dependabot[bot] opened a new pull request, #20253: URL: https://github.com/apache/pinot/pull/20253
Bumps [com.mchange:c3p0](https://github.com/swaldman/c3p0) from 0.15.0 to 0.15.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/swaldman/c3p0/blob/0.15.x/CHANGELOG";>com.mchange:c3p0's changelog</a>.</em></p> <blockquote> <p>c3p0-0.15.1 -- Fix some embarrasing documentation errors, update README.md. -- Make mchange-commons-java transitive dependencies optional in ivy.xml as well as under pom.xml, so we don't sometimes see them pulled in, sometimes not. (mchange-commons-java) -- Eliminate loud warnings with scary stack traces accidentally introduced into the logging path when HOCON / typesafe-config libraries can't be found. The absences of typesafe-config is a common and supported configuration, not a crisis to shout about. (mchange-commons-java) c3p0-0.15.0 -- Use the prior two extensibility augmentations to mchange-commons-java to support c3p0-xml directly within com.mchange.v2.cfg, but without layer inversions that would have required the config and log libraries to know anything about their client c3p0. -- Make com.mchange.v2.log config extensible by allowing specification of extra resource paths for log config in mlog-config-resource-paths.txt, which becomes a #-commented, one-per-line list of resource paths the current configuration of com.mchange.v2.cfg supports. (mchange-commons-java) -- Make com.mchange.v2.cfg extensible, by allowing users to specify ExtraPropertiesConfigSources (by fqcn) in a resoure called mcfg-extra-properties-config-sources.txt, which becomes a #-commented, one-per-line list if by-name-instantiable sublasses of com.mchange.v2.cfg.ExtraPropertiesConfigSources. (mchange-commons-java) -- Clarify, fix, and test support for config and user names containing dots, as long as they don't contain dot delineated "named-configs", "extensions", or "user-overrides" elements. -- Port XML config parsing (including the security hardenings) to the new, unified config. Support compound properties in <!-- raw HTML omitted -->, not just unprefixed c3p0.xxx properties. -- Improve, and add much better documentation for, the API permitting refreshes, augmentations, and therefore customization of c3p0 config at runtime. Make it configurable whether MLog config should also be updated on such a refresh. Allow augmenting with "backstops" as well as with "overrides" when refreshing config. Backstops only take effect if nothing else in config sets the value. Overrides override values set within standard c3p0 configuration. -- The never-really-documented feature of permitting user-specified "C3P0ConfigFinder" implementations is no longer supported and has been removed. It opened more doors to mischief than it solved likely problems. (In the unlikely case you used and actually miss this feature, please do let us know.) -- Major reworking of c3p0's internal config library, com.mchange.v2.c3p0.cfg. Structurally it used to have two views of config data that could under some circumstances slip out of sync. Now the code is much simpler, and there is only one, canonical representation of the data. -- Take greater care that items that might contain passwords or credentials are masked before appearing in logs. LOOSEN restriction on usernames appearing in logs. They can be helpful for debugging (particularly in deployments where the user-overrides feature is used)</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/swaldman/c3p0/commit/02d723d359499fe45d60084574af1aa36fdff6f1";><code>02d723d</code></a> Update mchange-commons-java, c3p0 version numbers for c3p0 0.15.1 final.</li> <li><a href="https://github.com/swaldman/c3p0/commit/80014aa03bca831380bce9afac403cc3be51b9df";><code>80014aa</code></a> Some CHANGELOG additions.</li> <li><a href="https://github.com/swaldman/c3p0/commit/ab78d08a7973db14ae0313baf3e3ce6944dfdf26";><code>ab78d08</code></a> Bring now truly optional mchange-commons-java dependency on typesafe config e...</li> <li><a href="https://github.com/swaldman/c3p0/commit/071eb6d9652bd3b5c406971278da9a562f4fc190";><code>071eb6d</code></a> Log when c3p0 configuration is frozen, can't be updated or refreshed.</li> <li><a href="https://github.com/swaldman/c3p0/commit/28e8e364e0a9632fe1b9dd0735b5db716422a0f8";><code>28e8e36</code></a> CHANGELOG, README.md, and documentation updates.</li> <li><a href="https://github.com/swaldman/c3p0/commit/34e84ac624f805a01c16b7410fe98c0b47bd8cd6";><code>34e84ac</code></a> Upgrade to mill 1.1.10, version numbers and dependencies for c3p0-0.15.1.</li> <li>See full diff in <a href="https://github.com/swaldman/c3p0/compare/v0.15.0...v0.15.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
