Skip to content

fix(deps): update dependency org.jdbi:jdbi3-bom to v3.53.0#11110

Merged
joschi merged 1 commit into
release/5.0.xfrom
renovate/jdbi3.version
May 23, 2026
Merged

fix(deps): update dependency org.jdbi:jdbi3-bom to v3.53.0#11110
joschi merged 1 commit into
release/5.0.xfrom
renovate/jdbi3.version

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 21, 2026

This PR contains the following updates:

Package Change Age Confidence
org.jdbi:jdbi3-bom (source) 3.51.03.53.0 age confidence

Release Notes

jdbi/jdbi (org.jdbi:jdbi3-bom)

v3.53.0

Compare Source

Fixes: Jdbi-Freemarker Security Advisory GHSA-mggx-p7jf-jgw4

The Freemarker configuration allows templates to construct arbitrary
Java types, including freemarker.template.utility.Execute.

While exploiting this requires other unsafe practices (letting a user
dictate template input), it seems prudent to disable template class resolution.

Please see GHSA-mggx-p7jf-jgw4 for more details.

Upgrade to testcontainers 2.x

While this required no code changes, the testcontainers project has
renamed a number of their jar files. Jdbi still supports
testcontainers 1.x and now also testcontainers 2.x:

If you are using testcontainers with Jdbi today and can not update to
2.x, make sure that you reference the org.testcontainers:jdbc and
org.testcontainers:junit-jupiter dependencies. Those used to be
available as transitive dependency from jdbi3-testcontainers.

If you upgrade to testcontainers 2.x, the
org.testcontainers:testcontainers-jdbc and
org.testcontainers:testcontainers-junit-jupiter dependencies must be
available.

  • Update testcontainers dependency to 2.0.5 (from 1.21.4)
  • Add StatementContext parameter to SqlExceptionHandler and remove return value

v3.52.1

Compare Source

  • fix regression for java.time.Instant mapping from 3.52.0 (#​2955, reported by @​Eng-Fouad and @​toadzky)
  • Add missing mappers for java.sql.Date and java.sql.Time
  • Add support for java.time.OffsetTime
  • Add support for java.time.ZoneOffset

v3.52.0

Compare Source

Changes to java.time related classes

JDBC 4.2 added full support to map java.time classes onto SQL types
in 2014. This release of Jdbi switches from mapping these objects onto
"classic" (java.sql.Date, Time, Timestamp) to using the JDBC 4.2 API
(PreparedStatement#setObject and ResultSet#getObject).

These changes should not be visible for any database, except if you
were brave enough to map types with time zones or offsets
(ZonedDateTime and OffsetDateTime) onto SQL types that have no
timezone (TIMESTAMP or DATETIME). This affects databases that do
not support the TIMESTAMP WITH TIMEZONE data type. IAW MySQL.

If you use MySQL with Jdbi and map any of these data types, you are
already losing the zone/offset information. Now you actually get an
error (which is the correct behavior of the driver!) unless you load
the new MysqlPlugin which restores the mapping.

If your application relies on legacy mappings, you can also use the
new @Legacy annotation to force the old behavior. See the
documentation at https://jdbi.org/ for details.

  • Add MySQL specific module (jdbi3-mysql) and plugin (MysqlPlugin).
  • Add new SqlExceptionHandler hook to handle database exceptions thrown during statement execution
  • Add option to not attach sensitive binding data with OpenTelemetry (#​2941, thanks @​gmellemstrand !)
  • Add configuration for Jackson serialization of types with custom polymorphic handling (#​2915)
  • Update to JUnit 6.0.2
  • Retire Apache Derby integration (#​2866)
  • Run test suite against Spring Framework 7 (#​2919)
  • Add OraclePlugin that sets untyped null argument to Types.NULL for Oracle compatibility (#​1003)
  • Support INOUT parameters for stored procedure Call statements (#​1606)
  • Map java.time types according to JDBC 4.2 spec (using setObject) (#​988)
  • Add @Legacy annotation to restore old timestamp mapping behavior
  • Make @BindMethodsList work with the String template engine (fixes #​2917, reported by @​agavrilov76, fixed by @​JScodeconcise)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 21, 2026
@renovate renovate Bot requested a review from a team as a code owner March 21, 2026 20:44
@renovate renovate Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 21, 2026
@github-actions github-actions Bot added this to the 5.0.2 milestone Mar 21, 2026
@renovate renovate Bot force-pushed the renovate/jdbi3.version branch from 64cebfe to 3fe1448 Compare April 1, 2026 17:11
@renovate renovate Bot force-pushed the renovate/jdbi3.version branch from 3fe1448 to b2ef685 Compare April 9, 2026 17:49
@renovate renovate Bot changed the title fix(deps): update dependency org.jdbi:jdbi3-bom to v3.52.0 fix(deps): update dependency org.jdbi:jdbi3-bom to v3.52.1 Apr 9, 2026
@renovate renovate Bot force-pushed the renovate/jdbi3.version branch from b2ef685 to 8116fe7 Compare April 28, 2026 04:33
@renovate renovate Bot changed the title fix(deps): update dependency org.jdbi:jdbi3-bom to v3.52.1 fix(deps): update dependency org.jdbi:jdbi3-bom to v3.53.0 Apr 28, 2026
@renovate renovate Bot force-pushed the renovate/jdbi3.version branch from 8116fe7 to e366fe0 Compare May 5, 2026 21:48
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented May 5, 2026

@renovate renovate Bot force-pushed the renovate/jdbi3.version branch from e366fe0 to ca41050 Compare May 14, 2026 18:43
@sonarqubecloud
Copy link
Copy Markdown

@joschi joschi merged commit 26b4b19 into release/5.0.x May 23, 2026
20 checks passed
@joschi joschi deleted the renovate/jdbi3.version branch May 23, 2026 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant