Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 3.3.0 to 4.0.1 in /legend-engine-xts-relationalStore/legend-engine-xt-relationalStore-dbExtension/legend-engine-xt-relationalStore-aurora/legend-engine-xt-relationalStore-aurora-execution by dependabot[bot] · Pull Request #4951 · finos/legend-engine

dependabot · 2026-07-17T18:41:52Z

Bumps software.amazon.jdbc:aws-advanced-jdbc-wrapper from 3.3.0 to 4.0.1.

Release notes

Sourced from software.amazon.jdbc:aws-advanced-jdbc-wrapper's releases.

AWS Advanced JDBC Wrapper - v4.0.1

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[4.0.1] - 2026-05-13

🐛 Fixed

Fixed EFM/EFM2 plugins throwing RuntimeException when used with non-RDS URLs such as localhost, custom hostnames, or IP addresses ([Issue #1896](aws/aws-advanced-jdbc-wrapper#1896), [PR #1907](aws/aws-advanced-jdbc-wrapper#1907)).

Fixed Driver.releaseResources() not shutting down internal background threads (connection pruning, event batching, cache cleanup), causing lingering threads in modular frameworks ([Issue #1878](aws/aws-advanced-jdbc-wrapper#1878), [PR #1906](aws/aws-advanced-jdbc-wrapper#1906)).

Fixed static executors not being recreatable after releaseResources(), causing silent task discards in subsequent test runs and failover scenarios ([PR #1914](aws/aws-advanced-jdbc-wrapper#1914)).

Fixed NPE in various classes ([PR #1898](aws/aws-advanced-jdbc-wrapper#1898)).

Added allowlist classes for CacheResultSet deserialization to prevent unsafe Java deserialization ([PR #1905](aws/aws-advanced-jdbc-wrapper#1905)).

Fixed PostgreSQL topology detection queries to ensure function calls are fully qualified (commit).

🦀 Changed

Added missing javadocs ([PR #1899](aws/aws-advanced-jdbc-wrapper#1899)).

AWS Advanced JDBC Wrapper - v4.0.0

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[4.0.0] - 2026-05-06

🦀 Breaking Changes

[!WARNING]
This breaking change only impacts customers implementing their own custom plugins. Otherwise no changes are required. 4.0 removes aliases from HostSpec and related APIs ([PR #1790](aws/aws-advanced-jdbc-wrapper#1790)).

Alias Removal

Removed aliases from HostSpec.

Removed PluginService.fillAliases(); use PluginService.identifyConnection() instead.

Changed PluginService.setAvailability() signature.

Added PluginService.setRoutedHostSpec() to record connection routing events and use it for the current connection info.

If you have custom plugins that use fillAliases() or rely on HostSpec aliases, please update them to use identifyConnection() and the new setRoutedHostSpec() method.

🪄 Added

Added KMS Encryption Plugin for encrypting/decrypting database credentials using AWS KMS ([PR #1772](aws/aws-advanced-jdbc-wrapper#1772), [PR #1894](aws/aws-advanced-jdbc-wrapper#1894)).

Added support for Global Write Forwarding in secondary region ([PR #1842](aws/aws-advanced-jdbc-wrapper#1842)).

Added verifyInitialConnectionRole property to verify the initial connection role matches the expected role ([PR #1811](aws/aws-advanced-jdbc-wrapper#1811)).

Added support for Jackson 3 in Secrets Manager plugin and Okta plugin ([PR #1803](aws/aws-advanced-jdbc-wrapper#1803)).

Added GPG keys verification to release workflow ([PR #1816](aws/aws-advanced-jdbc-wrapper#1816)).

Added OpenSSF scorecard and SLSA provenance ([PR #1804](aws/aws-advanced-jdbc-wrapper#1804)).

🐛 Fixed

Fixed AuroraStaleDnsHelper.getVerifiedConnection() returning null when the topology contained a writer with cluster DNS, causing connection pools like HikariCP to silently drain to zero ([PR #1789](aws/aws-advanced-jdbc-wrapper#1789), [PR #1810](aws/aws-advanced-jdbc-wrapper#1810)).

Fixed ConfigurationProfile plugin list being missed in ServiceUtility.createMinimalServiceContainer method ([Issue #1800](aws/aws-advanced-jdbc-wrapper#1800), [PR #1802](aws/aws-advanced-jdbc-wrapper#1802)).

... (truncated)

Changelog

Sourced from software.amazon.jdbc:aws-advanced-jdbc-wrapper's changelog.

[4.0.1] - 2026-05-13

🐛 Fixed

Fixed EFM/EFM2 plugins throwing RuntimeException when used with non-RDS URLs such as localhost, custom hostnames, or IP addresses ([Issue #1896](aws/aws-advanced-jdbc-wrapper#1896), [PR #1907](aws/aws-advanced-jdbc-wrapper#1907)).

Fixed Driver.releaseResources() not shutting down internal background threads (connection pruning, event batching, cache cleanup), causing lingering threads in modular frameworks ([Issue #1878](aws/aws-advanced-jdbc-wrapper#1878), [PR #1906](aws/aws-advanced-jdbc-wrapper#1906)).

Fixed static executors not being recreatable after releaseResources(), causing silent task discards in subsequent test runs and failover scenarios ([PR #1914](aws/aws-advanced-jdbc-wrapper#1914)).

Fixed NPE in various classes ([PR #1898](aws/aws-advanced-jdbc-wrapper#1898)).

Added allowlist classes for CacheResultSet deserialization to prevent unsafe Java deserialization ([PR #1905](aws/aws-advanced-jdbc-wrapper#1905)).

Fixed PostgreSQL topology detection queries to ensure function calls are fully qualified (commit).

🦀 Changed

Added missing javadocs ([PR #1899](aws/aws-advanced-jdbc-wrapper#1899)).

[4.0.0] - 2026-05-06

🦀 Breaking Changes

[!WARNING]
This breaking change only impacts customers implementing their own custom plugins. Otherwise no changes are required. 4.0 removes aliases from HostSpec and related APIs ([PR #1790](aws/aws-advanced-jdbc-wrapper#1790)).

Alias Removal

Removed aliases from HostSpec.

Removed PluginService.fillAliases(); use PluginService.identifyConnection() instead.

Changed PluginService.setAvailability() signature.

Added PluginService.setRoutedHostSpec() to record connection routing events and use it for the current connection info.

If you have custom plugins that use fillAliases() or rely on HostSpec aliases, please update them to use identifyConnection() and the new setRoutedHostSpec() method.

🪄 Added

Added KMS Encryption Plugin for encrypting/decrypting database credentials using AWS KMS ([PR #1772](aws/aws-advanced-jdbc-wrapper#1772), [PR #1894](aws/aws-advanced-jdbc-wrapper#1894)).

Added support for Global Write Forwarding in secondary region ([PR #1842](aws/aws-advanced-jdbc-wrapper#1842)).

Added verifyInitialConnectionRole property to verify the initial connection role matches the expected role ([PR #1811](aws/aws-advanced-jdbc-wrapper#1811)).

Added support for Jackson 3 in Secrets Manager plugin and Okta plugin ([PR #1803](aws/aws-advanced-jdbc-wrapper#1803)).

Added GPG keys verification to release workflow ([PR #1816](aws/aws-advanced-jdbc-wrapper#1816)).

Added OpenSSF scorecard and SLSA provenance ([PR #1804](aws/aws-advanced-jdbc-wrapper#1804)).

🐛 Fixed

Fixed AuroraStaleDnsHelper.getVerifiedConnection() returning null when the topology contained a writer with cluster DNS, causing connection pools like HikariCP to silently drain to zero ([PR #1789](aws/aws-advanced-jdbc-wrapper#1789), [PR #1810](aws/aws-advanced-jdbc-wrapper#1810)).

Fixed ConfigurationProfile plugin list being missed in ServiceUtility.createMinimalServiceContainer method ([Issue #1800](aws/aws-advanced-jdbc-wrapper#1800), [PR #1802](aws/aws-advanced-jdbc-wrapper#1802)).

Fixed EFM monitoring the cluster endpoint instead of the instance endpoint by using getHost instead of getUrl in identifyRdsType ([PR #1823](aws/aws-advanced-jdbc-wrapper#1823)).

Fixed Blue/Green connect routing issue ([PR #1872](aws/aws-advanced-jdbc-wrapper#1872)).

Fixed stale PreparedStatement caching after failover events, which caused permanent failure states in application servers like Open Liberty ([PR #1889](aws/aws-advanced-jdbc-wrapper#1889)).

🦀 Changed

Improved connection tracker by using a double-linked list to store connection weak references, improving performance of removing connections from the tracked connection list when connections close ([PR #1856](aws/aws-advanced-jdbc-wrapper#1856)).

Improved least connections strategy to randomly choose among pools with equal connection counts, evenly distributing traffic ([PR #1847](aws/aws-advanced-jdbc-wrapper#1847)).

Refactored retry logic into a utility class ([PR #1857](aws/aws-advanced-jdbc-wrapper#1857)).

Return null when no eligible hosts found in host strategy method ([PR #1860](aws/aws-advanced-jdbc-wrapper#1860)).

Improved logging and cleaned up message file ([PR #1881](aws/aws-advanced-jdbc-wrapper#1881)).

Security improvements: replaced mutable action tags with SHA, added SECURITY.md and CODEOWNERS.md, added SLSA provenance ([PR #1804](aws/aws-advanced-jdbc-wrapper#1804)).

Documentation:

... (truncated)

Commits

ce7e8c7 fix: restore full README content with only version bump, update changelog
b7d195e chore: update CHANGELOG, Maintenance.md, and SNAPSHOT references for 4.0.1
2d3196a chore: restore FederatedAuthPlugin.md with version bump to 4.0.1
c7c6254 chore: bump version to 4.0.1 in example READMEs
9669b22 fix: this approach won't work for partial file updates
3affb91 chore: bump version references to 4.0.1 in docs and examples
ded89b8 chore: update changelog and bump version to v4.0.1
ec00ac9 fix: make static executors recreatable after releaseResources() (#1914)
d6b79c6 fix: added allowlist classes for CacheResultSet (#1905)
01be7ea Merge commit from fork
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [software.amazon.jdbc:aws-advanced-jdbc-wrapper](https://github.com/aws/aws-advanced-jdbc-wrapper) from 3.3.0 to 4.0.1. - [Release notes](https://github.com/aws/aws-advanced-jdbc-wrapper/releases) - [Changelog](https://github.com/aws/aws-advanced-jdbc-wrapper/blob/main/CHANGELOG.md) - [Commits](aws/aws-advanced-jdbc-wrapper@3.3.0...4.0.1) --- updated-dependencies: - dependency-name: software.amazon.jdbc:aws-advanced-jdbc-wrapper dependency-version: 4.0.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-17T21:10:46Z

Test Results

  1 051 files -       7   1 051 suites - 7 3h 9m 13s ⏱️ - 59m 43s
16 670 tests -   104 16 490 ✔️ -   104 180 💤 ±0 0 ❌ ±0
37 970 runs - 2 983 37 790 ✔️ - 2 983 180 💤 ±0 0 ❌ ±0

Results for commit c738ffb. ± Comparison against base commit 87c8d09.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 17, 2026

dependabot Bot requested a review from a team as a code owner July 17, 2026 18:41

dependabot Bot added java Pull requests that update Java code dependencies Pull requests that update a dependency file labels Jul 17, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 3.3.0 to 4.0.1 in /legend-engine-xts-relationalStore/legend-engine-xt-relationalStore-dbExtension/legend-engine-xt-relationalStore-aurora/legend-engine-xt-relationalStore-aurora-execution - #4951

dependabot Bot commented on behalf of github Jul 17, 2026

Uh oh!

github-actions Bot commented Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 17, 2026

AWS Advanced JDBC Wrapper - v4.0.1

Changelog

[4.0.1] - 2026-05-13

🐛 Fixed

🦀 Changed

AWS Advanced JDBC Wrapper - v4.0.0

Changelog

[4.0.0] - 2026-05-06

🦀 Breaking Changes

Alias Removal

🪄 Added

🐛 Fixed

[4.0.1] - 2026-05-13

🐛 Fixed

🦀 Changed

[4.0.0] - 2026-05-06

🦀 Breaking Changes

Alias Removal

🪄 Added

🐛 Fixed

🦀 Changed

Uh oh!

github-actions Bot commented Jul 17, 2026

Test Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants