Sourced from hibernate-core's changelog.

Changes in 5.4.8.Final (October 28, 2019)

https://hibernate.atlassian.net/projects/HHH/versions/31804/tab/release-report-done

** Bug
* [HHH-12965] - Hibernate Envers Audit tables are created with foreign key with the entity. Because of this I am not able to delete any entries from the entity tables.
* [HHH-13446] - java.lang.VerifyError from compile-time enhanced @​Entity
* [HHH-13651] - NPE on flushing when ElementCollection field contains null element
* [HHH-13695] - DDL export forgets to close a Statement
* [HHH-13696] - Multiple OSGi bundles initializing concurrently would overlap classloaders

** Improvement
* [HHH-13686] - Upgrade to Agroal 1.6

Changes in 5.4.7.Final (October 21, 2019)

https://hibernate.atlassian.net/projects/HHH/versions/31799/tab/release-report-done

** Bug
* [HHH-4235] - MapBinder.createFormulatedValue() does not honor DB schema name when creating query
* [HHH-13633] - Bugs join-fetching a collection when scrolling with a stateless session using enhancement as proxy
* [HHH-13634] - PersistenceContext can get cleared before load completes using StatelessSessionImpl
* [HHH-13640] - Uninitialized HibernateProxy mapped as NO_PROXY gets initialized when reloaded with enhancement-as-proxy enabled
* [HHH-13653] - Uninitialized entity does not get initialized when a setter is called with enhancement-as-proxy enabled
* [HHH-13655] - Envers Map<Enum, Integer> causes NullPointerException when mapped with @​MapKeyEnumerated since Hibernate 5.4.6
* [HHH-13663] - Session#setHibernateFlushMode() method not callable without an active transaction
* [HHH-13665] - Selecting an entity annotated with @​Immutable but not with @​Cachable causes a NPE when use_reference_entries is enabled
* [HHH-13672] - The temporary PersistenceContext of a StatelessSession is not cleared after a refresh operation
* [HHH-13675] - Optimize PersistentBag.groupByEqualityHash()

** New Feature
* [HHH-10398] - _MOD columns not named correctly when using custom column names

** Task
* [HHH-13680] - Upgrade to Byte Buddy 1.10.2
* [HHH-13681] - Upgrade to Byteman 4.0.8

** Improvement
* [HHH-12858] - integration overrides during JPA bootstrap ought to override all logically related settings
* [HHH-13432] - Have EntityManagerFactory expose persistence.xml jta-data-source element as a javax.persistence.nonJtaDataSource property
* [HHH-13660] - Reduce allocation costs of IdentityMaps used by ResultSetProcessingContextImpl
* [HHH-13662] - Avoid initializing XmlMappingBinderAccess when no XML mappings are defined
* [HHH-13666] - AssertionFailure: Exception releasing cache locks upon After/BeforeTransactionCompletionProcess failure
* [HHH-13673] - Cryptic error when providing import.sql file without a terminal char at the end of each line

Changes in 5.4.6.Final (September 30, 2019)

... (truncated)

• a50f2da 5.4.8
• 72b81ee HHH-12965 Avoid creating foreign keys between audit and main tables
• b28c7b0 HHH-12965 Avoid creating foreign keys between audit and main tables
• 02089a5 HHH-13696 Minor code refactoring and applying the Hibernate code style
• 051a7d9 HHH-13696 Use PU Info Classloader when booting in OsgiPersistenceProvider
• 1dd787e HHH-13446 - Validate mapped-by values got from annotations in bytecode enhancers
• b4a8052 HHH-13695 DDL export forgets to close a Statement
• e5539cc HHH-13651 Adding a regression test for the issue
• a5c8a81 HHH-13651 Applying hibernate codestyle to PersistentBag
• 2808a75 HHH-13651 NPE on flushing when ElementCollection field contains null element
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)