#42 Fix CVE-2023-42503 in test dependency org.apache.commons:commons-compress

.gitattributes

@@ -3,9 +3,7 @@ dependencies.md                                                  linguist-genera
 doc/changes/changelog.md                                         linguist-generated=true
 .github/workflows/broken_links_checker.yml                       linguist-generated=true
 .github/workflows/ci-build-next-java.yml                         linguist-generated=true
-.github/workflows/ci-build.yml                                   linguist-generated=true
 .github/workflows/dependencies_check.yml                         linguist-generated=true
-.github/workflows/release_droid_prepare_original_checksum.yml    linguist-generated=true
 .github/workflows/release_droid_print_quick_checksum.yml         linguist-generated=true
 .github/workflows/release_droid_upload_github_release_assets.yml linguist-generated=true
 

.github/workflows/ci-build.yml

@@ -8,13 +8,13 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04 # UDFs fail with "VM error: Internal error: VM crashed" on ubuntu-latest
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Set up JDK 11 & 17
@@ -51,7 +51,7 @@ jobs:
               -DtrimStackTrace=false \
               -Dsonar.organization=exasol \
               -Dsonar.host.url=https://sonarcloud.io \
-              -Dsonar.login=$SONAR_TOKEN
+              -Dsonar.token=$SONAR_TOKEN
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/release_droid_prepare_original_checksum.yml

@@ -5,18 +5,18 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04 # UDFs fail with "VM error: Internal error: VM crashed" on ubuntu-latest
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Set up JDK 11
         uses: actions/setup-java@v3
         with:
-          distribution: 'temurin'
+          distribution: "temurin"
           java-version: 11
-          cache: 'maven'
+          cache: "maven"
       - name: Enable testcontainer reuse
         run: echo 'testcontainers.reuse.enable=true' > "$HOME/.testcontainers.properties"
       - name: Run tests and build with Maven
@@ -28,4 +28,4 @@ jobs:
         with:
           name: original_checksum
           retention-days: 5
-          path: original_checksum
+          path: original_checksum

.project-keeper.yml

@@ -6,6 +6,7 @@ sources:
       - udf_coverage
       - jar_artifact
 excludes:
-  - "E-PK-CORE-18: Outdated content: '.github/workflows/broken_links_checker.yml'"
+  - "E-PK-CORE-18: Outdated content: '.github/workflows/ci-build.yml'"
+  - "E-PK-CORE-18: Outdated content: '.github/workflows/release_droid_prepare_original_checksum.yml'"
 linkReplacements:
   - https://developers.google.com/protocol-buffers/protobuf-java/|https://developers.google.com/protocol-buffers

.vscode/settings.json

@@ -1,17 +1,21 @@
 {
-    "editor.formatOnSave": true,
-    "editor.codeActionsOnSave": {
-        "source.organizeImports": true,
-        "source.generate.finalModifiers": true,
-        "source.fixAll": true
-    },
-    "java.codeGeneration.useBlocks": true,
-    "java.saveActions.organizeImports": true,
-    "java.sources.organizeImports.starThreshold": 3,
-    "java.sources.organizeImports.staticStarThreshold": 3,
-    "java.test.config": {
-        "vmArgs": [
-            "-Djava.util.logging.config.file=src/test/resources/logging.properties"
-        ]
-    }
+  "editor.formatOnSave": true,
+  "editor.codeActionsOnSave": {
+    "source.organizeImports": true,
+    "source.generate.finalModifiers": true,
+    "source.fixAll": true
+  },
+  "java.codeGeneration.useBlocks": true,
+  "java.saveActions.organizeImports": true,
+  "java.sources.organizeImports.starThreshold": 3,
+  "java.sources.organizeImports.staticStarThreshold": 3,
+  "java.test.config": {
+    "vmArgs": [
+      "-Djava.util.logging.config.file=src/test/resources/logging.properties"
+    ]
+  },
+  "sonarlint.connectedMode.project": {
+    "connectionId": "exasol",
+    "projectKey": "com.exasol:mysql-virtual-schema"
+  }
 }

doc/changes/changes_4.1.3.md

@@ -1,24 +1,43 @@
-# Virtual Schema for MySQL 4.1.3, released 2023-??-??
+# Virtual Schema for MySQL 4.1.3, released 2023-09-29
 
-Code name: <TBD>
+Code name: Fix CVE-2023-42503 in test dependency
 
 ## Summary
 
-This releases improves documentation by considering SQL clients other than DbVisualizer.
+This release fixes CVE-2023-42503 in test dependency `org.apache.commons:commons-compress`. The release also improves documentation by considering SQL clients other than DbVisualizer.
 
-## Features
+## Security
+
+* #42: Fixed CVE-2023-42503 in test dependency `org.apache.commons:commons-compress`
+
+## Documentation
 
 * #36: Updated `CREATE ADAPTER SCRIPT` in User Guide
+* #40: Update User Guide on Registering the JDBC Driver
 
 ## Dependency Updates
 
+### Compile Dependency Updates
+
+* Updated `com.exasol:virtual-schema-common-jdbc:11.0.1` to `11.0.2`
+
 ### Test Dependency Updates
 
-* Updated `com.google.protobuf:protobuf-java:3.23.4` to `3.24.0`
+* Updated `com.exasol:exasol-testcontainers:6.6.1` to `6.6.2`
+* Updated `com.exasol:hamcrest-resultset-matcher:1.6.0` to `1.6.1`
+* Updated `com.exasol:test-db-builder-java:3.4.2` to `3.5.1`
+* Updated `com.exasol:udf-debugging-java:0.6.10` to `0.6.11`
+* Updated `com.exasol:virtual-schema-common-jdbc:11.0.1` to `11.0.2`
+* Updated `com.exasol:virtual-schema-shared-integration-tests:2.2.4` to `2.2.5`
+* Updated `com.google.protobuf:protobuf-java:3.23.4` to `3.24.3`
 * Updated `com.mysql:mysql-connector-j:8.0.33` to `8.1.0`
 * Updated `org.junit.jupiter:junit-jupiter:5.9.3` to `5.10.0`
-* Added `org.slf4j:slf4j-jdk14:2.0.6`
+* Updated `org.mockito:mockito-junit-jupiter:5.4.0` to `5.5.0`
+* Added `org.slf4j:slf4j-jdk14:2.0.9`
+* Updated `org.testcontainers:junit-jupiter:1.18.3` to `1.19.0`
+* Updated `org.testcontainers:mysql:1.18.3` to `1.19.0`
 
 ### Plugin Dependency Updates
 
-* Updated `com.exasol:project-keeper-maven-plugin:2.9.9` to `2.9.10`
+* Updated `com.exasol:project-keeper-maven-plugin:2.9.9` to `2.9.12`
+* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.3.0` to `3.4.0`