Fixed vulnerabilities in dependencies

.gitattributes

@@ -0,0 +1,10 @@
+pk_generated_parent.pom                                          linguist-generated=true
+dependencies.md                                                  linguist-generated=true
+doc/changes/changelog.md                                         linguist-generated=true
+.github/workflows/broken_links_checker.yml                       linguist-generated=true
+.github/workflows/ci-build-next-java.yml			 linguist-generated=true
+.github/workflows/ci-build.yml					 linguist-generated=true
+.github/workflows/dependencies_check.yml			 linguist-generated=true
+.github/workflows/release_droid_prepare_original_checksum.yml	 linguist-generated=true
+.github/workflows/release_droid_print_quick_checksum.yml	 linguist-generated=true
+.github/workflows/release_droid_upload_github_release_assets.yml linguist-generated=true

.project-keeper.yml

@@ -7,5 +7,5 @@ sources:
     advertise: true
 version:
   fromSource: pom.xml
-excludes:
-  - "E-PK-CORE-18: Outdated content: '.github/workflows/ci-build.yml'"
+linkReplacements:
+  - "https://jdbc.postgresql.org/about/license.html|https://jdbc.postgresql.org/license/"

doc/changes/changes_2.0.5.md

@@ -0,0 +1,31 @@
+# Virtual Schema for PostgreSQL 2.0.5, released 2022-09-27
+
+Code name: Fix vulnerabilities in dependencies
+
+## Summary
+
+This release fixes CVE-2022-38751 and CVE-2022-38752 in snakeyaml.
+
+## Features
+
+* #57: Fixed vulnerabilities in dependencies
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Updated `com.exasol:error-reporting-java:0.4.1` to `1.0.0`
+* Updated `com.exasol:virtual-schema-common-jdbc:9.0.5` to `10.0.1`
+
+### Test Dependency Updates
+
+* Updated `com.exasol:autogenerated-resource-verifier-java:0.1.1` to `0.1.2`
+* Updated `com.exasol:exasol-testcontainers:6.1.2` to `6.2.0`
+* Updated `com.exasol:hamcrest-resultset-matcher:1.5.1` to `1.5.2`
+* Updated `com.exasol:test-db-builder-java:3.3.3` to `3.3.4`
+* Updated `com.exasol:virtual-schema-common-jdbc:9.0.5` to `10.0.1`
+* Updated `com.exasol:virtual-schema-shared-integration-tests:2.2.0` to `2.2.2`
+* Updated `org.junit.jupiter:junit-jupiter:5.8.2` to `5.9.1`
+* Updated `org.mockito:mockito-junit-jupiter:4.6.1` to `4.8.0`
+* Updated `org.testcontainers:junit-jupiter:1.17.2` to `1.17.3`
+* Updated `org.testcontainers:postgresql:1.17.2` to `1.17.3`

doc/user_guide/postgresql_user_guide.md

@@ -45,7 +45,7 @@ The SQL statement below creates the adapter script, defines the Java class that
 --/
 CREATE OR REPLACE JAVA ADAPTER SCRIPT ADAPTER.JDBC_ADAPTER AS
   %scriptclass com.exasol.adapter.RequestDispatcher;
-  %jar /buckets/<BFS service>/<bucket>/virtual-schema-dist-9.0.5-postgresql-2.0.4.jar;
+  %jar /buckets/<BFS service>/<bucket>/virtual-schema-dist-10.0.1-postgresql-2.0.5.jar;
   %jar /buckets/<BFS service>/<bucket>/postgresql-<postgresql-driver-version>.jar;
 /
 ```

pom.xml

@@ -3,12 +3,12 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.exasol</groupId>
     <artifactId>postgresql-virtual-schema</artifactId>
-    <version>2.0.4</version>
+    <version>2.0.5</version>
     <name>Virtual Schema for PostgreSQL</name>
     <description>Virtual Schema for connecting PostgreSQL as data source to Exasol</description>
     <properties>
-        <vscjdbc.version>9.0.5</vscjdbc.version>
-        <org.testcontainers.version>1.17.2</org.testcontainers.version>
+        <vscjdbc.version>10.0.1</vscjdbc.version>
+        <org.testcontainers.version>1.17.3</org.testcontainers.version>
         <sonar.coverage.jacoco.xmlReportPaths>target/site/jacoco/jacoco.xml,target/site/jacoco-it/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>
     </properties>
     <repositories>
@@ -36,7 +36,7 @@
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>error-reporting-java</artifactId>
-            <version>0.4.1</version>
+            <version>1.0.0</version>
         </dependency>
         <dependency>
             <groupId>org.postgresql</groupId>
@@ -60,20 +60,20 @@
         <dependency>
             <groupId>org.junit.jupiter</groupId>
             <artifactId>junit-jupiter</artifactId>
-            <version>5.8.2</version>
+            <version>5.9.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.mockito</groupId>
             <artifactId>mockito-junit-jupiter</artifactId>
-            <version>4.6.1</version>
+            <version>4.8.0</version>
             <scope>test</scope>
         </dependency>
         <!--Integration test dependencies -->
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>exasol-testcontainers</artifactId>
-            <version>6.1.2</version>
+            <version>6.2.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -91,13 +91,13 @@
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>test-db-builder-java</artifactId>
-            <version>3.3.3</version>
+            <version>3.3.4</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>hamcrest-resultset-matcher</artifactId>
-            <version>1.5.1</version>
+            <version>1.5.2</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -115,13 +115,13 @@
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>autogenerated-resource-verifier-java</artifactId>
-            <version>0.1.1</version>
+            <version>0.1.2</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>virtual-schema-shared-integration-tests</artifactId>
-            <version>2.2.0</version>
+            <version>2.2.2</version>
             <scope>test</scope>
         </dependency>
     </dependencies>
@@ -196,12 +196,22 @@
                     <useModulePath>false</useModulePath>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.sonatype.ossindex.maven</groupId>
+                <artifactId>ossindex-maven-plugin</artifactId>
+                    <configuration>
+                        <excludeVulnerabilityIds>
+                            <!-- False positive, fixed already in snakeyaml version 1.32 according to https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081. -->
+                            <exclude>CVE-2022-38752</exclude>
+                        </excludeVulnerabilityIds>
+                    </configuration>
+            </plugin>
         </plugins>
     </build>
     <parent>
         <artifactId>postgresql-virtual-schema-generated-parent</artifactId>
         <groupId>com.exasol</groupId>
-        <version>2.0.4</version>
+        <version>2.0.5</version>
         <relativePath>pk_generated_parent.pom</relativePath>
     </parent>
     <url>https://github.com/exasol/postgresql-virtual-schema/</url>

src/test/java/com/exasol/adapter/dialects/postgresql/PostgresVirtualSchemaIntegrationTestSetup.java

@@ -25,7 +25,7 @@
  * This class contains the common integration test setup for all PostgreSQL virtual schemas.
  */
 public class PostgresVirtualSchemaIntegrationTestSetup implements Closeable {
-    private static final String VIRTUAL_SCHEMAS_JAR_NAME_AND_VERSION = "virtual-schema-dist-9.0.5-postgresql-2.0.4.jar";
+    private static final String VIRTUAL_SCHEMAS_JAR_NAME_AND_VERSION = "virtual-schema-dist-10.0.1-postgresql-2.0.5.jar";
     private static final Path PATH_TO_VIRTUAL_SCHEMAS_JAR = Path.of("target", VIRTUAL_SCHEMAS_JAR_NAME_AND_VERSION);
     private static final String SCHEMA_EXASOL = "SCHEMA_EXASOL";
     private static final String ADAPTER_SCRIPT_EXASOL = "ADAPTER_SCRIPT_EXASOL";