1.0.4: Fix CVE-2024-25710 and CVE-2024-26308 in test dependency `org.apache.commons:commons-compress`

Summary

This release fixes vulnerabilities CVE-2024-25710 and CVE-2024-26308 in test dependency org.apache.commons:commons-compress.

Starting with this release we test the project with both Exasol 7.1 and 8.

Security

• #19: Fixed vulnerabilities CVE-2024-25710 and CVE-2024-26308 in test dependency org.apache.commons:commons-compress

Dependency Updates

Java UDF Startup Time Improver

Compile Dependency Updates

• Updated com.exasol:bucketfs-java:3.1.1 to 3.1.2

Test Dependency Updates

• Updated com.exasol:exasol-testcontainers:6.6.2 to 7.0.1
• Updated com.exasol:test-db-builder-java:3.5.1 to 3.5.3
• Updated com.exasol:udf-debugging-java:0.6.11 to 0.6.12
• Updated nl.jqno.equalsverifier:equalsverifier:3.15.2 to 3.15.8
• Updated org.jacoco:org.jacoco.agent:0.8.10 to 0.8.11
• Updated org.junit.jupiter:junit-jupiter-api:5.10.0 to 5.10.2
• Updated org.junit.jupiter:junit-jupiter-params:5.10.0 to 5.10.2
• Updated org.mockito:mockito-junit-jupiter:5.5.0 to 5.11.0
• Updated org.slf4j:slf4j-jdk14:2.0.9 to 2.0.12
• Updated org.testcontainers:junit-jupiter:1.19.0 to 1.19.7

Plugin Dependency Updates

• Updated com.exasol:error-code-crawler-maven-plugin:1.3.0 to 2.0.0
• Updated com.exasol:project-keeper-maven-plugin:2.9.12 to 4.1.0
• Updated org.apache.maven.plugins:maven-compiler-plugin:3.11.0 to 3.12.1
• Updated org.apache.maven.plugins:maven-dependency-plugin:3.6.0 to 3.6.1
• Updated org.apache.maven.plugins:maven-enforcer-plugin:3.4.0 to 3.4.1
• Updated org.apache.maven.plugins:maven-failsafe-plugin:3.1.2 to 3.2.5
• Updated org.apache.maven.plugins:maven-surefire-plugin:3.1.2 to 3.2.5
• Added org.apache.maven.plugins:maven-toolchains-plugin:3.1.0
• Updated org.codehaus.mojo:flatten-maven-plugin:1.5.0 to 1.6.0
• Updated org.codehaus.mojo:versions-maven-plugin:2.16.0 to 2.16.2
• Updated org.jacoco:jacoco-maven-plugin:0.8.10 to 0.8.11
• Updated org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184 to 3.10.0.2594

UDF for Testing

Plugin Dependency Updates

• Updated com.exasol:error-code-crawler-maven-plugin:1.3.0 to 2.0.0
• Updated org.apache.maven.plugins:maven-compiler-plugin:3.11.0 to 3.12.1
• Updated org.apache.maven.plugins:maven-enforcer-plugin:3.4.0 to 3.4.1
• Updated org.apache.maven.plugins:maven-surefire-plugin:3.1.2 to 3.2.5
• Added org.apache.maven.plugins:maven-toolchains-plugin:3.1.0
• Updated org.codehaus.mojo:flatten-maven-plugin:1.5.0 to 1.6.0
• Updated org.codehaus.mojo:versions-maven-plugin:2.16.0 to 2.16.2
• Updated org.jacoco:jacoco-maven-plugin:0.8.10 to 0.8.11
• Updated org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184 to 3.10.0.2594

1.0.3: Fix CVE-2023-42503

Summary

This release fixes CVE-2023-42503 in test dependency org.apache.commons:commons-compress

Security

• #17: Fixed CVE-2023-42503 in org.apache.commons:commons-compress

Documentation

• #15: Fixed broken links

Dependency Updates

Java UDF Startup Time Improver

Compile Dependency Updates

• Updated com.exasol:bucketfs-java:3.0.0 to 3.1.1
• Updated com.exasol:exasol-jdbc:7.1.17 to 7.1.20

Test Dependency Updates

• Updated com.exasol:exasol-testcontainers:6.5.1 to 6.6.2
• Updated com.exasol:test-db-builder-java:3.4.2 to 3.5.1
• Updated com.exasol:udf-debugging-java:0.6.8 to 0.6.11
• Updated nl.jqno.equalsverifier:equalsverifier:3.14.1 to 3.15.2
• Updated org.jacoco:org.jacoco.agent:0.8.8 to 0.8.10
• Updated org.junit.jupiter:junit-jupiter-api:5.9.2 to 5.10.0
• Updated org.junit.jupiter:junit-jupiter-params:5.9.2 to 5.10.0
• Updated org.mockito:mockito-junit-jupiter:5.2.0 to 5.5.0
• Updated org.slf4j:slf4j-jdk14:2.0.7 to 2.0.9
• Updated org.testcontainers:junit-jupiter:1.17.6 to 1.19.0

Plugin Dependency Updates

• Updated com.exasol:error-code-crawler-maven-plugin:1.2.2 to 1.3.0
• Updated com.exasol:project-keeper-maven-plugin:2.9.4 to 2.9.12
• Updated org.apache.maven.plugins:maven-assembly-plugin:3.5.0 to 3.6.0
• Updated org.apache.maven.plugins:maven-compiler-plugin:3.10.1 to 3.11.0
• Updated org.apache.maven.plugins:maven-dependency-plugin:3.5.0 to 3.6.0
• Updated org.apache.maven.plugins:maven-enforcer-plugin:3.2.1 to 3.4.0
• Updated org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M8 to 3.1.2
• Updated org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M8 to 3.1.2
• Added org.basepom.maven:duplicate-finder-maven-plugin:2.0.1
• Updated org.codehaus.mojo:flatten-maven-plugin:1.3.0 to 1.5.0
• Updated org.codehaus.mojo:versions-maven-plugin:2.14.2 to 2.16.0
• Updated org.jacoco:jacoco-maven-plugin:0.8.8 to 0.8.10

UDF for Testing

Plugin Dependency Updates

• Updated com.exasol:error-code-crawler-maven-plugin:1.2.2 to 1.3.0
• Updated org.apache.maven.plugins:maven-assembly-plugin:3.5.0 to 3.6.0
• Updated org.apache.maven.plugins:maven-enforcer-plugin:3.2.1 to 3.4.0
• Updated org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M8 to 3.1.2
• Added org.basepom.maven:duplicate-finder-maven-plugin:2.0.1
• Updated org.codehaus.mojo:flatten-maven-plugin:1.3.0 to 1.5.0
• Updated org.codehaus.mojo:versions-maven-plugin:2.14.2 to 2.16.0
• Updated org.jacoco:jacoco-maven-plugin:0.8.8 to 0.8.10

1.0.2: Remove references to decommissioned maven.exasol.com repository

Summary

This release removes references to the decommissioned maven.exasol.com repository.

Bugfixes

• #13: Removed references to decommissioned maven.exasol.com repository

Dependency Updates

Java UDF Startup Time Improver

Compile Dependency Updates

• Updated com.exasol:bucketfs-java:2.4.1 to 3.0.0
• Updated com.exasol:error-reporting-java:1.0.0 to 1.0.1
• Updated com.exasol:exasol-jdbc:7.1.11 to 7.1.17

Test Dependency Updates

• Updated com.exasol:exasol-testcontainers:6.3.0 to 6.5.1
• Updated com.exasol:test-db-builder-java:3.4.0 to 3.4.2
• Updated com.exasol:udf-debugging-java:0.6.4 to 0.6.8
• Updated nl.jqno.equalsverifier:equalsverifier:3.10.1 to 3.14.1
• Updated org.junit.jupiter:junit-jupiter-api:5.9.1 to 5.9.2
• Updated org.junit.jupiter:junit-jupiter-params:5.9.1 to 5.9.2
• Updated org.mockito:mockito-junit-jupiter:4.8.1 to 5.2.0
• Added org.slf4j:slf4j-jdk14:2.0.7
• Updated org.testcontainers:junit-jupiter:1.17.5 to 1.17.6

Plugin Dependency Updates

• Updated com.exasol:artifact-reference-checker-maven-plugin:0.4.0 to 0.4.2
• Updated com.exasol:error-code-crawler-maven-plugin:1.1.2 to 1.2.2
• Updated com.exasol:project-keeper-maven-plugin:2.8.0 to 2.9.4
• Updated io.github.zlika:reproducible-build-maven-plugin:0.15 to 0.16
• Updated org.apache.maven.plugins:maven-assembly-plugin:3.3.0 to 3.5.0
• Updated org.apache.maven.plugins:maven-dependency-plugin:3.3.0 to 3.5.0
• Updated org.apache.maven.plugins:maven-enforcer-plugin:3.1.0 to 3.2.1
• Updated org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M5 to 3.0.0-M8
• Updated org.apache.maven.plugins:maven-jar-plugin:3.2.2 to 3.3.0
• Updated org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5 to 3.0.0-M8
• Updated org.codehaus.mojo:exec-maven-plugin:3.0.0 to 3.1.0
• Updated org.codehaus.mojo:flatten-maven-plugin:1.2.7 to 1.3.0
• Updated org.codehaus.mojo:versions-maven-plugin:2.10.0 to 2.14.2

UDF for Testing

Plugin Dependency Updates

• Updated com.exasol:artifact-reference-checker-maven-plugin:0.4.0 to 0.4.2
• Updated com.exasol:error-code-crawler-maven-plugin:1.1.2 to 1.2.2
• Updated io.github.zlika:reproducible-build-maven-plugin:0.15 to 0.16
• Updated org.apache.maven.plugins:maven-assembly-plugin:3.3.0 to 3.5.0
• Updated org.apache.maven.plugins:maven-compiler-plugin:3.9.0 to 3.11.0
• Updated org.apache.maven.plugins:maven-enforcer-plugin:3.1.0 to 3.2.1
• Updated org.apache.maven.plugins:maven-jar-plugin:3.2.2 to 3.3.0
• Updated org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5 to 3.0.0-M8
• Updated org.codehaus.mojo:flatten-maven-plugin:1.2.7 to 1.3.0
• Updated org.codehaus.mojo:versions-maven-plugin:2.10.0 to 2.14.2

1.0.1: Fix vulnerabilities in dependencies

Summary

In this release we fixed the following vulnerabilities in test dependencies:

• org.postgresql:postgresql:jar:42.3.3:test: sonatype-2022-4402
• io.netty:netty-common:jar:4.1.72.Final:test: CVE-2022-24823
• io.netty:netty-handler:jar:4.1.72.Final:test: sonatype-2020-0026
• org.apache.xmlrpc:xmlrpc-common:jar:3.1.3:test: CVE-2016-5003 and CVE-2016-5002
• com.google.protobuf:protobuf-java:jar:3.11.4:test: CVE-2022-3171 and CVE-2021-22569
• commons-codec:commons-codec:jar:1.11:test: sonatype-2012-0050
• org.apache.xmlrpc:xmlrpc-client:jar:3.1.3:test: CVE-2016-5004

Features

• #11: Fixed vulnerabilities in dependencies

Dependency Updates

Java UDF Startup Time Improver

Compile Dependency Updates

• Updated com.exasol:bucketfs-java:2.3.0 to 2.4.1
• Updated com.exasol:error-reporting-java:0.4.1 to 1.0.0
• Updated com.exasol:exasol-jdbc:7.1.4 to 7.1.11

Test Dependency Updates

• Updated com.exasol:exasol-testcontainers:6.1.1 to 6.3.0
• Updated com.exasol:maven-project-version-getter:1.1.0 to 1.2.0
• Updated com.exasol:test-db-builder-java:3.3.1 to 3.4.0
• Updated com.exasol:udf-debugging-java:0.6.0 to 0.6.4
• Added nl.jqno.equalsverifier:equalsverifier:3.10.1
• Updated org.jacoco:org.jacoco.agent:0.8.5 to 0.8.8
• Added org.junit.jupiter:junit-jupiter-api:5.9.1
• Removed org.junit.jupiter:junit-jupiter-engine:5.8.2
• Updated org.junit.jupiter:junit-jupiter-params:5.8.2 to 5.9.1
• Updated org.mockito:mockito-junit-jupiter:4.3.1 to 4.8.1
• Updated org.testcontainers:junit-jupiter:1.16.3 to 1.17.5

Plugin Dependency Updates

• Updated com.exasol:error-code-crawler-maven-plugin:0.7.1 to 1.1.2
• Updated com.exasol:project-keeper-maven-plugin:2.1.0 to 2.8.0
• Updated org.apache.maven.plugins:maven-compiler-plugin:3.9.0 to 3.10.1
• Updated org.apache.maven.plugins:maven-dependency-plugin:3.2.0 to 3.3.0
• Updated org.apache.maven.plugins:maven-enforcer-plugin:3.0.0 to 3.1.0
• Updated org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M3 to 3.0.0-M5
• Updated org.apache.maven.plugins:maven-jar-plugin:3.2.0 to 3.2.2
• Updated org.codehaus.mojo:versions-maven-plugin:2.8.1 to 2.10.0
• Updated org.jacoco:jacoco-maven-plugin:0.8.7 to 0.8.8
• Removed org.projectlombok:lombok-maven-plugin:1.18.20.0
• Added org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184
• Updated org.sonatype.ossindex.maven:ossindex-maven-plugin:3.1.0 to 3.2.0

UDF for Testing

Plugin Dependency Updates

• Updated com.exasol:error-code-crawler-maven-plugin:0.7.1 to 1.1.2
• Updated org.apache.maven.plugins:maven-enforcer-plugin:3.0.0 to 3.1.0
• Updated org.apache.maven.plugins:maven-jar-plugin:3.2.0 to 3.2.2
• Updated org.codehaus.mojo:versions-maven-plugin:2.8.1 to 2.10.0
• Updated org.jacoco:jacoco-maven-plugin:0.8.7 to 0.8.8
• Added org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184
• Updated org.sonatype.ossindex.maven:ossindex-maven-plugin:3.1.0 to 3.2.0

1.0.0 Bugfixes

Bug Fixes

• #8: Fixed bug that made the rewritten script fail if class list contains classes from the jar file
• #7: Added schema to create query.

Dependency Updates

Java UDF Startup Time Improver

Plugin Dependency Updates

• Updated com.exasol:project-keeper-maven-plugin:2.0.0 to 2.1.0
• Updated org.apache.maven.plugins:maven-compiler-plugin:3.1 to 3.9.0

UDF for Testing

Plugin Dependency Updates

• Added com.exasol:artifact-reference-checker-maven-plugin:0.4.0
• Added com.exasol:error-code-crawler-maven-plugin:0.7.1
• Added io.github.zlika:reproducible-build-maven-plugin:0.15
• Added org.apache.maven.plugins:maven-assembly-plugin:3.3.0
• Added org.apache.maven.plugins:maven-clean-plugin:2.5
• Added org.apache.maven.plugins:maven-compiler-plugin:3.9.0
• Added org.apache.maven.plugins:maven-deploy-plugin:2.7
• Added org.apache.maven.plugins:maven-enforcer-plugin:3.0.0
• Added org.apache.maven.plugins:maven-install-plugin:2.4
• Added org.apache.maven.plugins:maven-jar-plugin:3.2.0
• Added org.apache.maven.plugins:maven-resources-plugin:2.6
• Added org.apache.maven.plugins:maven-site-plugin:3.3
• Added org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5
• Added org.codehaus.mojo:flatten-maven-plugin:1.2.7
• Added org.codehaus.mojo:versions-maven-plugin:2.8.1
• Added org.jacoco:jacoco-maven-plugin:0.8.7
• Added org.sonatype.ossindex.maven:ossindex-maven-plugin:3.1.0

0.1.0 Initial Implementation

Features

• #1: Initial Implementation
• #3: Adapted interface to read the class list from jar

Dependency Updates

Java UDF Startup Time Improver

Compile Dependency Updates

• Added com.exasol:bucketfs-java:2.3.0
• Added com.exasol:error-reporting-java:0.4.1
• Added com.exasol:exasol-jdbc:7.1.4

Test Dependency Updates

• Added com.exasol:exasol-testcontainers:6.1.1
• Added com.exasol:maven-project-version-getter:1.1.0
• Added com.exasol:test-db-builder-java:3.3.1
• Added com.exasol:udf-debugging-java:0.6.0
• Added org.hamcrest:hamcrest:2.2
• Added org.jacoco:org.jacoco.agent:0.8.5
• Added org.junit.jupiter:junit-jupiter-engine:5.8.2
• Added org.junit.jupiter:junit-jupiter-params:5.8.2
• Added org.mockito:mockito-junit-jupiter:4.3.1
• Added org.testcontainers:junit-jupiter:1.16.3

Plugin Dependency Updates

• Added com.exasol:artifact-reference-checker-maven-plugin:0.4.0
• Added com.exasol:error-code-crawler-maven-plugin:0.7.1
• Added com.exasol:project-keeper-maven-plugin:2.0.0
• Added io.github.zlika:reproducible-build-maven-plugin:0.15
• Added org.apache.maven.plugins:maven-assembly-plugin:3.3.0
• Added org.apache.maven.plugins:maven-clean-plugin:2.5
• Added org.apache.maven.plugins:maven-compiler-plugin:3.1
• Added org.apache.maven.plugins:maven-dependency-plugin:3.2.0
• Added org.apache.maven.plugins:maven-deploy-plugin:2.7
• Added org.apache.maven.plugins:maven-enforcer-plugin:3.0.0
• Added org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M3
• Added org.apache.maven.plugins:maven-install-plugin:2.4
• Added org.apache.maven.plugins:maven-jar-plugin:3.2.0
• Added org.apache.maven.plugins:maven-resources-plugin:2.6
• Added org.apache.maven.plugins:maven-site-plugin:3.3
• Added org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5
• Added org.codehaus.mojo:exec-maven-plugin:3.0.0
• Added org.codehaus.mojo:flatten-maven-plugin:1.2.7
• Added org.codehaus.mojo:versions-maven-plugin:2.8.1
• Added org.jacoco:jacoco-maven-plugin:0.8.7
• Added org.projectlombok:lombok-maven-plugin:1.18.20.0
• Added org.sonatype.ossindex.maven:ossindex-maven-plugin:3.1.0

UDF for Testing

Plugin Dependency Updates

• Added com.exasol:artifact-reference-checker-maven-plugin:0.4.0
• Added com.exasol:error-code-crawler-maven-plugin:0.7.1
• Added io.github.zlika:reproducible-build-maven-plugin:0.15
• Added org.apache.maven.plugins:maven-assembly-plugin:3.3.0
• Added org.apache.maven.plugins:maven-clean-plugin:2.5
• Added org.apache.maven.plugins:maven-compiler-plugin:3.9.0
• Added org.apache.maven.plugins:maven-deploy-plugin:2.7
• Added org.apache.maven.plugins:maven-enforcer-plugin:3.0.0
• Added org.apache.maven.plugins:maven-install-plugin:2.4
• Added org.apache.maven.plugins:maven-jar-plugin:3.2.0
• Added org.apache.maven.plugins:maven-resources-plugin:2.6
• Added org.apache.maven.plugins:maven-site-plugin:3.3
• Added org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5
• Added org.codehaus.mojo:flatten-maven-plugin:1.2.7
• Added org.codehaus.mojo:versions-maven-plugin:2.8.1
• Added org.jacoco:jacoco-maven-plugin:0.8.7
• Added org.sonatype.ossindex.maven:ossindex-maven-plugin:3.1.0