dependabot[bot] opened a new pull request, #12316: URL: https://github.com/apache/gravitino/pull/12316
Bumps [org.mybatis:mybatis](https://github.com/mybatis/mybatis-3) from 3.5.6 to 3.5.19. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mybatis/mybatis-3/releases";>org.mybatis:mybatis's releases</a>.</em></p> <blockquote> <h2>Mybatis 3.5.19</h2> <p>Revert Regression introduced by <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3349";>#3349</a>.</p> <h2>Mybatis 3.5.18</h2> <h2>Regressions</h2> <ul> <li>Fixed issue in 3.5.17 <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3334";>#3334</a></li> </ul> <h2>New</h2> <ul> <li>Ignore empty xnode per <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3349";>#3349</a></li> <li>Share expression validator <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3339";>#3339</a></li> <li>Throw helpful error instead of IndexOutOfBoundsException (automapping) <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3327";>#3327</a></li> <li>Optimize mapper builder <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3252";>#3252</a></li> </ul> <h2>Tests</h2> <ul> <li>Add TransactionFactory, Transaction test cases <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3277";>#3277</a></li> </ul> <h2>Build</h2> <ul> <li>Reworked pom to match current java 17 build usage</li> <li>Moved all tests to newer java standards</li> <li>Cleaned up github actions</li> <li>Run 'site' branch only on release commits</li> </ul> <p>Support Notice: This is expected last java 8 release, A new branch support-java8 will be created from this point in case older support needs a fix. After this, master will move to java 11 for one release in order to start bringing code support up to java 11. After that, a support-java11 will be created then master will move to java 17 or better only. This will change the plans slightly as doing this means java 11 will be 3.6.0 and temporary in nature whereas anything discussed for 3.6.0 will move to 3.7.0. Once at java 17, same java application will occur. After that point, anything previously discussed for the original 3.6.0 can start coming in.</p> <h2>mybatis-3.5.17</h2> <p>Bugs:</p> <ul> <li><code>VendorDatabaseIdProvider#getDatabaseId()</code> should return product name when properties is empty <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3297";>#3297</a></li> <li>Update <code>NClobTypeHandler</code> to use methods for national character set <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3298";>#3298</a></li> </ul> <p>Enhancements:</p> <ul> <li>Allow <code>DefaultSqlSessionFactory</code> to provide a custom <code>SqlSession</code> <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3128";>#3128</a></li> </ul> <p>There also are many pull requests for document updates and code improvements! Please see the full changelog: <a href="https://github.com/mybatis/mybatis-3/compare/mybatis-3.5.16...mybatis-3.5.17";>https://github.com/mybatis/mybatis-3/compare/mybatis-3.5.16...mybatis-3.5.17</a></p> <h2>mybatis-3.5.16</h2> <p>Security:</p> <ul> <li>Prevent <code>Invocation</code> from being used by vulnerable applications. <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3115";>#3115</a></li> </ul> <p>Bugs:</p> <ul> <li>When database ID resolution is failed, invalid bound statement is used. <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3040";>#3040</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mybatis/mybatis-3/commit/ee0d4f4831ffdd311b0183c202f4ad6492a3f404";><code>ee0d4f4</code></a> [maven-release-plugin] prepare release mybatis-3.5.19</li> <li><a href="https://github.com/mybatis/mybatis-3/commit/342bc2cf6ad4012b2e034ee41d3744572abb153a";><code>342bc2c</code></a> [ci] formatting</li> <li><a href="https://github.com/mybatis/mybatis-3/commit/a0e6ffecfded58ef4f59952faf603d71b0ec8f34";><code>a0e6ffe</code></a> Revert <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3349";>#3349</a></li> <li><a href="https://github.com/mybatis/mybatis-3/commit/d70d2c2ba748b1880aa30d39064da96e11828e3d";><code>d70d2c2</code></a> Merge pull request <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3369";>#3369</a> from mybatis/next</li> <li><a href="https://github.com/mybatis/mybatis-3/commit/4ca0266a10be738cdbcffe011f418926902c2925";><code>4ca0266</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/mybatis/mybatis-3/commit/fef4dd7fb06fad044247e930846e01b73e09db23";><code>fef4dd7</code></a> [maven-release-plugin] prepare release mybatis-3.5.18</li> <li><a href="https://github.com/mybatis/mybatis-3/commit/af93a2b352c6d6d2f47d500e59769e22c567e6c6";><code>af93a2b</code></a> Merge pull request <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3339";>#3339</a> from nieqiurong/20241228</li> <li><a href="https://github.com/mybatis/mybatis-3/commit/27ca11cecf2a20849d58a4d5b7d164346d16c493";><code>27ca11c</code></a> Merge pull request <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3349";>#3349</a> from nieqiurong/20241229</li> <li><a href="https://github.com/mybatis/mybatis-3/commit/5c757a3a7471914ea62300459a980ebdbbc0dfc0";><code>5c757a3</code></a> <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3349";>#3349</a> Added a test, license year</li> <li><a href="https://github.com/mybatis/mybatis-3/commit/96a0b8fd4984974e20b211ce8f0d75ee060e7cde";><code>96a0b8f</code></a> Merge pull request <a href="https://redirect.github.com/mybatis/mybatis-3/issues/3368";>#3368</a> from hazendaz/pom-cleanup</li> <li>Additional commits viewable in <a href="https://github.com/mybatis/mybatis-3/compare/mybatis-3.5.6...mybatis-3.5.19";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
