build(deps): bump org.mariadb.jdbc:mariadb-java-client from 3.5.0 to 4.0.0 by dependabot[bot] · Pull Request #2144 · tnb-software/TNB

dependabot · 2026-10-26T19:23:21Z

Bumps org.mariadb.jdbc:mariadb-java-client from 3.5.0 to 4.0.0.

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 4.0.0

4.0.0 (Oct 2026)

Full Changelog

4.0.0 includes every fix of 3.5.11, listed below.

Major Changes

CONJ-1361 - Java 17 is the minimum runtime, Java 8 and 11 are no longer supported (the 3.5 branch remains available for Java 8)

CONJ-1321 - TLS enabled by default: sslMode now defaults to verify-full

CONJ-1384 - AWS IAM authentication moves to the separate artifact mariadb-java-client-aws, the connector no longer depends on the AWS SDK; the plugin gains STS assume role support (CONJ-877, report by Adrian Samatan) and ships the RDS root certificates so that the default sslMode validates an RDS endpoint without configuration

CONJ-1306 - PreparedStatement.executeQuery() rejects statements that return no result set, as the JDBC specification requires; the permitNoResults option restores the former behavior (report by Christopher Schultz)

CONJ-651 - Stream LOB columns from the socket instead of loading them in memory (report by Ilya Zhavoronkov)

Key Enhancements

CONJ-1386 - New sslMode=allow: verify-full when the server announces TLS, unencrypted otherwise, for a mix of servers with and without TLS behind one connection string

CONJ-1347 - setSavepoint() throws in auto-commit mode instead of silently succeeding

CONJ-1262 - cachedCodecs option now defaults to true

CONJ-1370 - JNA dependency removed, Unix domain sockets use the JDK implementation

CONJ-1371 - useReadAheadInput option and ReadAheadBufferedStream removed

CONJ-1366 - First-class module-info.java (module org.mariadb.jdbc)

CONJ-1367 - Virtual threads: no carrier pinning in driver locks, verified by a JFR-based test

CONJ-1354 - GSSAPI authentication uses the native GSS-API where available

CONJ-1308 - Support MariaDB 12.3 XML data type

CONJ-1220 - Unix domain sockets on Windows, for SSH tunnels (report by DAIKOZ)

CONJ-1378 - Try every IP address a hostname resolves to when opening the socket

CONJ-1369 - Performance work on the Java 17 code base: packet reader and writer buffers, readNBytes, ranged Arrays.equals, no String.format on data paths

CONJ-1365 - Performance: VarHandle little-endian access in packet buffers

CONJ-1373 - Performance: JDK UTF-8 encoder for long strings in Writer.writeString / writeStringEscaped

CONJ-1375 - Performance: cache codec resolution for getObject(index, Class) and setObject

CONJ-1377 - Performance: faster client-side query parsing in ClientParser and NativeSql

CONJ-1368 - Build and test tooling: tests run against the built jar, GraalVM metadata refreshed, CI matrix on Java 17, 21 and 25

Issues Resolved

CONJ-1383 - Connection init rebuilds session_track_system_variables from @@global, discarding the session-level last_gtid set by MaxScale (report by Sawan Patel)

CONJ-1379 - Set an explicit session tracking list and guard character_set_results like character_set_client (report by fg0x0)

CONJ-1381 - Bound server-declared lengths by the packet before allocating and reading from them (report by fg0x0)

CONJ-1374 - Redirect URL password partially logged when containing '@'

CONJ-1372 - caching_sha2_password full authentication fails over a Unix socket when SSL is disabled (report by 工藤航)

... (truncated)

Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

4.0.0 (Oct 2026)

Full Changelog

4.0.0 includes every fix of 3.5.11, listed below.

Major Changes

CONJ-1361 - Java 17 is the minimum runtime, Java 8 and 11 are no longer supported (the 3.5 branch remains available for Java 8)

CONJ-1321 - TLS enabled by default: sslMode now defaults to verify-full

CONJ-1384 - AWS IAM authentication moves to the separate artifact mariadb-java-client-aws, the connector no longer depends on the AWS SDK; the plugin gains STS assume role support (CONJ-877, report by Adrian Samatan) and ships the RDS root certificates so that the default sslMode validates an RDS endpoint without configuration

CONJ-1306 - PreparedStatement.executeQuery() rejects statements that return no result set, as the JDBC specification requires; the permitNoResults option restores the former behavior (report by Christopher Schultz)

CONJ-651 - Stream LOB columns from the socket instead of loading them in memory (report by Ilya Zhavoronkov)

Key Enhancements

CONJ-1386 - New sslMode=allow: verify-full when the server announces TLS, unencrypted otherwise, for a mix of servers with and without TLS behind one connection string

CONJ-1347 - setSavepoint() throws in auto-commit mode instead of silently succeeding

CONJ-1262 - cachedCodecs option now defaults to true

CONJ-1370 - JNA dependency removed, Unix domain sockets use the JDK implementation

CONJ-1371 - useReadAheadInput option and ReadAheadBufferedStream removed

CONJ-1366 - First-class module-info.java (module org.mariadb.jdbc)

CONJ-1367 - Virtual threads: no carrier pinning in driver locks, verified by a JFR-based test

CONJ-1354 - GSSAPI authentication uses the native GSS-API where available

CONJ-1308 - Support MariaDB 12.3 XML data type

CONJ-1220 - Unix domain sockets on Windows, for SSH tunnels (report by DAIKOZ)

CONJ-1378 - Try every IP address a hostname resolves to when opening the socket

CONJ-1369 - Performance work on the Java 17 code base: packet reader and writer buffers, readNBytes, ranged Arrays.equals, no String.format on data paths

CONJ-1365 - Performance: VarHandle little-endian access in packet buffers

CONJ-1373 - Performance: JDK UTF-8 encoder for long strings in Writer.writeString / writeStringEscaped

CONJ-1375 - Performance: cache codec resolution for getObject(index, Class) and setObject

CONJ-1377 - Performance: faster client-side query parsing in ClientParser and NativeSql

CONJ-1368 - Build and test tooling: tests run against the built jar, GraalVM metadata refreshed, CI matrix on Java 17, 21 and 25

Issues Resolved

CONJ-1383 - Connection init rebuilds session_track_system_variables from @@global, discarding the session-level last_gtid set by MaxScale (report by Sawan Patel)

CONJ-1379 - Set an explicit session tracking list and guard character_set_results like character_set_client (report by fg0x0)

CONJ-1381 - Bound server-declared lengths by the packet before allocating and reading from them (report by fg0x0)

CONJ-1374 - Redirect URL password partially logged when containing '@'

CONJ-1372 - caching_sha2_password full authentication fails over a Unix socket when SSL is disabled (report by 工藤航)

CONJ-1360 - Incorrect dependency check in AwsIamCredentialPlugin (report by Dheeraj Nalluri)

... (truncated)

Commits

52164c4 Merge branch 'develop'
84b586b [CONJ-1387] LOAD DATA LOCAL INFILE file check must not match text inside iden...
c08af21 [CONJ-1384] Publish the AWS-IAM plugin to Maven Central like the connector
429f3c8 Merge branch 'develop'
87ac514 bump 4.0.0 version
85d4407 [misc] test stability improvement
39c575c [misc] correcting javadoc
9fe800b [misc] Infer analyses the sources as Java 17
aaf71e4 [misc] test stability improvement
874537d [misc] java warning correction
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) from 3.5.0 to 4.0.0. - [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases) - [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md) - [Commits](mariadb-corporation/mariadb-connector-j@3.5.0...4.0.0) --- updated-dependencies: - dependency-name: org.mariadb.jdbc:mariadb-java-client dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

tnb-bot · 2026-10-26T19:35:29Z

Dependency changes

system-x-all
system-x-mariadb

Diff

system-x-all

--- a/base/system-x-all
+++ b/head/system-x-all
@@ -30,7 +30,6 @@ The following files have been resolved:
    com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.18.11:compile�[36m -- module com.fasterxml.jackson.datatype.jsr310�[m
    com.fasterxml.woodstox:woodstox-core:jar:7.0.0:compile�[36m -- module com.ctc.wstx�[m
    com.frejo:force-rest-api:jar:0.0.44:compile�[36m -- module force.rest.api�[0;1;33m (auto)�[m
-   com.github.ben-manes.caffeine:caffeine:jar:2.9.3:compile�[36m -- module com.github.benmanes.caffeine�[0;1m [auto]�[m
    com.github.docker-java:docker-java-api:jar:3.7.0:compile�[36m -- module com.github.dockerjava.api�[0;1m [auto]�[m
    com.github.docker-java:docker-java-transport-zerodep:jar:3.7.0:compile�[36m -- module com.github.dockerjava.transport.zerodep�[0;1m [auto]�[m
    com.github.docker-java:docker-java-transport:jar:3.7.0:compile�[36m -- module com.github.dockerjava.transport�[0;1m [auto]�[m
@@ -45,7 +44,6 @@ The following files have been resolved:
    com.github.luben:zstd-jni:jar:1.5.7-17:runtime�[36m -- module com.github.luben.zstd_jni�[m
    com.github.spotbugs:spotbugs-annotations:jar:3.1.12:compile�[36m -- module com.github.spotbugs.annotations�[0;1m [auto]�[m
    com.github.stephenc.jcip:jcip-annotations:jar:1.0-1:compile�[36m -- module jcip.annotations�[0;1;33m (auto)�[m
-   com.github.waffle:waffle-jna:jar:3.3.0:compile�[36m -- module waffle.jna�[0;1m [auto]�[m
    com.google.android:annotations:jar:4.1.1.4:runtime�[36m -- module annotations�[0;1;33m (auto)�[m
    com.google.api-client:google-api-client:jar:2.9.0:compile�[36m -- module google.api.client�[0;1m [auto]�[m
    com.google.api.grpc:gapic-google-cloud-storage-v2:jar:2.75.0:compile�[36m -- module gapic.google.cloud.storage.v2�[0;1;33m (auto)�[m
@@ -388,7 +386,7 @@ The following files have been resolved:
    org.junit.jupiter:junit-jupiter-engine:jar:5.7.0:compile�[36m -- module org.junit.jupiter.engine�[m
    org.junit.platform:junit-platform-commons:jar:1.7.0:compile�[36m -- module org.junit.platform.commons�[m
    org.junit.platform:junit-platform-engine:jar:1.7.0:compile�[36m -- module org.junit.platform.engine�[m
-   org.mariadb.jdbc:mariadb-java-client:jar:3.5.0:compile�[36m -- module org.mariadb.jdbc�[m
+   org.mariadb.jdbc:mariadb-java-client:jar:4.0.0:compile�[36m -- module org.mariadb.jdbc�[m
    org.mongodb:bson-record-codec:jar:5.13.0:runtime�[36m -- module org.mongodb.bson.record.codec�[0;1m [auto]�[m
    org.mongodb:bson:jar:5.13.0:compile�[36m -- module org.mongodb.bson�[0;1m [auto]�[m
    org.mongodb:mongodb-driver-core:jar:5.13.0:compile�[36m -- module org.mongodb.driver.core�[0;1m [auto]�[m
@@ -406,7 +404,6 @@ The following files have been resolved:
    org.projectlombok:lombok:jar:1.18.32:compile�[36m -- module lombok�[m
    org.reactivestreams:reactive-streams:jar:1.0.3:compile�[36m -- module org.reactivestreams�[0;1m [auto]�[m
    org.rnorth.duct-tape:duct-tape:jar:1.0.8:compile�[36m -- module duct.tape�[0;1;33m (auto)�[m
-   org.slf4j:jcl-over-slf4j:jar:2.0.7:compile�[36m -- module org.apache.commons.logging�[m
    org.slf4j:slf4j-api:jar:2.0.18:compile�[36m -- module org.slf4j�[m
    org.snakeyaml:snakeyaml-engine:jar:2.10:compile�[36m -- module org.snakeyaml.engine.v2�[m
    org.springframework.vault:spring-vault-core:jar:4.1.0:compile�[36m -- module spring.vault.core�[0;1m [auto]�[m

system-x-mariadb

--- a/base/system-x-mariadb
+++ b/head/system-x-mariadb
@@ -6,14 +6,12 @@ The following files have been resolved:
    com.fasterxml.jackson.core:jackson-databind:jar:2.20.0:compile�[36m -- module com.fasterxml.jackson.databind�[m
    com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.20.0:compile�[36m -- module com.fasterxml.jackson.dataformat.yaml�[m
    com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.20.0:compile�[36m -- module com.fasterxml.jackson.datatype.jsr310�[m
-   com.github.ben-manes.caffeine:caffeine:jar:2.9.3:compile�[36m -- module com.github.benmanes.caffeine�[0;1m [auto]�[m
    com.github.docker-java:docker-java-api:jar:3.7.0:compile�[36m -- module com.github.dockerjava.api�[0;1m [auto]�[m
    com.github.docker-java:docker-java-transport-zerodep:jar:3.7.0:compile�[36m -- module com.github.dockerjava.transport.zerodep�[0;1m [auto]�[m
    com.github.docker-java:docker-java-transport:jar:3.7.0:compile�[36m -- module com.github.dockerjava.transport�[0;1m [auto]�[m
-   com.github.waffle:waffle-jna:jar:3.3.0:compile�[36m -- module waffle.jna�[0;1m [auto]�[m
    com.google.auto.service:auto-service-annotations:jar:1.1.0:compile�[36m -- module com.google.auto.service�[0;1m [auto]�[m
    com.google.code.findbugs:jsr305:jar:3.0.2:compile�[36m -- module jsr305�[0;1;33m (auto)�[m
-   com.google.errorprone:error_prone_annotations:jar:2.10.0:compile�[36m -- module com.google.errorprone.annotations�[0;1m [auto]�[m
+   com.google.errorprone:error_prone_annotations:jar:2.18.0:compile�[36m -- module com.google.errorprone.annotations�[0;1m [auto]�[m
    com.google.guava:failureaccess:jar:1.0.1:compile�[36m -- module failureaccess�[0;1;33m (auto)�[m
    com.google.guava:guava:jar:32.0.1-jre:compile�[36m -- module com.google.common�[0;1m [auto]�[m
    com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile�[36m -- module listenablefuture�[0;1;33m (auto)�[m
@@ -100,12 +98,11 @@ The following files have been resolved:
    io.vertx:vertx-web-client:jar:4.5.21:runtime�[36m -- module io.vertx.web.client�[0;1m [auto]�[m
    io.vertx:vertx-web-common:jar:4.5.21:runtime�[36m -- module io.vertx.web.common�[0;1m [auto]�[m
    jakarta.annotation:jakarta.annotation-api:jar:2.1.1:compile�[36m -- module jakarta.annotation�[m
-   net.java.dev.jna:jna-platform:jar:5.13.0:compile�[36m -- module com.sun.jna.platform�[0;1m [auto]�[m
-   net.java.dev.jna:jna:jar:5.13.0:compile�[36m -- module com.sun.jna�[0;1m [auto]�[m
+   net.java.dev.jna:jna:jar:5.18.1:compile�[36m -- module com.sun.jna�[0;1m [auto]�[m
    org.apache.commons:commons-compress:jar:1.28.0:compile�[36m -- module org.apache.commons.compress�[m
    org.apache.commons:commons-lang3:jar:3.11:compile�[36m -- module org.apache.commons.lang3�[0;1m [auto]�[m
    org.apiguardian:apiguardian-api:jar:1.1.0:compile�[36m -- module org.apiguardian.api�[m
-   org.checkerframework:checker-qual:jar:3.32.0:compile�[36m -- module org.checkerframework.checker.qual�[0;1m [auto]�[m
+   org.checkerframework:checker-qual:jar:3.33.0:compile�[36m -- module org.checkerframework.checker.qual�[0;1m [auto]�[m
    org.eclipse.jgit:org.eclipse.jgit:jar:5.13.3.202401111512-r:compile�[36m -- module org.eclipse.jgit�[0;1m [auto]�[m
    org.eclipse.microprofile.config:microprofile-config-api:jar:3.1.1:compile�[36m -- module org.eclipse.microprofile.config�[0;1m [auto]�[m
    org.jboss.logging:jboss-logging:jar:3.6.3.Final:compile�[36m -- module org.jboss.logging�[m
@@ -120,12 +117,11 @@ The following files have been resolved:
    org.junit.jupiter:junit-jupiter-engine:jar:5.7.0:compile�[36m -- module org.junit.jupiter.engine�[m
    org.junit.platform:junit-platform-commons:jar:1.7.0:compile�[36m -- module org.junit.platform.commons�[m
    org.junit.platform:junit-platform-engine:jar:1.7.0:compile�[36m -- module org.junit.platform.engine�[m
-   org.mariadb.jdbc:mariadb-java-client:jar:3.5.0:compile�[36m -- module org.mariadb.jdbc�[m
+   org.mariadb.jdbc:mariadb-java-client:jar:4.0.0:compile�[36m -- module org.mariadb.jdbc�[m
    org.opentest4j:opentest4j:jar:1.2.0:compile�[36m -- module org.opentest4j�[m
    org.ow2.asm:asm:jar:9.10.1:compile�[36m -- module org.objectweb.asm�[m
    org.rnorth.duct-tape:duct-tape:jar:1.0.8:compile�[36m -- module duct.tape�[0;1;33m (auto)�[m
-   org.slf4j:jcl-over-slf4j:jar:2.0.7:compile�[36m -- module org.apache.commons.logging�[m
-   org.slf4j:slf4j-api:jar:2.0.7:compile�[36m -- module org.slf4j�[m
+   org.slf4j:slf4j-api:jar:1.7.36:compile�[36m -- module org.slf4j�[0;1m [auto]�[m
    org.snakeyaml:snakeyaml-engine:jar:2.10:compile�[36m -- module org.snakeyaml.engine.v2�[m
    org.testcontainers:testcontainers:jar:2.0.2:compile�[36m -- module testcontainers�[0;1;33m (auto)�[m
    org.yaml:snakeyaml:jar:2.4:compile�[36m -- module org.yaml.snakeyaml�[m

GitHub Actions

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 26, 2026

Navigation Menu

Repository navigation

build(deps): bump org.mariadb.jdbc:mariadb-java-client from 3.5.0 to 4.0.0 - #2144

build(deps): bump org.mariadb.jdbc:mariadb-java-client from 3.5.0 to 4.0.0#2144
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/org.mariadb.jdbc-mariadb-java-client-4.0.0

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

tnb-bot Bot commented Oct 26, 2026

system-x-all

system-x-mariadb

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026

MariaDB Connector/Java 4.0.0

4.0.0 (Oct 2026)

Major Changes

Key Enhancements

Issues Resolved

4.0.0 (Oct 2026)

Major Changes

Key Enhancements

Issues Resolved

Uh oh!

tnb-bot Bot commented Oct 26, 2026

system-x-all

system-x-mariadb

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants