Update dependency org.mariadb.jdbc:mariadb-java-client to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.mariadb.jdbc:mariadb-java-client (source)	2.7.13 → 3.5.10

---

Release Notes

mariadb-corporation/mariadb-connector-j (org.mariadb.jdbc:mariadb-java-client)

v3.5.10

Compare Source

Full Changelog

Key Enhancements

• CONJ-1333 - Add maxAllowedPacket connection option (send/receive limit)
• CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)
• CONJ-1330 - add infer test to CI

Issues Resolved

• CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
• CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is
  attacker-controlled (report by Qing Xu)
• CONJ-1307 - Connection.setReadOnly(true) still allows DML statements to execute
• CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
• CONJ-1327 - Align SSL hostname verification with TLS libraries (thanks to jmestwa-coder)
• CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to
  jmestwa-coder)
• CONJ-1331 - trustStore-configured TLS connections defer certificate-chain/identity validation instead of validating
  up front (thanks to jmestwa-coder)
• CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to
  jmestwa-coder)
• CONJ-1341 - MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own
  password is supplied (report by fg0x0)
• CONJ-1328 - restrictedAuth allowlist is matched with substring contains() instead of equality (thanks to
  jmestwa-coder)
• CONJ-1338 - Validate length-encoded integers fit a non-negative int before use as a length (report by fg0x0)
• CONJ-1336 - CONJ-1282 regression: TLS connection fails when JDBC hostname is an absolute FQDN ending with a trailing
  dot (report by Shaswata, thanks to Pepo48 for PR)
• CONJ-1335 - getGeneratedKeys() throws "integer overflow" after a batch insert when the auto-increment value exceeds
  Integer.MAX_VALUE, and returns bulk generated keys out of batch order

v3.5.9

Compare Source

Full Changelog

Key Enhancements

• CONJ-1223 - cache TLS trust/key managers across connections to reduce SSL connection cost
• CONJ-1314 - add SPI for interactive dialog (PAM) authentication callback
• CONJ-1311 - add dedicated option useIpForKillQuery for query cancellation
• CONJ-1310 - Add full native image support and CI coverage

Issues Resolved

• CONJ-1320 - PAM (dialog) authentication must require a secure connection (report by fg0x0)
• CONJ-1319 - Use constant-time comparison when validating the server certificate fingerprint (report by jmestwa-coder)
• CONJ-1318 - enforce allowLocalInfile=false on the server's local-infile request, so a malicious server cannot read a client file despite the option being disabled
• CONJ-1322 - match local infile filename case-sensitively (thanks to jmestwa-coder)
• CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)
• CONJ-1315 - cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if MitM (report by tonghuaroot)
• CONJ-1317 - ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)
• CONJ-1304 - CallableStatement parameter metadata read from mysql.proc, with MySQL info_schema fallback
• CONJ-1299 - keep VALUES literals after the last placeholder when rewriting batches
• CONJ-1313 - race condition in HaMode#getAvailableHostInOrder can cause NPE
• CONJ-1311 - Connection.cancelCurrentQuery fails with SslMode.VERIFY_FULL when client socket IP is set
• CONJ-1264 - handle LocalDateTime as a zoneless wall-clock value
• CONJ-1316 - pin Locale.ROOT on locale-sensitive call sites and date/time/Duration text formatting (fixes
  locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)
• CONJ-1324 - fix SQL parser to correctly handle '--' in expressions and reset lastChar after block comments
• CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)
• CONJ-1318 - allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server (thanks to tharavel)

v3.5.8

Compare Source

Full Changelog

Issues Resolved

• CONJ-1305 - XAResource.isSameRM() incorrectly returns true when rewriteBatchedStatements differs between connections
• CONJ-1303 - Statement.cancel() fails to kill running query during result streaming

Other

• CONJ-1298 - Performance improvement: avoid decoding extended format

v3.5.7

Compare Source

Full Changelog

Key Enhancements

• CONJ-1282 - Added TLS SNI (Server Name Indication) support
• CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message

Issues Resolved

• CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x
• CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue
• CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts
• CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554
• CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient
• CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+

v3.5.6

Compare Source

Full Changelog

Key Enhancements

• CONJ-1238 - rewriteBatchStatements implementation
• CONJ-1274 - server prepared statement client failover to client prepared statement

Issues Resolved

• CONJ-1278 - prepared statement caching enablement correction, same than 2.x
• CONJ-1279 - metadata table name addition for 12.1 after MDEV-28933
• CONJ-1280 - permit having multiple command with initSql option
• CONJ-1276 - Connection#isValid(int timeout) does not obey the passed in timeout if the network is down.

v3.5.5

Compare Source

Full Changelog

Issues Resolved

• CONJ-1265 - ensure rollback and release savepoint operation to be sent to server, even when there is no transaction in progress
• CONJ-1270 - forceConnectionTimeZoneToSession doesn't always set the timezone to server

v3.5.4

Compare Source

Full Changelog

Key Enhancements

• CONJ-1261 - Added caching option for loadCodecs results to improve performance

Issues Resolved

• CONJ-1234 - Fixed incorrect type definitions in DatabaseMetaData.getTypeInfo()
• CONJ-1247 - Resolved potential race condition that could cause NullPointerException
• CONJ-1250 - avoids redundant queries for CallableStatement.getParameterMetaData()
• CONJ-1251 - Fixed SSL configuration issue where zero SSL settings only functioned without explicit SSL configuration
• CONJ-1252 - Resolved GSSAPI authentication error when server exchanges begin with 0x01 byte
• CONJ-1254 - Corrected DatabaseMetadata.getTypeInfo() returning incorrect values for AUTO_INCREMENT, FIXED_PREC_SCALE, and CASE_SENSITIVE fields
• CONJ-1255 - Fixed getString method on BIT(1) fields to properly honor transformedBitIsBoolean configuration
• CONJ-1259 - Enhanced metadata compatibility with MariaDB version 12.0
• CONJ-1260 - Improved performance of DatabaseMetaData.getExportedKeys method
• CONJ-1256 - Fixed issue to ensure correct catalog name is returned

v3.5.3

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1226 Fixed issue where dates containing zero day or month resulted in a DateTimeException
• CONJ-1232 Resolved timestamp string representation incompatibility between versions 2.7 and 3.x
  • see new option oldModeNoPrecisionTimestamp
• CONJ-1226 Fixed incorrect values returned by ResultSet.getColumnType() for unsigned values
• CONJ-1241 Corrected regression in 3.x affecting column metadata for unsigned types
• CONJ-1243 Fixed CallableStatement.getParameterMetadata() returning wrong java.sql.Type for boolean values
• CONJ-1236 Prevented NPE (Null Pointer Exception) after reconnection failure in high availability configurations
• CONJ-1237 Fixed issue with incorrect statements.isClosed value after closing connection
• CONJ-1239 Disabled BULK operations when no parameters are present
• CONJ-1240 Fixed connectivity issues with databases that only accept TLSv1.3
• CONJ-1235 Modified redirection option to enable by default only when SSL is enabled

v3.5.2

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1216 Resolved a performance issue that occurred when batch processing on MySQL and older MariaDB (pre-10.2) servers
• CONJ-1218 Incorrect behavior where XA connections are closed when regular connections are terminated - this is against specifications
• CONJ-1217 The trustCertificateKeyStorePassword alias parameter isn’t taken into account
• CONJ-1221 DatabaseMetadata.getTypeInfo() is missing the data types UUID and VECTOR
• CONJ-1225 System throws an exception prematurely without checking all available connections
• CONJ-1228 result-set.getObject() on BLOB type returns Blob in place of byte[]
• CONJ-660 new disconnectOnExpiredPasswords connection option that controls client behavior when connecting with an expired password.
  When set to true (default), the client disconnects if it detects an expired password.
  When false, the client maintains the connection and allows setting a new password.
• CONJ-1229 Permit executeQuery commands to not return a result-set

v3.5.1

Compare Source

Full Changelog

Key Enhancements

• CONJ-1333 - Add maxAllowedPacket connection option (send/receive limit)
• CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)
• CONJ-1330 - add infer test to CI

Issues Resolved

• CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
• CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is
  attacker-controlled (report by Qing Xu)
• CONJ-1307 - Connection.setReadOnly(true) still allows DML statements to execute
• CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
• CONJ-1327 - Align SSL hostname verification with TLS libraries (thanks to jmestwa-coder)
• CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to
  jmestwa-coder)
• CONJ-1331 - trustStore-configured TLS connections defer certificate-chain/identity validation instead of validating
  up front (thanks to jmestwa-coder)
• CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to
  jmestwa-coder)
• CONJ-1341 - MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own
  password is supplied (report by fg0x0)
• CONJ-1328 - restrictedAuth allowlist is matched with substring contains() instead of equality (thanks to
  jmestwa-coder)
• CONJ-1338 - Validate length-encoded integers fit a non-negative int before use as a length (report by fg0x0)
• CONJ-1336 - CONJ-1282 regression: TLS connection fails when JDBC hostname is an absolute FQDN ending with a trailing
  dot (report by Shaswata, thanks to Pepo48 for PR)
• CONJ-1335 - getGeneratedKeys() throws "integer overflow" after a batch insert when the auto-increment value exceeds
  Integer.MAX_VALUE, and returns bulk generated keys out of batch order

v3.5.0

Compare Source

Full Changelog

Notable changes

* CONJ-1193 Parsec authentication implementation

• CONJ-1183 permit setting specific truststore

Bugs Fixed

• CONJ-1202 Session variable setting must be executed last
• CONJ-1201 incorrect default behavior for forceConnectionTimeZoneToSession
• CONJ-1200 Batch import fails with exception "Unknown command"
• CONJ-1199 option connectionCollation addition in order to force collation
• CONJ-1187 Use different exception type for connection timeouts

v3.4.4

Compare Source

Full Changelog

Notable Changes

• CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)

Bugs Fixed

• CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
• CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is
  attacker-controlled (report by Qing Xu)
• CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
• CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to
  jmestwa-coder)
• CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to
  jmestwa-coder)
• CONJ-1341 - MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own
  password is supplied (report by fg0x0)
• CONJ-1328 - restrictedAuth allowlist is matched with substring contains() instead of equality (thanks to
  jmestwa-coder)

v3.4.3

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1315 - cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if Mitm (report by tonghuaroot)
• CONJ-1316 - pin Locale.ROOT on locale-sensitive call sites and date/time/Duration text formatting (fixes
  locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)
• CONJ-1259 - DatabaseMetaData read-only detection: handle MariaDB 12.0 @@​read_only returning ON/OFF
  instead of 1/0
• CONJ-1317 - ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)
• CONJ-1320 - PAM (dialog) authentication now requires a secure connection (TLS or unix socket), like mysql_clear_password (report by fg0x0)
• CONJ-1319 - use constant-time comparison when validating the server certificate fingerprint (thanks to jmestwa-coder)
• CONJ-1322 - match local infile filename case-sensitively (thanks to jmestwa-coder)
• CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)
• CONJ-1318 - allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server (thanks to tharavel)

v3.4.2: MariaDB Connector/Java 3.4.2

Compare Source

3.4.2 (Mar 2025)

Full Changelog

Bugs Fixed

bug fix report from 3.3.4

• CONJ-1237 wrong statements.isClosed value after closing connection
• CONJ-1236 ensure not having NPE after reconnection fail for high availability configurations
• CONJ-1239 disable BULK use when there isn't any parameter

v3.4.1

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1181 Ensure Prepare cache use schema
• CONJ-1178 DatabaseMetaData.getImportedKeys return different PK_NAME value than getExportedKeys.
• CONJ-1180 Correct DatabaseMeta.getExportedKeys() performances
• CONJ-1185 Android app compatibility, regex CANON_EQ flag not supported
• CONJ-1188 database meta getSQLKeywords listing all reserved key word, not restricted keywords only
• CONJ-1189 implementation of pinGlobalTxToPhysicalConnection for XA Connection
• CONJ-1190 Adding MySQL option 'databaseTerm' as alias for useCatalogTerm for compatibility
• CONJ-1191 slow metadata getImportedKeys when not having database set
• CONJ-685 permit setting sslMode per host
• CONJ-686 Allow mixing TCP and socket hosts in failover configuration
• CONJ-1068 ResultSetMetaData.getColumnTypeName() returns VARCHAR instead of TINYTEXT
• CONJ-1182 missing XA_RBTIMEOUT,XA_RBTIMEOUT and XA_RBDEADLOCK error mapping

v3.4.0

Compare Source

Full Changelog

Notable Changes

• CONJ-981 Add support for connection redirection
• CONJ-1087 handle mariadb-11.1+ transaction_isolation
• CONJ-1100 Be able to filter system tables and views
• CONJ-1105 TLS certificate validation without needs to provide certificate client side
• CONJ-1171 timezone support missing feature
• CONJ-1173 Bulk implementation returning individual results for MariaDB 11.5
• CONJ-1154 avoid unnecessary set transaction isolation queries

Bugs Fixed

• CONJ-1103 Connector/J Version 3 Does Not Respect "nullCatalogMeansCurrent" Property
• CONJ-1161 Database connection failing on android
• CONJ-1107 MariaDB Connector 3 no longer supports query timeout with MySQL
• CONJ-1125 Inconsistency in Handling PreparedStatement.executeQuery() between MariaDB and MySQL Connectors
• CONJ-1156 getTables should be ordered as expected
• CONJ-1163 jdbcCompliantTruncation Does Not Appear To Be Working
• CONJ-1164 Variable initialization ahead of LOAD DATA INFILE not possible by validateLocalFileName pattern
• CONJ-1168 useBulkStmts compatibility value with pre 3.2 version
• CONJ-1169 improve Client prepared statement setMaxRows implementation
• CONJ-1170 OFFSET missing from getSQLKeywords
• CONJ-1158 DatabaseMetaData#getFunctions's result not property ordered
• CONJ-1159 DatabaseMetaData#getClientInfoProperties not ordered correctly
• CONJ-1166 Implement connection properties fallbackToSystemKeyStore and fallbackToSystemTrustStore
• CONJ-1174 ConnectorJ gives precision of 20 for signed bigint

v3.3.6

Compare Source

Full Changelog

Notable Changes

• CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)

Bugs Fixed

• CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
• CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is
  attacker-controlled (report by Qing Xu)
• CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
• CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to
  jmestwa-coder)
• CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to
  jmestwa-coder)
• CONJ-1341 - MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own
  password is supplied (report by fg0x0)
• CONJ-1328 - restrictedAuth allowlist is matched with substring contains() instead of equality (thanks to
  jmestwa-coder)

v3.3.5

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1315 - cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if Mitm (report by tonghuaroot)
• CONJ-1316 - pin Locale.ROOT on locale-sensitive call sites and date/time/Duration text formatting (fixes
  locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)
• CONJ-1259 - DatabaseMetaData read-only detection: handle MariaDB 12.0 @@​read_only returning ON/OFF
  instead of 1/0
• CONJ-1317 - ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)
• CONJ-1322 - match local infile filename case-sensitively (thanks to jmestwa-coder)
• CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)
• CONJ-1318 - allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server (thanks to tharavel)

v3.3.4: MariaDB Connector/Java 3.3.4

Compare Source

3.3.4 (Mar 2025)

Full Changelog

Bugs Fixed

• CONJ-1237 wrong statements.isClosed value after closing connection
• CONJ-1236 ensure not having NPE after reconnection fail for high availability configurations
• CONJ-1239 disable BULK use when there isn't any parameter

v3.3.3

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1050 regression in 3.x.y: nonparameterized batch "INSERT INTO products( name ) VALUES ( 'aaaa' )" fails
• CONJ-1150 Error using PrepareStatement.setURL with null url
• CONJ-1152 Improve message when reaching socket timeout during connection initial commands

v3.3.2

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1117 new option returnMultiValuesGeneratedIds for connector 2.x compatibility, so getGeneratedKeys() return all
  ids of multi-value inserts
• CONJ-1140 regression caussing ClassCastException on DatabaseMetaData when use with option defaultFetchSize set
• CONJ-1129 Metadata.getPrimaryKeys table comparison using like in place of strict equality
• CONJ-1130 ensuring batch parameter are cleared after SQL Failure
• CONJ-1131 NullPointerException when Calling getGeneratedKeys() after an SQL Failure
• CONJ-1132 Ensuring reseting result for getUpdateCount() after an SQL Failure
• CONJ-1135 ensuring BULK command not used when using INSERT ON DUPLICATE KEY UPDATE in order to always have unique
  affected rows by default
• CONJ-1136 wrong decoding for Resultset.getByte() results for binary varchar fields
• CONJ-1137 ensuring never having NPE in OkPacket when setting auto commit
• CONJ-1138 Inconsistency in Behavior of PreparedStatement After closeOnCompletion() Between MariaDB and MySQL
  Connectors
• CONJ-1049 Metadata getTableTypes result was not ordered by TABLE_TYPE

v3.3.1

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1120 java 8 compatibility error in 3.3.0
• CONJ-1123 missing OSGi javax.crypto dependency
• CONJ-1124 ensure not having OOM when setting huge fetch size
• CONJ-1109 Regression in clearBatch() for parameterized statements
• CONJ-1126 setting fetchSize directly on a ResultSet object does not reflect the expected change
• CONJ-1127 Statement.getResultSetType () failed to change the result set type
• CONJ-1128 Setting Negative Fetch Size on ResultSet Without Throwing Error

v3.3.0

Compare Source

Full Changelog

Notable Changes

• CONJ-1115 Make connector become more virtual-thread friendly
• CONJ-1108 Database metadata listing TEMPORARY tables/sequences
• CONJ-1113 update ed25519 to recent version
• CONJ-1116 Avoid unnecessary synchronization on calendar when no calendar parameter

Bugs Fixed

• CONJ-1102 BatchUpdateException.getUpdateCounts() returns SUCCESS_NO_INFO but expects EXECUTE_FAILED

v3.2.0

Compare Source

Full Changelog

Notable Changes

• CONJ-920 Java batched statements with optimistic locking failing. the option useBulkStmts is now disable by default,
  a new option useBulkStmtsForInserts is enabled by default, permitting using bulk for INSERT commands only. This
  permits optimistic behavior working by default.
• CONJ-1084 When using maxscale 23.08.0+, and a maxscale node fails, connector will now priorize reconnection to the
  maxscale node having less connection, to ensure repartition after failover
• CONJ-1088 Implement databaseTerm option for mysql compatibility
• CONJ-1096 adding option useLocalSessionState to permit avoiding queries when application only use JDBC methods.

Bugs Fixed

• CONJ-1075 LOAD DATA INFILE is broken on windows
• CONJ-1079 getGeneratedKeys after batch will not return all generated id's if first batch command return no generated
  id.
• CONJ-1080 mariadb Java connector sslMode=verify-ca complaining unable to find trust certificate.
• CONJ-1082 Multiple session system variables parsing fails
• CONJ-1083 Using /client prepare/ prefix to force client side prepared statement
• CONJ-1091 can't make a connection when the Read Replica DB is in a hang state when SocketTimeout=0 set
• CONJ-1092 ensure respecting server collation
• CONJ-1094 Missing mariadb/mysql collation

v3.1.4

Compare Source

Full Changelog

• CONJ-1065 wrong Resultset.wasNull() for zero-date timestamps
• CONJ-1070 getBlob on TEXT columns throw Exception
• CONJ-1071 Error response during Bulk execution might result in connection wrong state
• CONJ-1067 When some numeric data types are set to UNSIGNED, ResultSetMetaData.getColumnTypeName() does not return
  UNSIGNED

v3.1.3

Compare Source

Full Changelog

• CONJ-1054 Threadsafety issue when using CredentialPlugin in v3.x
• CONJ-1056 JDBC connector reads incorrect data from unix socket when the text is too large
• CONJ-1057 Wrong decoding of binary time with value "00:00:00"
• CONJ-1058 JDBC 4.3 org.mariadb.jdbc.Statement enquote* methods implementation @​peterhalicky
• CONJ-1060 BIT default metadata doesn't take care of transformedBitIsBoolean option
• report 2.7.9 bug fixes CONJ-1062 and CONJ-1063

v3.1.2

Compare Source

Full Changelog

• CONJ-1040 possible ConcurrentModificationException when connecting
• CONJ-1041 possible ArrayIndexOutOfBoundsException

v3.1.1

Full Changelog

• 3.0.10 bug fix:
  - CONJ-1023 Connector/J doesn't set SSL cap bit in Handshake Response Packet
  - CONJ-1026 timezone=auto option failure on non-fixed-offset zone machine
  - CONJ-1032 Compatibility for deprecated arguments is case sensitive now
• CONJ-1036 org.mariadb.jdbc.client.socket.impl.PacketWriter.writeAscii() broken in 3.1.0

v3.1.0

Full Changelog

Notable Changes

• CONJ-899 Support UUID Object
• CONJ-916 when a failover occurs, log replayed transaction
• CONJ-917 deprecated options use must be logged
• CONJ-992 load balance distribution
• CONJ-1008 default value for socket option useReadAheadInput
• CONJ-1009 improve performance reading big result-set
• CONJ-1014 avoid creating array when receiving server packet
• CONJ-1015 pipelining sending multiple packet to socket

Bugs Fixed

• CONJ-1020 java 11 option setting ignored

v3.0.11

Compare Source

Full Changelog

• CONJ-1089 correcting 3.0.10 incompatibility with in java 8

v3.0.10

Compare Source

Full Changelog

• CONJ-1023 Connector/J doesn't set SSL cap bit in Handshake Response Packet
• CONJ-1026 timezone=auto option failure on non-fixed-offset zone machine
• CONJ-1032 Compatibility for deprecated arguments is case sensitive now

v3.0.9

Compare Source

Full Changelog

• 2.7.7 merge
• CONJ-1012 stored procedure register output parameter as null if set before registerOutParameter command
• CONJ-1017 Calendar possible race condition, cause wrong timestamp setting

v3.0.8

Compare Source

Full Changelog

Notable Changes

• small performance improvement
  * [CONJ-1010] improve client side prepared parameter parameter substitution

Bugs Fixed

• [CONJ-997] regression in 3.x when using option galeraAllowedState resulting in an IndexOutOfBoundsException
• [CONJ-1002] 2nd failover reconnection ignores default database/schema setting when not set by connection string
• [CONJ-1003] replication configuration always use 1st replica on 3.0
• [CONJ-996] BatchUpdateException doesn't inherited the SQLState & vendorCode from the cause SQL exception
• [CONJ-1006] disabling cachePrepStmts with useServerPrepStmts might result in Exception
• [CONJ-1007] Socket file descriptors are leaked after connecting with unix socket if DB is not up running
• [CONJ-1010] improve client side prepare statement parameter substitution
• [CONJ-999] setting createDatabaseIfNotExist option use on read-only server will refuse connection on 3.0

v3.0.7

Compare Source

Full Changelog

• [CONJ-993] SQLDataException reading DATA_TYPE on DatabaseMetaData.getTypeInfo() after 3.0.4
• [CONJ-986] Permit specific Statement.setLocalInfileInputStream for compatibility
• [CONJ-987] Version 3.0.0 returns String for VARBINARY instead of byte[] as 2.7.6 did
• [CONJ-989] Binary column read as String
• [CONJ-990] Setting timezone=UTC result in SQLSyntaxErrorException
• [CONJ-991] Regression: binary(16) is returned as String by getObject()
• [CONJ-994] Version 3.x rejects previously accepted boolean string parameter for BOOLEAN field

v3.0.6

Compare Source

Full Changelog

• [CONJ-953] PreparedStatement.getGeneratedKeys() returns rows when no keys are generated in insert
• [CONJ-975] ArrayIndexOutOfBoundsException when attempt to getTime() from ResultSet
• [CONJ-976] Improve use of pipelining when allowLocalInfile is enabled
• [CONJ-979] ResultSet.getObject() returns Byte instead of Boolean for tinyint(1)
• [CONJ-980] Permit setObject with java.util.Date parameter
• [CONJ-984] Permit executing initial command with new option initSql
• [CONJ-985] ResultSet.getObject() returns ByteSet instead of Byte[] for BIT

v3.0.5

Compare Source

Full Changelog

• [CONJ-956] ArrayIndexOutOfBoundsException when alias length > 250
• [CONJ-947] value after milliseconds precision lost when timestamp is encoded
• [CONJ-949] keep clientCertificateKeyStoreUrl and clientCertificateKeyStoreUrl aliases
• [CONJ-950] metadata TEXT/TINYTEXT/MEDIUMTEXT/LONGTEXT wrong column type and length
• [CONJ-954] java.time.OffsetDateTime not supported
• [CONJ-958] compatibility with 2.7: now loop through hosts when multiple host without failover mode
• [CONJ-959] java.time.Instant not supported
• [CONJ-961] LOAD DATA LOCAL INFILE was disable by default
• [CONJ-962] resultset for negative TIME value return erronous LocalDateTime values
• [CONJ-965] better error message when not loading serverSslCert file
• [CONJ-967] clearParameters() breaks validity when using output parameters in stored procedures
• [CONJ-969] org.mariadb.jdbc.ClientPreparedStatement is missing a toString implementation, useful for logging

v3.0.4

Compare Source

Full Changelog

• [CONJ-915] javadoc addition
• [CONJ-921] DatabaseMetadata#getTables with null value for tableNamePattern throws Syntax error
• [CONJ-922] DECIMAL overflow for long/int/short not throwing exception
• [CONJ-924] NULL column type might result in java.lang.IllegalArgumentException: Unexpected datatype NULL
• [CONJ-926] Client restrict authentication to 'mysql_native_password,client_ed25519,auth_gssapi_client' if
  restrictedAuth parameter is not set
• [CONJ-924] NULL column test correction
• [CONJ-923] correctly return 64 bits generated id / updated rows
• [CONJ-933] load-balancing failover doesn't timeout
• [CONJ-935] Connection.getMetaData() returns MariaDbClob instead of String
• [CONJ-937] metadata getColumnTypeName wrong return type
• [CONJ-934] MariaDbDataSource is sensitive to the order of setting of username and password
• [CONJ-932] Login packet now use recommended length encoded value for connection attributes
• [CONJ-925] missing OSGI infos
• [CONJ-945] ensure retry is limited by retriesAllDown
• [CONJ-940] Permit updating rows when not having primary info on metadata (Xpand)
• [CONJ-939] add Xpand testing

v3.0.3

Compare Source

Full Changelog

• [CONJ-908] correct Connection.prepareStatement(String sql, int[] columnIndexes/String[] columnNames) to return
  generated keys
• [CONJ-909] adding createDatabaseIfNotExist option for 2.x compatibility
• [CONJ-910] permit jdbc:mysql scheme when connection string contains "permitMysqlScheme" for compatibility
• [CONJ-913] Avoid executing additional command on connection for faster connection creation
• [CONJ-912] remove security manager code (JEP 411)
• [CONJ-911] enable keep-alive by default
• failover improvement. some specific commands not in transaction are considered to be replayed in case of failover,
  like PING, PREPARE, ROLLBACK, ...
• CONJ-705 parameter metadata get parameter count even when query cannot be prepared
• prepareStatement.addBatch must initialize with previous set
• Connection.prepareStatement(String sql, int[] columnIndexes/String[] columnNames) must return generated keys
• setting "transaction read only" only for replica
• keeping option interactiveClient for compatibility
• adding option transactionReplaySize to control redo cache size
• only set skip metadata connection flag when using binary protocol
• permit getString on a binary object
• compression correction for multi-packet
• COM_RESET_CONNECTION expect a response (ERR_Packet or OK_Packet)
• [CONJ-901] ArrayIndexOutOfBoundsException on StandardReadableByteBuf.readByte error

v2.7.15

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
• CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is
  attacker-controlled (report by Qing Xu)
• CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
• CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)
• CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to
  jmestwa-coder)

v2.7.14

Compare Source

Full Changelog

Bugs Fixed

• CONJ-1315 - cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if Mitm (report by tonghuaroot)
• CONJ-1316 - pin Locale.ROOT on locale-sensitive call sites (fixes locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)
• CONJ-1317 - ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)
• CONJ-1322 - match local infile filename case-sensitively (thanks to jmestwa-coder)
• create gssapi jaas config temp file with owner-only permissions (thanks to jmestwa-coder)
• encode caching_sha2 clear password as UTF-8 (thanks to jmestwa-coder)
• call inflater.end() in finally in CompressInputStream (thanks to jmestwa-coder)
• CONJ-1318 - allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server (thanks to tharavel)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.