Skip to content

Bump hibernate-core from 5.6.0.Final to 5.6.3.Final#6

Merged
jredingcsv merged 3 commits intomainfrom
dependabot/maven/master/org.hibernate-hibernate-core-5.6.3.Final
Apr 14, 2022
Merged

Bump hibernate-core from 5.6.0.Final to 5.6.3.Final#6
jredingcsv merged 3 commits intomainfrom
dependabot/maven/master/org.hibernate-hibernate-core-5.6.3.Final

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2022

Bumps hibernate-core from 5.6.0.Final to 5.6.3.Final.

Changelog

Sourced from hibernate-core's changelog.

Changes in 5.6.3.Final (December 15, 2021)

https://hibernate.atlassian.net/projects/HHH/versions/32006

** Bug * [HHH-14972] - log4j2 <= 2.14.1 has an RCE (CVE-2021-44228) * [HHH-14948] - Metamodel imports cache increases indefinitely for dynamically generated HQL aliases eventually leading to an OOM * [HHH-14935] - Type annotation is deprecated without an available replacement

** Task * [HHH-14979] - Upgrade to Log4J 2 2.16.0

Changes in 5.6.2.Final (December 08, 2021)

https://hibernate.atlassian.net/projects/HHH/versions/32001

** Bug * [HHH-14956] - Invalid link to MetadataBuilderContributor javadocs in Configurations docs * [HHH-14937] - SybaseDialect does not support schema anymore * [HHH-14936] - JdbcConnectionContext in hibernate-testing throws NPE when user/password are not provided in configuration * [HHH-14935] - Type annotation is deprecated without an available replacement * [HHH-14927] - "Current" documentation is 5.5 instead of 5.6 * [HHH-14926] - fix asciidoc error in 'test-case-guide.adoc' * [HHH-14922] - Inconsistent precedence of orm.xml implicit catalog/schema over "default_catalog"/"default_schema" * [HHH-14918] - Key-to-one to id-class entity with key-to-one doesn't work anymore * [HHH-14916] - JPA Critera query Join on Fetch not working * [HHH-14540] - Interceptor instance is shared between ORM session and Enver's temporary session resulting in multiple calls. * [HHH-14211] - @​Lob String mapping broken

** Improvement * [HHH-14921] - Definition of the default catalog/schema on session factory creation * [HHH-14903] - Method getConfiguredJdbcBatchSize can be optimised for StatelessSession as well * [HHH-14897] - Allow ordering with nulls first/last from JPA implementation

** Task * [HHH-14938] - Upgrade to MySQL Connector/J 8.0.27

Changes in 5.6.1.Final (October 27, 2021)

https://hibernate.atlassian.net/projects/HHH/versions/31993

** Bug * [HHH-14899] - Dialect no longer controlling the default jdbc batch size to use * [HHH-14891] - JTS package not updated in "spatial basic types table" in user guide * [HHH-14881] - Converters defined through orm.xml are never retrieved from the CDI context

... (truncated)

Commits
  • 2607c91 5.6.3.Final
  • 8d1027f HHH-14935 Revert deprecation of org.hibernate.annotations.Type, TypeDef and T...
  • ab80895 HHH-14979 Upgrade to Log4J 2 2.16.0
  • ad8723c HHH-14972 bump log4j to 2.15.0 fixing an RCE (CVE-2021-44228)
  • fc957ec HHH-14948 - Reduce the size of the imports cache in the metamodel
  • f6f7654 5.6.3-SNAPSHOT
  • dc00552 5.6.2.Final
  • 67e09b1 HHH-14922 Give precedence to default catalog/schema over implicit catalog/schema
  • 795d5cd HHH-14922 Delay applying the implicit catalog/schema until schema management ...
  • 9b47fcd HHH-14922 Test behavior when setting both implicit catalog/schema and default...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [hibernate-core](https://github.com/hibernate/hibernate-orm) from 5.6.0.Final to 5.6.3.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/5.6.3/changelog.txt)
- [Commits](hibernate/hibernate-orm@5.6.0...5.6.3)

---
updated-dependencies:
- dependency-name: org.hibernate:hibernate-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 6, 2022
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 18, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

2 similar comments
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 25, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 18, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot dependabot bot requested a review from a team as a code owner March 21, 2022 20:58
twalshcsv added a commit that referenced this pull request Apr 13, 2022
* repo move

* Update action.yml

removed xvfb action

* Update maven.yml

* Update action.yml

* Create codeql-analysis.yml

* Update action.yml

* added run_number to get cache change

* added run_number to get cache change

* conditional for docker spin up

* conditional for docker spin up

* SLF4J logging

* Selenium 4 dependency

* return to cloud runners

* coverage report step added

* xvfb reenable

* nevermind

* test correction

* sonar execution and jacoco xml paths

* correction

* MAQS Test services container start

* Update maven.yml

* Main Serviice Docker Compose

* oops

* setup dotnet

* added dependcies action

* maqs-accessibility fixed

* fix appium module

* added w3c

* switch back?

* Ignore AppiumUtilitiesUnitTest for now

* Secrets added to action

* Update maven.yml

* Sonar token adds and conslidation of variables

* OOPS version number added

* disabled flaky modules for testing

* missing quote

* Maven args

* sonar org change

* revert service core changes - unnecessary

* gitignore changes

* remove ignored files

* reverted docker compose comments

* rename and some pipeline clean up

* secrets to generify sonarcloud

* name and fetch depth

* naming changes and caching

* removed build state conditional

* print test results

* print test results

* New test reporter

* always report

* remove testsuite and only failed tests

* only failed suites

* non-secret

* removed extra test report

* test fixed

* fail on error removed

* Update labeler.yml

* rename and some pipeline clean up (#7)

* rename and some pipeline clean up

* secrets to generify sonarcloud

* name and fetch depth

* naming changes and caching

* removed build state conditional

* print test results

* print test results

* New test reporter

* always report

* remove testsuite and only failed tests

* only failed suites

* non-secret

* removed extra test report

* test fixed

* fail on error removed

* cleaning up POM

* checkstyle paths

* checkstyle paths -revert

* flaky test disabled

* disable sonar cache restore

* webaddress

* Bump jackson-databind from 2.13.1 to 2.13.2.1 in /maqs-webservices (#6)

Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.13.1 to 2.13.2.1.
- [Release notes](https://github.com/FasterXML/jackson/releases)
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/cache from 2.1.6 to 3.0.2 (#10)

Bumps [actions/cache](https://github.com/actions/cache) from 2.1.6 to 3.0.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v2.1.6...v3.0.2)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/setup-java from 2.3.1 to 3.1.1 (#9)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 2.3.1 to 3.1.1.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v2.3.1...v3.1.1)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/labeler from 3 to 4 (#5)

Bumps [actions/labeler](https://github.com/actions/labeler) from 3 to 4.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@v3...v4)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update maven.yml

* setup-java fix

* setup-java fix

* setup-java fix

* jackson fix

* setup javaq cache maven

* setup javaq cache maven

* Moving back to official sonarcloud

* ElementHandler Test fix

* Update maven.yml

* Update action.yml

* Cognizant Softvision references for released versions

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Troy Walsh <92752744+twalshcsv@users.noreply.github.com>
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@jredingcsv jredingcsv enabled auto-merge April 14, 2022 19:11
@jredingcsv jredingcsv merged commit a93eb02 into main Apr 14, 2022
@jredingcsv jredingcsv deleted the dependabot/maven/master/org.hibernate-hibernate-core-5.6.3.Final branch April 14, 2022 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

database dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant