search

HaugrNet / eds

Cryptographic Web Share
https://haugr.net/
Apache License 2.0
6 stars 0 forks source link

Bump h2 from 1.4.200 to 2.0.206 #76

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps h2 from 1.4.200 to 2.0.206.

Release notes

Sourced from h2's releases.

Version 2.0.206

Critical security issue with H2 console is fixed.

Also important changes included:

Version 2.0.204

Multilple regression fixes discovered after 2.0.202 release,

There are no persistence changes between 2.0.202 and 2.0.204, so jar file swap is enough, if database had been upgraded to 2.0.202 already, otherwise please read the message below:

Between version 1.4.200 and version 2.0.202 there have been considerable changes, such that a simple update is not possible. The official way to upgrade is to do a BACKUP of your existing database USING YOUR CURRENT VERSION OF H2. Then create a fresh database USING THE NEW VERSION OF H2, then perform a SCRIPT to load your data.

Version 2.0.202

Besides many dozens of fixed bugs, performance improvements, more adherence to a standard SQL syntax and type system, there are

Some new features:

  • Complete re-work of INFORMATION_SCHEMA to be more in-line with the standard
  • Support for new types: ARRAY, ROW, JAVA_OBJECT
  • Numerous bit, string, array and system functions implemented
  • Standard-based access to generated keys
  • JDBC 4.2 compliance
  • Support for JDK 7 is dropped
  • PageStore is discontinued

MVStore changes:

  • Descending MVMap and TransactionMap cursor
  • Disk space reclamation algorithm improvements

Between version 1.4.200 and version 2.0.202 there have been considerable changes, such that a simple update is not possible. The official way to upgrade is to do a BACKUP of your existing database USING YOUR CURRENT VERSION OF H2. Then create a fresh database USING THE NEW VERSION OF H2, then perform a SCRIPT to load your data.

Commits
  • 3d957a0 Release 2.0.206 preparation
  • 2b6e303 Update changelog
  • b24aa46 Check URL scheme
  • 4a2e677 Get data types directly from linked tables from H2
  • 69aff24 Fix ValueVarcharIgnoreCase.equals()
  • 0ebf142 Fix group-sorted optimization for data types with different equal values
  • 8aca5f4 Correct Date and Time part in tutorial.html
  • 4bfd6f0 Add support of H2 2.0+ to source.html and sourceError.html
  • 927c830 Update copyright years
  • abac6c8 Next development version
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/HaugrNet/cws/network/alerts).
knjensen commented 2 years ago

H2 is only used for testing, and as such the risk from using it is low. However, upgrading clashes with a Hibernate bug (https://hibernate.atlassian.net/browse/HHH-14985) causing tests to completely fail. The upgrade is therefore postponed until the Hibernate bug has been resolved.

dependabot[bot] commented 2 years ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.