.com/liquibase/liquibase/pull/3379
• @​crenan made their first contribution in https://github.com/liquibase/liquibase/pull/3517
• @​mihaelaDev made their first contribution in https://github.com/liquibase/liquibase/pull/3428
• @​krishnaenugandula made their first contribution in https://github.com/liquibase/liquibase/pull/1399
• @​skrivenko made their first contribution in https://github.com/liquibase/liquibase/pull/3397
• @​zbynekvavros made their first contribution in https://github.com/liquibase/liquibase/pull/944
• @​Dasiu made their first contribution in https://github.com/liquibase/liquibase/pull/3533
• @​yairogen made their first contribution in https://github.com/liquibase/liquibase/pull/3624
• @​djochim made their first contribution in https://github.com/liquibase/liquibase/pull/3637

Full Changelog: liquibase/liquibase@v4.18.0...v4.19.0

Get Certified

Learn all the Liquibase fundamentals from free online courses by Liquibase experts and see how to apply them in the real world at https://learn.liquibase.com/.

Read the Documentation

Please check out and contribute to the continually improving docs, now at https://docs.liquibase.com/.

Meet the Community

Our community has built a lot. From extensions to integrations, you’ve helped make Liquibase the amazing open source project that it is today. Keep contributing to making it stronger:

Contribute code
Make doc updates
Help by asking and answering questions
Set up a chat with the Product team

Thanks to everyone who helps make the Liquibase community strong!

File Descriptions

• Liquibase CLI -- Includes open source + commercial functionality
• liquibase-x.y.z.tar.gz -- Archive in tar.gz format
• liquibase-x.y.z.zip -- Archive in zip format
• liquibase-windows-x64-installer-x.y.z.exe -- Installer for Windows
• liquibase-macos-installer-x.y.z.dmg -- Installer for MacOS
• Primary Libraries - For embedding in other software
  • liquibase-core-x.y.z.jar – Base Liquibase library (open source)
  • liquibase-commerical-x.y.z.jar – Additional commercial functionality
• liquibase-additional-x.y.z.zip – Contains additional, less commonly used files
  • Additional libraries such as liquibase-maven-plugin.jar and liquibase-cdi.jar
  • Javadocs for all the libraries
  • Source archives for all the open source libraries
  • ASC/MD5/SHA1 verification hashes for all files
    NOTE: liquibase-core-.jar contains only the open-source license. If you use Liquibase Pro or other commercial add-ons, you must also install liquibase-commercial-.jar

v4.18.0: Liquibase v4.18.0

Compare Source

Liquibase v4.18.0

Notable Changes

[PRO] Hashicorp Vault extension and Liquibase Pro

Use together for increased security and convenience of centralized properties. Note: This release works with Vault v1, and a v2 compatible release will follow up soon.

• Security

  Vaults offer much greater security than defaults files or 
environment variables


• Centralization

  Secure your database credentials, Pro license key, secure urls, and more in one central location.
  Update your critical properties in one place, and all linked tools and jobs use the new values
.

[PRO] rollback-on-error command argument

• When set to true will attempt to rollback a failed update operation.
• Note: changesets marked failonerror=false, do not count as error, and so do not rollback-on-error

[OSS] Liquibase Environment variables

• Now free to all users, not just Pro users.
• Learn more at https://docs.liquibase.com/concepts/connections/liquibase-environment-variables.html

Enhancements

• [PRO] Added new modifyChangeSets tag to support specification of runWith attribute for all change sets in include or includeAll

API Breaking Changes

• Use PathHandler for writing log files, which allows using S3 and other extensions (DAT-11515) by @​abrackx in https://github.com/liquibase/liquibase/pull/3438

Security, Driver and other updates

• Upgrade mockito-inline from 4.8.0 to 4.8.1 by @​dependabot in https://github.com/liquibase/liquibase/pull/3382
• Upgrade actions/cache from 3.0.8 to 3.0.11 by @​dependabot in https://github.com/liquibase/liquibase/pull/3370
• Bump robinraju/release-downloader from 1.5 to 1.6 by @​dependabot in https://github.com/liquibase/liquibase/pull/3423
• Upgrade postgresql driver from 42.5.0 to 42.5.1 by @​dependabot in https://github.com/liquibase/liquibase/pull/3501
• Bump maven-plugin-plugin from 3.6.4 to 3.7.0 by @​dependabot in [https://github.com/Bump maven-plugin-plugin from 3.6.4 to 3.7.0 liquibase/liquibase#3450](https://togithub.com/liquibase/liquibase/pull/

---

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Branch automerge failure

This PR was configured for branch automerge, however this is not possible so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[viezly]

Pull request by bot. No need to analyze