dependabot[bot] opened a new pull request, #4183: URL: https://github.com/apache/ambari/pull/4183
Bumps [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) from 2.3.0 to 2.7.14. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mariadb-corporation/mariadb-connector-j/releases";>org.mariadb.jdbc:mariadb-java-client's releases</a>.</em></p> <blockquote> <h2>MariaDB Connector/Java 2.7.14</h2> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/2.7.14";>2.7.14</a> (Jun 2026)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/2.7.13...2.7.14";>Full Changelog</a></p> <ul> <li>CONJ-1315 cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if Mitm (report by tonghuaroot)</li> <li>CONJ-1316 pin Locale.ROOT on locale-sensitive call sites (fixes locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)</li> <li>CONJ-1317 ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)</li> <li>match local infile filename case-sensitively (thanks to jmestwa-coder)</li> <li>create gssapi jaas config temp file with owner-only permissions (thanks to jmestwa-coder)</li> <li>encode caching_sha2 clear password as UTF-8 (thanks to jmestwa-coder)</li> <li>call inflater.end() in finally in CompressInputStream (thanks to jmestwa-coder)</li> </ul> <h2>MariaDB Connector/Java 2.7.13</h2> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/2.7.13";>2.7.13</a> (Dec 2025)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/2.7.12...2.7.13";>Full Changelog</a></p> <ul> <li>CONJ-661 Fixed intermittent NullPointerException when calling prepareStatement</li> <li>CONJ-1167 Fixed possible ArrayIndexOutOfBoundsException when using CallableStatement</li> <li>CONJ-1185 Fixed Android compatibility issue: Pattern CANON_EQ flag not supported</li> <li>CONJ-1293 Fixed NullPointerException in MariaDbDataSource when setLoginTimeout(0) has been called</li> <li>CONJ-1174 Fixed ResultSetMetaData precision for signed BIGINT (was reported as 20)</li> </ul> <h2>MariaDB Connector/Java 2.7.12</h2> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/2.7.12";>2.7.12</a> (Feb 2024)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/2.7.11...2.7.12";>Full Changelog</a></p> <ul> <li>CONJ-1145 Wrong sequence number of sub header with compressing procotol active</li> <li>CONJ-1151 Wrong debug trace when using compression protocol</li> <li>CONJ-1152 Improve message when reaching socket timeout during connection initial commands</li> <li>CONJ-1153 session tracking only read first SYSTEM_VARIABLES session tracking change</li> </ul> <h2>MariaDB Connector/Java 2.7.11</h2> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/2.7.11";>2.7.11</a> (Nov 2023)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/2.7.10...2.7.11";>Full Changelog</a></p> <ul> <li>CONJ-1075 LOAD DATA INFILE is broken on windows</li> <li>CONJ-1108 Database metadata listing TEMPORARY tables/sequences</li> <li>CONJ-1118 Aurora Single Write Cluster Endpoint can't make Read DB Connection for readonly transaction</li> </ul> <h2>MariaDB Connector/Java 2.7.10</h2> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/2.7.10";>2.7.10</a> (Aug 2023)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/2.7.9...2.7.10";>Full Changelog</a></p> <ul> <li>CONJ-1091 Ensure setting connectTimeout as timeout for socket timeout until connection is done. This permit to set a connectTimeout, while socketTimeout can still be set to 0</li> </ul> <h2>MariaDB Connector/Java 2.7.9</h2> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/2.7.9";>2.7.9</a> (Mar 2023)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/2.7.8...2.7.9";>Full Changelog</a></p> <ul> <li>CONJ-1062 correcting TlsSocketPlugin to use Driver classloader</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md";>org.mariadb.jdbc:mariadb-java-client's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/2.7.14";>2.7.14</a> (Jun 2026)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/2.7.13...2.7.14";>Full Changelog</a></p> <h5>Bugs Fixed</h5> <ul> <li>CONJ-1315 - cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if Mitm (report by tonghuaroot)</li> <li>CONJ-1316 - pin Locale.ROOT on locale-sensitive call sites (fixes locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)</li> <li>CONJ-1317 - ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)</li> <li>CONJ-1322 - match local infile filename case-sensitively (thanks to jmestwa-coder)</li> <li>create gssapi jaas config temp file with owner-only permissions (thanks to jmestwa-coder)</li> <li>encode caching_sha2 clear password as UTF-8 (thanks to jmestwa-coder)</li> <li>call inflater.end() in finally in CompressInputStream (thanks to jmestwa-coder)</li> <li>CONJ-1318 - allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server (thanks to tharavel)</li> </ul> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/3.5.8";>3.5.8</a> (Apr 2026)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/3.5.7...3.5.8";>Full Changelog</a></p> <h4>Issues Resolved</h4> <ul> <li>CONJ-1305 - XAResource.isSameRM() incorrectly returns true when rewriteBatchedStatements differs between connections</li> <li>CONJ-1303 - Statement.cancel() fails to kill running query during result streaming</li> </ul> <h4>Other</h4> <ul> <li>CONJ-1298 - Performance improvement: avoid decoding extended format</li> </ul> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/3.5.7";>3.5.7</a> (Dec 2025)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/3.5.6...3.5.7";>Full Changelog</a></p> <h4>Key Enhancements</h4> <ul> <li>CONJ-1282 - Added TLS SNI (Server Name Indication) support</li> <li>CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message</li> </ul> <h4>Issues Resolved</h4> <ul> <li>CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x</li> <li>CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue</li> <li>CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts</li> <li>CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554</li> <li>CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient</li> <li>CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+</li> </ul> <h2><a href="https://github.com/mariadb-corporation/mariadb-connector-j/tree/3.5.6";>3.5.6</a> (Sep 2025)</h2> <p><a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/3.5.5...3.5.6";>Full Changelog</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/defeee068496e3f6312e775c7de864f1b06388d4";><code>defeee0</code></a> [misc] update maxscale-tag environment variable to MAXSCALE_VERSION</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/a4489c656b2eef0329b85d633e87987e44eb3996";><code>a4489c6</code></a> fix: correct setup-java action to v5</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/5eb54a2b7f4760f788c0be9519f7d957587d3906";><code>5eb54a2</code></a> bump 2.7.14</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/1a98191515a4b0662cb38fa17c8444d3d8c8c758";><code>1a98191</code></a> match local infile filename case-sensitively</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/c95e74b0d57a3dbd20550a39720dbe294a0b06d8";><code>c95e74b</code></a> [misc] maxscale CI test correction</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/ebc728ec683dca980757b13e1287cc2cabc6e6fc";><code>ebc728e</code></a> [misc] test: detect MaxScale via isMaxscale(), drop dead skysql checks</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/639ef1920aefc091cdfe54456d6ccb709e9f6782";><code>639ef19</code></a> [misc] add MaxScale CI testing</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/35385d6fe7030aba07f10605967811f7f21cc336";><code>35385d6</code></a> [misc] detect MaxScale version from session state tracking</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/7aca9f3eb8e8f86898652120c35cfd0cdc57285a";><code>7aca9f3</code></a> [misc] pin Locale.ROOT on locale-sensitive call sites</li> <li><a href="https://github.com/mariadb-corporation/mariadb-connector-j/commit/c2a0e0dd092d9c33ce9cf9c3b88bf05fbf1e5c80";><code>c2a0e0d</code></a> [misc] cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion</li> <li>Additional commits viewable in <a href="https://github.com/mariadb-corporation/mariadb-connector-j/compare/2.3.0...2.7.14";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/ambari/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
