#322 Upgrade dependencies (#323)

* #322 Upgrade dependencies

* Update references

* Downgrade protobuf

* Run PK fix

* Fix db version

* Update release date

* Upgrade DB versions

.project-keeper.yml

@@ -18,8 +18,8 @@ build:
   runnerOs: ubuntu-20.04
   freeDiskSpace: true
   exasolDbVersions:
-    - "8.25.0"
-    - "7.1.26"
+    - "8.26.0" # 8.29.1 not yet supported by exasol-testcontainers, see https://github.com/exasol/exasol-testcontainers/issues/258
+    - "7.1.29"
   workflows:
     - name: ci-build.yml
       stepCustomizations:

doc/changes/changes_2.8.2.md

@@ -0,0 +1,49 @@
+# Cloud Storage Extension 2.8.2, released 2024-07-30
+
+Code name: Fix CVE-2024-25638 in `dnsjava:dnsjava:jar:3.4.0:compile`
+
+## Summary
+
+This release fixes vulnerability CVE-2024-25638 in `dnsjava:dnsjava:jar:3.4.0:compile`.
+
+## Security
+
+* #322: Fixed vulnerability CVE-2024-25638 in `dnsjava:dnsjava:jar:3.4.0:compile`
+
+## Dependency Updates
+
+### Cloud Storage Extension
+
+#### Compile Dependency Updates
+
+* Updated `com.exasol:parquet-io-java:2.0.8` to `2.0.10`
+* Updated `com.github.mwiede:jsch:0.2.17` to `0.2.18`
+* Updated `com.google.guava:guava:33.2.0-jre` to `33.2.1-jre`
+* Updated `com.google.protobuf:protobuf-java:3.25.1` to `3.25.4`
+* Updated `com.nimbusds:nimbus-jose-jwt:9.39.1` to `9.40`
+* Added `dnsjava:dnsjava:3.6.1`
+* Updated `io.dropwizard.metrics:metrics-core:4.2.25` to `4.2.26`
+* Updated `io.grpc:grpc-netty:1.63.0` to `1.65.1`
+* Updated `io.netty:netty-codec-http2:4.1.109.Final` to `4.1.112.Final`
+* Updated `org.apache.commons:commons-compress:1.26.1` to `1.26.2`
+* Updated `org.apache.commons:commons-configuration2:2.10.1` to `2.11.0`
+* Updated `org.apache.commons:commons-lang3:3.14.0` to `3.15.0`
+* Updated `org.apache.orc:orc-core:1.9.2` to `1.9.4`
+* Updated `org.glassfish.jersey.containers:jersey-container-servlet-core:2.41` to `2.43`
+* Updated `org.glassfish.jersey.containers:jersey-container-servlet:2.41` to `2.43`
+* Updated `org.glassfish.jersey.core:jersey-client:2.41` to `2.43`
+* Updated `org.glassfish.jersey.core:jersey-common:2.41` to `2.43`
+* Updated `org.glassfish.jersey.core:jersey-server:2.41` to `2.43`
+* Updated `org.glassfish.jersey.inject:jersey-hk2:2.41` to `2.43`
+* Updated `org.jetbrains.kotlin:kotlin-stdlib:1.9.24` to `1.9.25`
+
+#### Test Dependency Updates
+
+* Updated `com.dimafeng:testcontainers-scala-scalatest_2.13:0.41.3` to `0.41.4`
+* Updated `com.exasol:extension-manager-integration-test-java:0.5.11` to `0.5.12`
+* Updated `org.junit.jupiter:junit-jupiter-engine:5.10.2` to `5.10.3`
+* Updated `org.testcontainers:localstack:1.19.8` to `1.20.0`
+
+#### Plugin Dependency Updates
+
+* Updated `com.exasol:project-keeper-maven-plugin:4.3.2` to `4.3.3`

doc/user_guide/user_guide.md

@@ -150,7 +150,7 @@ downloaded jar file is the same as the checksum provided in the releases.
 To check the SHA256 result of the local jar, run the command:
 
 ```sh
-sha256sum exasol-cloud-storage-extension-2.8.1.jar
+sha256sum exasol-cloud-storage-extension-2.8.2.jar
 ```
 
 ### Building From Source
@@ -180,7 +180,7 @@ mvn clean package -DskipTests=true
 ```
 
 The assembled jar file should be located at
-`target/exasol-cloud-storage-extension-2.8.1.jar`.
+`target/exasol-cloud-storage-extension-2.8.2.jar`.
 
 ### Create an Exasol Bucket
 
@@ -202,7 +202,7 @@ for the HTTP protocol.
 Upload the jar file using curl command:
 
 ```sh
-curl -X PUT -T exasol-cloud-storage-extension-2.8.1.jar \
+curl -X PUT -T exasol-cloud-storage-extension-2.8.2.jar \
   http://w:<WRITE_PASSWORD>@exasol.datanode.domain.com:2580/<BUCKET>/
 ```
 
@@ -234,7 +234,7 @@ OPEN SCHEMA CLOUD_STORAGE_EXTENSION;
 
 CREATE OR REPLACE JAVA SET SCRIPT IMPORT_PATH(...) EMITS (...) AS
   %scriptclass com.exasol.cloudetl.scriptclasses.FilesImportQueryGenerator;
-  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.1.jar;
+  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.2.jar;
 /
 
 CREATE OR REPLACE JAVA SCALAR SCRIPT IMPORT_METADATA(...) EMITS (
@@ -244,12 +244,12 @@ CREATE OR REPLACE JAVA SCALAR SCRIPT IMPORT_METADATA(...) EMITS (
   end_index DECIMAL(36, 0)
 ) AS
   %scriptclass com.exasol.cloudetl.scriptclasses.FilesMetadataReader;
-  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.1.jar;
+  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.2.jar;
 /
 
 CREATE OR REPLACE JAVA SET SCRIPT IMPORT_FILES(...) EMITS (...) AS
   %scriptclass com.exasol.cloudetl.scriptclasses.FilesDataImporter;
-  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.1.jar;
+  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.2.jar;
 /
 ```
 
@@ -268,12 +268,12 @@ OPEN SCHEMA CLOUD_STORAGE_EXTENSION;
 
 CREATE OR REPLACE JAVA SET SCRIPT EXPORT_PATH(...) EMITS (...) AS
   %scriptclass com.exasol.cloudetl.scriptclasses.TableExportQueryGenerator;
-  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.1.jar;
+  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.2.jar;
 /
 
 CREATE OR REPLACE JAVA SET SCRIPT EXPORT_TABLE(...) EMITS (ROWS_AFFECTED INT) AS
   %scriptclass com.exasol.cloudetl.scriptclasses.TableDataExporter;
-  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.1.jar;
+  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.2.jar;
 /
 ```
 
@@ -407,13 +407,13 @@ CREATE OR REPLACE JAVA SCALAR SCRIPT IMPORT_METADATA(...) EMITS (
 ) AS
   %jvmoption -DHTTPS_PROXY=http://username:password@10.10.1.10:1180
   %scriptclass com.exasol.cloudetl.scriptclasses.FilesMetadataReader;
-  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.1.jar;
+  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.2.jar;
 /
 
 CREATE OR REPLACE JAVA SET SCRIPT IMPORT_FILES(...) EMITS (...) AS
   %jvmoption -DHTTPS_PROXY=http://username:password@10.10.1.10:1180
   %scriptclass com.exasol.cloudetl.scriptclasses.FilesDataImporter;
-  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.1.jar;
+  %jar /buckets/bfsdefault/<BUCKET>/exasol-cloud-storage-extension-2.8.2.jar;
 /
 ```