Dependency Updates (#100)

* dependency updates

Author: jakobbraun

.github/workflows/broken_links_checker.yml

@@ -2,7 +2,7 @@ name: Broken Links Checker
 
 on:
   schedule:
-    - cron: "0 5 * * *"
+    - cron: "0 5 * * 0"
   push:
     branches:
       - main
@@ -19,8 +19,8 @@ jobs:
       - name: Configure broken links checker
         run: |
           mkdir -p ./target
-          echo '{ "aliveStatusCodes": [429, 200] }' > ./target/broken_links_checker.json
-      - uses: gaurav-nelson/github-action-markdown-link-check@1.0.13
+          echo '{ "aliveStatusCodes": [429, 200], "ignorePatterns": [{"pattern": "^https?://(www.)?opensource.org"}] }' > ./target/broken_links_checker.json
+      - uses: gaurav-nelson/github-action-markdown-link-check@v1
         with:
           use-quiet-mode: 'yes'
           use-verbose-mode: 'yes'

.github/workflows/dependencies_check.yml

@@ -17,4 +17,4 @@ jobs:
           java-version: 11
           cache: 'maven'
       - name: Checking dependencies for vulnerabilities
-        run: mvn org.sonatype.ossindex.maven:ossindex-maven-plugin:audit -f pom.xml
+        run: mvn --batch-mode org.sonatype.ossindex.maven:ossindex-maven-plugin:audit -f pom.xml

.project-keeper.yml

@@ -6,5 +6,6 @@ sources:
       - integration_tests
 linkReplacements:
   - LICENSE-exasol-jdbc.txt|https://www.exasol.com/support/secure/attachment/155343/EXASOL_SDK-7.0.11.tar.gz
+  - https://www.mojohaus.org/flatten-maven-plugin/flatten-maven-plugin|https://www.mojohaus.org/flatten-maven-plugin
 excludes:
   - "E-PK-CORE-18: Outdated content: '.github/workflows/release_droid_release_on_maven_central.yml'"

dependencies.md

@@ -80,7 +80,6 @@
 [33]: http://sonarsource.github.io/sonar-scanner-maven/
 [6]: http://dev.mysql.com/doc/connector-j/en/
 [25]: https://junit.org/junit5/
-[39]: https://www.mojohaus.org/flatten-maven-plugin/flatten-maven-plugin
 [53]: https://maven.apache.org/plugins/maven-source-plugin/
 [23]: http://hamcrest.org/JavaHamcrest/
 [71]: http://maven.apache.org/plugins/maven-resources-plugin/
@@ -100,6 +99,7 @@
 [37]: https://maven.apache.org/enforcer/maven-enforcer-plugin/
 [4]: http://www.exasol.com
 [26]: https://www.eclipse.org/legal/epl-v20.html
+[39]: https://www.mojohaus.org/flatten-maven-plugin
 [75]: http://maven.apache.org/plugins/maven-install-plugin/
 [41]: https://sonatype.github.io/ossindex-maven/maven-plugin/
 [51]: https://maven.apache.org/plugins/maven-gpg-plugin/

doc/changes/changelog.md

@@ -1,5 +1,6 @@
 # Changes
 
+* [3.3.3](changes_3.3.3.md)
 * [3.3.2](changes_3.3.2.md)
 * [3.3.1](changes_3.3.1.md)
 * [3.3.0](changes_3.3.0.md)

doc/changes/changes_3.3.2.md

@@ -2,7 +2,7 @@
 
 Code name: Upgrade dependencies
 
-This release upgrades dependencies and reduces the number of runtime dependencies, fixing [CVE-2022-21724](https://ossindex.sonatype.org/vulnerability/0f319d1b-e964-4471-bded-db3aeb3c3a29?component-type=maven&component-name=org.postgresql.postgresql&utm_source=ossindex-client&utm_medium=integration&utm_content=1.1.1) in the PostgreSQL JDBC driver.
+This release upgrades dependencies and reduces the number of runtime dependencies, fixing `CVE-2022-21724` in the PostgreSQL JDBC driver.
 
 ## Bugfixes
 

doc/changes/changes_3.3.3.md

@@ -0,0 +1,30 @@
+# Test Database Builder for Java 3.3.3, released 2022-06-21
+
+Code name: Dependency Updates
+
+## Summary
+
+In this release we updated the dependencies. By that we fixed CVE-2021-22569 that affected the mySQL-driver.
+
+## Dependency Updates
+
+### Test Dependency Updates
+
+* Updated `mysql:mysql-connector-java:8.0.28` to `8.0.29`
+* Updated `org.mockito:mockito-junit-jupiter:4.5.1` to `4.6.1`
+* Updated `org.postgresql:postgresql:42.3.4` to `42.3.6`
+* Updated `org.testcontainers:junit-jupiter:1.17.1` to `1.17.2`
+* Updated `org.testcontainers:mysql:1.17.1` to `1.17.2`
+* Updated `org.testcontainers:oracle-xe:1.17.1` to `1.17.2`
+* Updated `org.testcontainers:postgresql:1.17.1` to `1.17.2`
+
+### Plugin Dependency Updates
+
+* Updated `com.exasol:error-code-crawler-maven-plugin:1.1.0` to `1.1.1`
+* Updated `com.exasol:project-keeper-maven-plugin:2.3.1` to `2.4.6`
+* Updated `org.apache.maven.plugins:maven-compiler-plugin:3.9.0` to `3.10.1`
+* Updated `org.apache.maven.plugins:maven-javadoc-plugin:3.3.1` to `3.4.0`
+* Updated `org.codehaus.mojo:versions-maven-plugin:2.8.1` to `2.10.0`
+* Updated `org.jacoco:jacoco-maven-plugin:0.8.7` to `0.8.8`
+* Updated `org.sonatype.ossindex.maven:ossindex-maven-plugin:3.1.0` to `3.2.0`
+* Updated `org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8` to `1.6.13`

pk_generated_parent.pom

@@ -3,7 +3,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.exasol</groupId>
     <artifactId>test-db-builder-java-generated-parent</artifactId>
-    <version>3.3.2</version>
+    <version>3.3.3</version>
     <packaging>pom</packaging>
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -43,7 +43,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.9.0</version>
+                <version>3.10.1</version>
                 <configuration>
                     <source>${java.version}</source>
                     <target>${java.version}</target>
@@ -97,7 +97,7 @@
             <plugin>
                 <groupId>org.sonatype.ossindex.maven</groupId>
                 <artifactId>ossindex-maven-plugin</artifactId>
-                <version>3.1.0</version>
+                <version>3.2.0</version>
                 <executions>
                     <execution>
                         <id>audit</id>
@@ -136,7 +136,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>versions-maven-plugin</artifactId>
-                <version>2.8.1</version>
+                <version>2.10.0</version>
                 <executions>
                     <execution>
                         <id>display-updates</id>
@@ -195,7 +195,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-javadoc-plugin</artifactId>
-                <version>3.3.1</version>
+                <version>3.4.0</version>
                 <executions>
                     <execution>
                         <id>attach-javadocs</id>
@@ -215,7 +215,7 @@
             <plugin>
                 <groupId>org.sonatype.plugins</groupId>
                 <artifactId>nexus-staging-maven-plugin</artifactId>
-                <version>1.6.8</version>
+                <version>1.6.13</version>
                 <configuration>
                     <autoReleaseAfterClose>true</autoReleaseAfterClose>
                     <serverId>ossrh</serverId>
@@ -255,7 +255,7 @@
             <plugin>
                 <groupId>org.jacoco</groupId>
                 <artifactId>jacoco-maven-plugin</artifactId>
-                <version>0.8.7</version>
+                <version>0.8.8</version>
                 <executions>
                     <execution>
                         <id>prepare-agent</id>
@@ -296,7 +296,7 @@
             <plugin>
                 <groupId>com.exasol</groupId>
                 <artifactId>error-code-crawler-maven-plugin</artifactId>
-                <version>1.1.0</version>
+                <version>1.1.1</version>
                 <executions>
                     <execution>
                         <id>verify</id>

pom.xml

@@ -3,13 +3,13 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.exasol</groupId>
     <artifactId>test-db-builder-java</artifactId>
-    <version>3.3.2</version>
+    <version>3.3.3</version>
     <name>Test Database Builder for Java</name>
     <description>pom.xml</description>
     <url>https://github.com/exasol/test-db-builder-java/</url>
     <properties>
         <junit.version>5.8.2</junit.version>
-        <test.containers.version>1.17.1</test.containers.version>
+        <test.containers.version>1.17.2</test.containers.version>
         <surefire.and.failsafe.plugin.version>3.0.0-M4</surefire.and.failsafe.plugin.version>
     </properties>
     <distributionManagement>
@@ -48,13 +48,13 @@
         <dependency>
             <groupId>mysql</groupId>
             <artifactId>mysql-connector-java</artifactId>
-            <version>8.0.28</version>
+            <version>8.0.29</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.postgresql</groupId>
             <artifactId>postgresql</artifactId>
-            <version>42.3.4</version>
+            <version>42.3.6</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -95,7 +95,7 @@
         <dependency>
             <groupId>org.testcontainers</groupId>
             <artifactId>oracle-xe</artifactId>
-            <version>1.17.1</version>
+            <version>1.17.2</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -125,7 +125,7 @@
         <dependency>
             <groupId>org.mockito</groupId>
             <artifactId>mockito-junit-jupiter</artifactId>
-            <version>4.5.1</version>
+            <version>4.6.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -161,7 +161,7 @@
             <plugin>
                 <groupId>com.exasol</groupId>
                 <artifactId>project-keeper-maven-plugin</artifactId>
-                <version>2.3.1</version>
+                <version>2.4.6</version>
                 <executions>
                     <execution>
                         <goals>
@@ -275,7 +275,7 @@
     <parent>
         <artifactId>test-db-builder-java-generated-parent</artifactId>
         <groupId>com.exasol</groupId>
-        <version>3.3.2</version>
+        <version>3.3.3</version>
         <relativePath>pk_generated_parent.pom</relativePath>
     </parent>
 </project>