dependabot[bot] opened a new pull request, #1588: URL: https://github.com/apache/syncope/pull/1588
Bumps [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) from 3.5.10 to 4.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mariadb-corporation/mariadb-connector-j/releases";>org.mariadb.jdbc:mariadb-java-client's releases</a>.</em></p> <blockquote> <h2>MariaDB Connector/Java 4.0.0</h2> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/4.0.0";>4.0.0</a> (Oct 2026)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/3.5.11...4.0.0";>Full Changelog</a></p> <p>4.0.0 includes every fix of 3.5.11, listed below.</p> <h4>Major Changes</h4> <ul> <li>CONJ-1361 - Java 17 is the minimum runtime, Java 8 and 11 are no longer supported (the 3.5 branch remains available for Java 8)</li> <li>CONJ-1321 - TLS enabled by default: sslMode now defaults to verify-full</li> <li>CONJ-1384 - AWS IAM authentication moves to the separate artifact mariadb-java-client-aws, the connector no longer depends on the AWS SDK; the plugin gains STS assume role support (CONJ-877, report by Adrian Samatan) and ships the RDS root certificates so that the default sslMode validates an RDS endpoint without configuration</li> <li>CONJ-1306 - PreparedStatement.executeQuery() rejects statements that return no result set, as the JDBC specification requires; the permitNoResults option restores the former behavior (report by Christopher Schultz)</li> <li>CONJ-651 - Stream LOB columns from the socket instead of loading them in memory (report by Ilya Zhavoronkov)</li> </ul> <h4>Key Enhancements</h4> <ul> <li>CONJ-1386 - New sslMode=allow: verify-full when the server announces TLS, unencrypted otherwise, for a mix of servers with and without TLS behind one connection string</li> <li>CONJ-1347 - setSavepoint() throws in auto-commit mode instead of silently succeeding</li> <li>CONJ-1262 - cachedCodecs option now defaults to true</li> <li>CONJ-1370 - JNA dependency removed, Unix domain sockets use the JDK implementation</li> <li>CONJ-1371 - useReadAheadInput option and ReadAheadBufferedStream removed</li> <li>CONJ-1366 - First-class module-info.java (module org.mariadb.jdbc)</li> <li>CONJ-1367 - Virtual threads: no carrier pinning in driver locks, verified by a JFR-based test</li> <li>CONJ-1354 - GSSAPI authentication uses the native GSS-API where available</li> <li>CONJ-1308 - Support MariaDB 12.3 XML data type</li> <li>CONJ-1220 - Unix domain sockets on Windows, for SSH tunnels (report by DAIKOZ)</li> <li>CONJ-1378 - Try every IP address a hostname resolves to when opening the socket</li> <li>CONJ-1369 - Performance work on the Java 17 code base: packet reader and writer buffers, readNBytes, ranged Arrays.equals, no String.format on data paths</li> <li>CONJ-1365 - Performance: VarHandle little-endian access in packet buffers</li> <li>CONJ-1373 - Performance: JDK UTF-8 encoder for long strings in Writer.writeString / writeStringEscaped</li> <li>CONJ-1375 - Performance: cache codec resolution for getObject(index, Class) and setObject</li> <li>CONJ-1377 - Performance: faster client-side query parsing in ClientParser and NativeSql</li> <li>CONJ-1368 - Build and test tooling: tests run against the built jar, GraalVM metadata refreshed, CI matrix on Java 17, 21 and 25</li> </ul> <h4>Issues Resolved</h4> <ul> <li>CONJ-1383 - Connection init rebuilds session_track_system_variables from @<a href="https://github.com/global";><code>@global</code></a>, discarding the session-level last_gtid set by MaxScale (report by Sawan Patel)</li> <li>CONJ-1379 - Set an explicit session tracking list and guard character_set_results like character_set_client (report by fg0x0)</li> <li>CONJ-1381 - Bound server-declared lengths by the packet before allocating and reading from them (report by fg0x0)</li> <li>CONJ-1374 - Redirect URL password partially logged when containing '@'</li> <li>CONJ-1372 - caching_sha2_password full authentication fails over a Unix socket when SSL is disabled (report by 工藤航)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md";>org.mariadb.jdbc:mariadb-java-client's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/4.0.0";>4.0.0</a> (Oct 2026)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/3.5.11...4.0.0";>Full Changelog</a></p> <p>4.0.0 includes every fix of 3.5.11, listed below.</p> <h4>Major Changes</h4> <ul> <li>CONJ-1361 - Java 17 is the minimum runtime, Java 8 and 11 are no longer supported (the 3.5 branch remains available for Java 8)</li> <li>CONJ-1321 - TLS enabled by default: sslMode now defaults to verify-full</li> <li>CONJ-1384 - AWS IAM authentication moves to the separate artifact mariadb-java-client-aws, the connector no longer depends on the AWS SDK; the plugin gains STS assume role support (CONJ-877, report by Adrian Samatan) and ships the RDS root certificates so that the default sslMode validates an RDS endpoint without configuration</li> <li>CONJ-1306 - PreparedStatement.executeQuery() rejects statements that return no result set, as the JDBC specification requires; the permitNoResults option restores the former behavior (report by Christopher Schultz)</li> <li>CONJ-651 - Stream LOB columns from the socket instead of loading them in memory (report by Ilya Zhavoronkov)</li> </ul> <h4>Key Enhancements</h4> <ul> <li>CONJ-1386 - New sslMode=allow: verify-full when the server announces TLS, unencrypted otherwise, for a mix of servers with and without TLS behind one connection string</li> <li>CONJ-1347 - setSavepoint() throws in auto-commit mode instead of silently succeeding</li> <li>CONJ-1262 - cachedCodecs option now defaults to true</li> <li>CONJ-1370 - JNA dependency removed, Unix domain sockets use the JDK implementation</li> <li>CONJ-1371 - useReadAheadInput option and ReadAheadBufferedStream removed</li> <li>CONJ-1366 - First-class module-info.java (module org.mariadb.jdbc)</li> <li>CONJ-1367 - Virtual threads: no carrier pinning in driver locks, verified by a JFR-based test</li> <li>CONJ-1354 - GSSAPI authentication uses the native GSS-API where available</li> <li>CONJ-1308 - Support MariaDB 12.3 XML data type</li> <li>CONJ-1220 - Unix domain sockets on Windows, for SSH tunnels (report by DAIKOZ)</li> <li>CONJ-1378 - Try every IP address a hostname resolves to when opening the socket</li> <li>CONJ-1369 - Performance work on the Java 17 code base: packet reader and writer buffers, readNBytes, ranged Arrays.equals, no String.format on data paths</li> <li>CONJ-1365 - Performance: VarHandle little-endian access in packet buffers</li> <li>CONJ-1373 - Performance: JDK UTF-8 encoder for long strings in Writer.writeString / writeStringEscaped</li> <li>CONJ-1375 - Performance: cache codec resolution for getObject(index, Class) and setObject</li> <li>CONJ-1377 - Performance: faster client-side query parsing in ClientParser and NativeSql</li> <li>CONJ-1368 - Build and test tooling: tests run against the built jar, GraalVM metadata refreshed, CI matrix on Java 17, 21 and 25</li> </ul> <h4>Issues Resolved</h4> <ul> <li>CONJ-1383 - Connection init rebuilds session_track_system_variables from @<a href="https://github.com/global";><code>@global</code></a>, discarding the session-level last_gtid set by MaxScale (report by Sawan Patel)</li> <li>CONJ-1379 - Set an explicit session tracking list and guard character_set_results like character_set_client (report by fg0x0)</li> <li>CONJ-1381 - Bound server-declared lengths by the packet before allocating and reading from them (report by fg0x0)</li> <li>CONJ-1374 - Redirect URL password partially logged when containing '@'</li> <li>CONJ-1372 - caching_sha2_password full authentication fails over a Unix socket when SSL is disabled (report by 工藤航)</li> <li>CONJ-1360 - Incorrect dependency check in AwsIamCredentialPlugin (report by Dheeraj Nalluri)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/52164c41c361dcee2513e258bfaa8c546c103ae5";><code>52164c4</code></a> Merge branch 'develop'</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/84b586be57db69793b461c27cde740439e264b0d";><code>84b586b</code></a> [CONJ-1387] LOAD DATA LOCAL INFILE file check must not match text inside iden...</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/c08af21f4ed8567c9c8ac8b6a53b8bc226408dbc";><code>c08af21</code></a> [CONJ-1384] Publish the AWS-IAM plugin to Maven Central like the connector</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/429f3c8c2bff44a14be55993999e43bb0178e00c";><code>429f3c8</code></a> Merge branch 'develop'</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/87ac51410df4cd0007cac9ef0d49ce0cf672eab1";><code>87ac514</code></a> bump 4.0.0 version</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/85d4407f9018ec59fa8c1c1ce717be869670ec60";><code>85d4407</code></a> [misc] test stability improvement</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/39c575c89ed7189dcf60d9f558523d1579be3118";><code>39c575c</code></a> [misc] correcting javadoc</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/9fe800bf780e32ee33e4ea944373134ec20fd746";><code>9fe800b</code></a> [misc] Infer analyses the sources as Java 17</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/aaf71e4eb7a16400cca1903d8f037bc9a3350dce";><code>aaf71e4</code></a> [misc] test stability improvement</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/874537d33e3268438787234ea0e12f23367e598f";><code>874537d</code></a> [misc] java warning correction</li> <li>Additional commits viewable in <a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/3.5.10...4.0.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
