Bump postgresql from 42.3.2 to 42.3.3 (#92)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sebastian Bär <[email protected]>

Author: dependabot[bot]

dependencies.md

@@ -23,7 +23,7 @@
 | [JUnit Jupiter Engine][20]                     | [Eclipse Public License v2.0][21] |
 | [JUnit Jupiter Params][20]                     | [Eclipse Public License v2.0][21] |
 | [mockito-junit-jupiter][24]                    | [The MIT License][25]             |
-| [EqualsVerifier][26]                           | [Apache License, Version 2.0][27] |
+| [EqualsVerifier | release normal jar][26]      | [Apache License, Version 2.0][27] |
 
 ## Runtime Dependencies
 
@@ -37,35 +37,34 @@
 
 | Dependency                                              | License                                        |
 | ------------------------------------------------------- | ---------------------------------------------- |
-| [Maven Surefire Plugin][33]                             | [Apache License, Version 2.0][34]              |
+| [Maven Surefire Plugin][33]                             | [Apache License, Version 2.0][27]              |
 | [JaCoCo :: Maven Plugin][35]                            | [Eclipse Public License 2.0][36]               |
-| [Apache Maven Compiler Plugin][37]                      | [Apache License, Version 2.0][34]              |
-| [Maven Failsafe Plugin][39]                             | [Apache License, Version 2.0][34]              |
-| [Apache Maven Source Plugin][41]                        | [Apache License, Version 2.0][34]              |
-| [Apache Maven Javadoc Plugin][43]                       | [Apache License, Version 2.0][34]              |
-| [Apache Maven GPG Plugin][45]                           | [Apache License, Version 2.0][46]              |
+| [Apache Maven Compiler Plugin][37]                      | [Apache License, Version 2.0][27]              |
+| [Maven Failsafe Plugin][39]                             | [Apache License, Version 2.0][27]              |
+| [Apache Maven Source Plugin][41]                        | [Apache License, Version 2.0][27]              |
+| [Apache Maven Javadoc Plugin][43]                       | [Apache License, Version 2.0][27]              |
+| [Apache Maven GPG Plugin][45]                           | [Apache License, Version 2.0][27]              |
 | [OpenFastTrace Maven Plugin][47]                        | [GNU General Public License v3.0][48]          |
-| [org.sonatype.ossindex.maven:ossindex-maven-plugin][49] | [ASL2][46]                                     |
-| [Versions Maven Plugin][51]                             | [Apache License, Version 2.0][34]              |
-| [Apache Maven Enforcer Plugin][53]                      | [Apache License, Version 2.0][34]              |
+| [org.sonatype.ossindex.maven:ossindex-maven-plugin][49] | [ASL2][50]                                     |
+| [Versions Maven Plugin][51]                             | [Apache License, Version 2.0][27]              |
+| [Apache Maven Enforcer Plugin][53]                      | [Apache License, Version 2.0][27]              |
 | [Project keeper maven plugin][55]                       | [MIT][3]                                       |
-| [Maven Deploy Plugin][57]                               | [The Apache Software License, Version 2.0][46] |
+| [Maven Deploy Plugin][57]                               | [The Apache Software License, Version 2.0][50] |
 | [Nexus Staging Maven Plugin][59]                        | [Eclipse Public License][60]                   |
 | [error-code-crawler-maven-plugin][61]                   | [MIT][3]                                       |
-| [Reproducible Build Maven Plugin][63]                   | [Apache 2.0][46]                               |
-| [Maven Clean Plugin][65]                                | [The Apache Software License, Version 2.0][46] |
-| [Maven Resources Plugin][67]                            | [The Apache Software License, Version 2.0][46] |
-| [Maven JAR Plugin][69]                                  | [The Apache Software License, Version 2.0][46] |
-| [Maven Install Plugin][71]                              | [The Apache Software License, Version 2.0][46] |
-| [Maven Site Plugin 3][73]                               | [The Apache Software License, Version 2.0][46] |
+| [Reproducible Build Maven Plugin][63]                   | [Apache 2.0][50]                               |
+| [Maven Clean Plugin][65]                                | [The Apache Software License, Version 2.0][50] |
+| [Maven Resources Plugin][67]                            | [The Apache Software License, Version 2.0][50] |
+| [Maven JAR Plugin][69]                                  | [The Apache Software License, Version 2.0][50] |
+| [Maven Install Plugin][71]                              | [The Apache Software License, Version 2.0][50] |
+| [Maven Site Plugin 3][73]                               | [The Apache Software License, Version 2.0][50] |
 
-[35]: https://www.eclemma.org/jacoco/index.html
 [55]: https://github.com/exasol/project-keeper-maven-plugin
 [0]: https://www.oracle.com/database/technologies/maven-central-guide.html
 [4]: https://github.com/exasol/error-reporting-java
 [2]: https://github.com/exasol/db-fundamentals-java
 [31]: https://jdbc.postgresql.org
-[46]: http://www.apache.org/licenses/LICENSE-2.0.txt
+[50]: http://www.apache.org/licenses/LICENSE-2.0.txt
 [33]: https://maven.apache.org/surefire/maven-surefire-plugin/
 [59]: http://www.sonatype.com/public-parent/nexus-maven-plugins/nexus-staging/nexus-staging-maven-plugin/
 [29]: https://www.exasol.com/support/secure/attachment/155343/EXASOL_SDK-7.0.11.tar.gz
@@ -79,27 +78,27 @@
 [19]: http://opensource.org/licenses/BSD-3-Clause
 [37]: https://maven.apache.org/plugins/maven-compiler-plugin/
 [9]: http://opensource.org/licenses/MIT
-[45]: http://maven.apache.org/plugins/maven-gpg-plugin/
-[27]: https:///www.apache.org/licenses/LICENSE-2.0.txt
 [47]: https://github.com/itsallcode/openfasttrace-maven-plugin
 [36]: https://www.eclipse.org/legal/epl-2.0/
 [60]: http://www.eclipse.org/legal/epl-v10.html
 [6]: https://github.com/exasol/exasol-testcontainers
+[35]: https://www.jacoco.org/jacoco/trunk/doc/maven.html
 [25]: https://github.com/mockito/mockito/blob/main/LICENSE
 [16]: https://github.com/exasol/hamcrest-resultset-matcher
 [63]: http://zlika.github.io/reproducible-build-maven-plugin
 [48]: https://www.gnu.org/licenses/gpl-3.0.html
 [69]: http://maven.apache.org/plugins/maven-jar-plugin/
-[34]: https://www.apache.org/licenses/LICENSE-2.0.txt
+[27]: https://www.apache.org/licenses/LICENSE-2.0.txt
+[26]: https://www.jqno.nl/equalsverifier
 [53]: https://maven.apache.org/enforcer/maven-enforcer-plugin/
 [30]: http://dev.mysql.com/doc/connector-j/en/
 [28]: http://www.exasol.com
 [21]: https://www.eclipse.org/legal/epl-v20.html
 [71]: http://maven.apache.org/plugins/maven-install-plugin/
 [20]: https://junit.org/junit5/
 [49]: https://sonatype.github.io/ossindex-maven/maven-plugin/
+[45]: https://maven.apache.org/plugins/maven-gpg-plugin/
 [8]: https://testcontainers.org
-[26]: https:///www.jqno.nl/equalsverifier
 [41]: https://maven.apache.org/plugins/maven-source-plugin/
 [18]: http://hamcrest.org/JavaHamcrest/
 [57]: http://maven.apache.org/plugins/maven-deploy-plugin/

doc/changes/changelog.md

@@ -1,5 +1,6 @@
 # Changes
 
+* [3.3.1](changes_3.3.1.md)
 * [3.3.0](changes_3.3.0.md)
 * [3.2.2](changes_3.2.2.md)
 * [3.2.1](changes_3.2.1.md)

doc/changes/changes_3.3.1.md

@@ -0,0 +1,37 @@
+# Test Database Builder for Java 3.3.1, released 2022-02-18
+
+Code name: Added Oracle support
+
+## Summary
+
+This release fixes [CVE-2022-21724](https://nvd.nist.gov/vuln/detail/CVE-2022-21724) in the PostgreSQL dependency. This CVE only affected users who used TDDB for PostgreSQL databases.
+
+## Bugfixes
+
+* #92: Fixed Dependabot finding by upgrading to PostgreSQL 42.3.3
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Updated `com.oracle.database.jdbc:ojdbc11:21.4.0.0.1` to `21.5.0.0`
+
+### Runtime Dependency Updates
+
+* Updated `org.postgresql:postgresql:42.3.2` to `42.3.3`
+
+### Test Dependency Updates
+
+* Updated `nl.jqno.equalsverifier:equalsverifier:3.8.2` to `3.9`
+* Updated `org.mockito:mockito-junit-jupiter:4.2.0` to `4.3.1`
+* Updated `org.testcontainers:junit-jupiter:1.16.2` to `1.16.3`
+* Updated `org.testcontainers:mysql:1.16.2` to `1.16.3`
+* Updated `org.testcontainers:postgresql:1.16.2` to `1.16.3`
+
+### Plugin Dependency Updates
+
+* Updated `io.github.zlika:reproducible-build-maven-plugin:0.13` to `0.14`
+* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.0.0-M3` to `3.0.0`
+* Updated `org.apache.maven.plugins:maven-gpg-plugin:1.6` to `3.0.1`
+* Updated `org.itsallcode:openfasttrace-maven-plugin:1.0.0` to `1.2.0`
+* Updated `org.jacoco:jacoco-maven-plugin:0.8.6` to `0.8.7`

pom.xml

@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.exasol</groupId>
     <artifactId>test-db-builder-java</artifactId>
-    <version>3.3.0</version>
+    <version>3.3.1</version>
     <name>Test Database Builder for Java</name>
     <description>pom.xml</description>
     <url>https://github.com/exasol/test-db-builder-java</url>
@@ -13,7 +13,7 @@
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <java.version>11</java.version>
         <junit.version>5.8.2</junit.version>
-        <test.containers.version>1.16.2</test.containers.version>
+        <test.containers.version>1.16.3</test.containers.version>
         <surefire.and.failsafe.plugin.version>3.0.0-M4</surefire.and.failsafe.plugin.version>
         <sonar.coverage.jacoco.xmlReportPaths>target/site/jacoco/jacoco.xml,target/site/jacoco-it/jacoco.xml
         </sonar.coverage.jacoco.xmlReportPaths>
@@ -81,13 +81,13 @@
         <dependency>
             <groupId>org.postgresql</groupId>
             <artifactId>postgresql</artifactId>
-            <version>42.3.2</version>
+            <version>42.3.3</version>
             <scope>runtime</scope>
         </dependency>
         <dependency>
             <groupId>com.oracle.database.jdbc</groupId>
             <artifactId>ojdbc11</artifactId>
-            <version>21.4.0.0.1</version>
+            <version>21.5.0.0</version>
         </dependency>
         <dependency>
             <groupId>com.exasol</groupId>
@@ -151,13 +151,13 @@
         <dependency>
             <groupId>org.mockito</groupId>
             <artifactId>mockito-junit-jupiter</artifactId>
-            <version>4.2.0</version>
+            <version>4.3.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>nl.jqno.equalsverifier</groupId>
             <artifactId>equalsverifier</artifactId>
-            <version>3.8.2</version>
+            <version>3.9</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -181,7 +181,7 @@
             <plugin>
                 <groupId>org.jacoco</groupId>
                 <artifactId>jacoco-maven-plugin</artifactId>
-                <version>0.8.6</version>
+                <version>0.8.7</version>
                 <executions>
                     <execution>
                         <id>prepare-agent</id>
@@ -288,7 +288,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-gpg-plugin</artifactId>
-                <version>1.6</version>
+                <version>3.0.1</version>
                 <executions>
                     <execution>
                         <id>sign-artifacts</id>
@@ -308,7 +308,7 @@
             <plugin>
                 <groupId>org.itsallcode</groupId>
                 <artifactId>openfasttrace-maven-plugin</artifactId>
-                <version>1.0.0</version>
+                <version>1.2.0</version>
                 <executions>
                     <execution>
                         <id>trace-requirements</id>
@@ -354,7 +354,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-enforcer-plugin</artifactId>
-                <version>3.0.0-M3</version>
+                <version>3.0.0</version>
                 <executions>
                     <execution>
                         <id>enforce-maven</id>
@@ -435,7 +435,7 @@
             <plugin>
                 <groupId>io.github.zlika</groupId>
                 <artifactId>reproducible-build-maven-plugin</artifactId>
-                <version>0.13</version>
+                <version>0.14</version>
                 <executions>
                     <execution>
                         <id>strip-jar</id>

src/test/java/com/exasol/dbbuilder/dialects/TableTest.java

@@ -79,6 +79,7 @@ void testInsert() {
                 .build() //
                 .insert("Claudia", "2001-01-01") //
                 .insert("Steven", "2002-02-02");
+        @SuppressWarnings("unchecked")
         final ArgumentCaptor<Stream<List<Object>>> streamCapture = ArgumentCaptor.forClass(Stream.class);
         verify(this.writerMock, times(2)).write(eq(table), streamCapture.capture());
         assertThat(streamCapture.getAllValues().stream().flatMap(each -> each).collect(Collectors.toList()),
@@ -93,6 +94,7 @@ void testBulkInsert() {
                 .column("BIRTHDAY", "DATE") //
                 .build() //
                 .bulkInsert(rows);
+        @SuppressWarnings("unchecked")
         final ArgumentCaptor<Stream<List<Object>>> streamCapture = ArgumentCaptor.forClass(Stream.class);
         verify(this.writerMock, times(1)).write(eq(table), streamCapture.capture());
         assertThat(streamCapture.getAllValues().stream().flatMap(each -> each).collect(Collectors.toList()),
@@ -105,6 +107,7 @@ void testInsertThrowsExceptionOnValueCountMismatch() {
                 .column("FOO", "DATE") //
                 .build();
         table.insert("1", "2");
+        @SuppressWarnings("unchecked")
         final ArgumentCaptor<Stream<List<Object>>> streamCapture = ArgumentCaptor.forClass(Stream.class);
         verify(this.writerMock).write(eq(table), streamCapture.capture());
         final Stream<List<Object>> stream = streamCapture.getValue();

src/test/java/com/exasol/dbbuilder/dialects/mysql/MySQLDatabaseObjectCreationAndDeletionIT.java

@@ -64,7 +64,10 @@ private void assertStatementRendersToYes(final String columnName, final String s
             resultSet.next();
             assertThat(resultSet.getString(1), equalTo("Y"));
         } catch (final SQLException exception) {
-            throw new AssertionError(ExaError.messageBuilder("E-TDBJ-23").message("Unable to determine existence of object: {{columnName}}", columnName).toString(), exception);
+            throw new AssertionError(
+                    ExaError.messageBuilder("E-TDBJ-23")
+                            .message("Unable to determine existence of object: {{columnName}}", columnName).toString(),
+                    exception);
         }
     }
 
@@ -101,8 +104,10 @@ private void assertUserHasTablePrivilege(final String username, final String obj
             assertAll(() -> assertThat(result.next(), equalTo(true)),
                     () -> assertThat(result.getString(1), containsString(expectedPrivilege)));
         } catch (final SQLException exception) {
-            throw new AssertionError(ExaError.messageBuilder("E-TDBJ-24").message("Unable to determine if user {{username}} has global privilege {{privilege}}.", username, expectedPrivilege).toString(),
-                    exception);
+            throw new AssertionError(ExaError.messageBuilder("E-TDBJ-24")
+                    .message("Unable to determine if user {{username}} has global privilege {{privilege}}.", username,
+                            expectedPrivilege)
+                    .toString(), exception);
         }
     }
 
@@ -116,7 +121,9 @@ void testInsertIntoTable() {
                     .executeQuery("SELECT ID, NAME FROM " + table.getFullyQualifiedName() + "ORDER BY ID ASC");
             assertThat(result, table().row(1, "FOO").row(2, "BAR").matches());
         } catch (final SQLException exception) {
-            throw new AssertionError(ExaError.messageBuilder("E-TDBJ-25").message("Unable to validate contents of table {{table}}", table.getFullyQualifiedName()).toString(), exception);
+            throw new AssertionError(ExaError.messageBuilder("E-TDBJ-25")
+                    .message("Unable to validate contents of table {{table}}", table.getFullyQualifiedName())
+                    .toString(), exception);
         }
     }
 
@@ -126,6 +133,7 @@ private ExistsInDatabaseMatcher(final Connection connection) {
             super(connection);
         }
 
+        @Override
         protected String getCheckCommand(final DatabaseObject object) {
             if (object instanceof User) {
                 return "SELECT 1 FROM mysql.user WHERE user = ?";
@@ -134,7 +142,8 @@ protected String getCheckCommand(final DatabaseObject object) {
             } else if (object instanceof Schema) {
                 return "SELECT 1 FROM INFORMATION_SCHEMA.SCHEMATA WHERE SCHEMA_NAME = ?";
             } else {
-                throw new AssertionError(ExaError.messageBuilder("E-TDBJ-26").message("Assertion for {{object}} is not yet implemented.", object.getType()).toString());
+                throw new AssertionError(ExaError.messageBuilder("E-TDBJ-26")
+                        .message("Assertion for {{object}} is not yet implemented.", object.getType()).toString());
             }
         }
     }