Skip to content

Bump hibernateVersion from 5.4.33.Final to 5.6.15.Final - #137

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/hibernateVersion-5.6.15.Final
Open

Bump hibernateVersion from 5.4.33.Final to 5.6.15.Final#137
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/hibernateVersion-5.6.15.Final

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps hibernateVersion from 5.4.33.Final to 5.6.15.Final.
Updates org.hibernate:hibernate-entitymanager from 5.4.33.Final to 5.6.15.Final

Changelog

Sourced from org.hibernate:hibernate-entitymanager's changelog.

Changes in 5.6.15.Final (February 06, 2023)

https://hibernate.atlassian.net/projects/HHH/versions/32121

** Bug * [HHH-16049] - Setting a property to its current value with bytecode enhancement enabled results in unnecessary SQL Update in some (many) cases * [HHH-15665] - Mariadb is missing identifier quote on SEQUENCE QUERY * [HHH-15618] - Procedure should accept TypedParameterValue as parameter

** Improvement * [HHH-15693] - Introduce a fast-path access for ClassLoaderService being retrieved from ServiceRegistry * [HHH-15690] - HQLQueryPlan to have a direct reference to QueryTranslatorFactory * [HHH-15685] - Improve efficiency of Dialect lookup in Loader and HqlSqlWalker

** Patch * [HHH-15792] - Explicitly add JavaDoc to make @​deprecated hint for createSQLQuery visible in Eclipse

Changes in 5.6.14.Final (November 04, 2022)

https://hibernate.atlassian.net/projects/HHH/versions/32120

** Improvement * [HHH-15662] - ClasscastException caused by check for Managed rather than ManagedEntity

Changes in 5.6.13.Final (November 03, 2022)

https://hibernate.atlassian.net/projects/HHH/versions/32112

** Bug * [HHH-15634] - Lazy basic property does not get updated on change * [HHH-15561] - Function "IDENTITY" not found when inserting audited revision using Hibernate Envers * [HHH-15554] - Merge of an Entity with an immutable composite user type throws Exception

** Improvement * [HHH-15649] - Additional performance fixes relating to Klass's _secondary_super_cache interaction with entity enhancement * [HHH-15639] - Upgrade to ByteBuddy 1.12.18 * [HHH-15637] - Upgrade to Byteman 4.0.20 * [HHH-15616] - Mitigate performance impact of entity enhancement on Klass's _secondary_super_cache * [HHH-15585] - Add support for DB2 aliases for schema validation * [HHH-15575] - Make getter org.hibernate.criterion.SimpleExpression#getOp() public

** Task * [HHH-15594] - Remove Oracle RDS and all test matrix uses

... (truncated)

Commits
  • e924c27 5.6.15.Final
  • 38ec412 HHH-15665 - Fix and added test for issue
  • 1078caa HHH-16049 Setting a property to its current value with bytecode enhancement e...
  • 802fc76 HHH-16049 Test setting a property to its current value with bytecode enhancem...
  • ac55bb2 HHH-16049 Test setting a property to its current value with bytecode enhancem...
  • 84662bf HHH-16049 Restructure lazy-basic tests for easier re-execution and better tes...
  • 49fbe84 HHH-15618 Accept TypedParameterValue for procedure
  • 45c7fc5 Add TCK build throttling
  • cc3b389 Switch from LGTM to CodeQL
  • d7fa18a HHH-15792: Explicitly add JavaDoc to make @​deprecated hint for createSQLQuery...
  • Additional commits viewable in compare view

Updates org.hibernate:hibernate-core from 5.4.33.Final to 5.6.15.Final

Changelog

Sourced from org.hibernate:hibernate-core's changelog.

Changes in 5.6.15.Final (February 06, 2023)

https://hibernate.atlassian.net/projects/HHH/versions/32121

** Bug * [HHH-16049] - Setting a property to its current value with bytecode enhancement enabled results in unnecessary SQL Update in some (many) cases * [HHH-15665] - Mariadb is missing identifier quote on SEQUENCE QUERY * [HHH-15618] - Procedure should accept TypedParameterValue as parameter

** Improvement * [HHH-15693] - Introduce a fast-path access for ClassLoaderService being retrieved from ServiceRegistry * [HHH-15690] - HQLQueryPlan to have a direct reference to QueryTranslatorFactory * [HHH-15685] - Improve efficiency of Dialect lookup in Loader and HqlSqlWalker

** Patch * [HHH-15792] - Explicitly add JavaDoc to make @​deprecated hint for createSQLQuery visible in Eclipse

Changes in 5.6.14.Final (November 04, 2022)

https://hibernate.atlassian.net/projects/HHH/versions/32120

** Improvement * [HHH-15662] - ClasscastException caused by check for Managed rather than ManagedEntity

Changes in 5.6.13.Final (November 03, 2022)

https://hibernate.atlassian.net/projects/HHH/versions/32112

** Bug * [HHH-15634] - Lazy basic property does not get updated on change * [HHH-15561] - Function "IDENTITY" not found when inserting audited revision using Hibernate Envers * [HHH-15554] - Merge of an Entity with an immutable composite user type throws Exception

** Improvement * [HHH-15649] - Additional performance fixes relating to Klass's _secondary_super_cache interaction with entity enhancement * [HHH-15639] - Upgrade to ByteBuddy 1.12.18 * [HHH-15637] - Upgrade to Byteman 4.0.20 * [HHH-15616] - Mitigate performance impact of entity enhancement on Klass's _secondary_super_cache * [HHH-15585] - Add support for DB2 aliases for schema validation * [HHH-15575] - Make getter org.hibernate.criterion.SimpleExpression#getOp() public

** Task * [HHH-15594] - Remove Oracle RDS and all test matrix uses

... (truncated)

Commits
  • e924c27 5.6.15.Final
  • 38ec412 HHH-15665 - Fix and added test for issue
  • 1078caa HHH-16049 Setting a property to its current value with bytecode enhancement e...
  • 802fc76 HHH-16049 Test setting a property to its current value with bytecode enhancem...
  • ac55bb2 HHH-16049 Test setting a property to its current value with bytecode enhancem...
  • 84662bf HHH-16049 Restructure lazy-basic tests for easier re-execution and better tes...
  • 49fbe84 HHH-15618 Accept TypedParameterValue for procedure
  • 45c7fc5 Add TCK build throttling
  • cc3b389 Switch from LGTM to CodeQL
  • d7fa18a HHH-15792: Explicitly add JavaDoc to make @​deprecated hint for createSQLQuery...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 9, 2026
@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 67 dependencies

Detected 2 vulnerabilities (0 Critical, 0 High, 1 Medium, 1 Low)

+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| SEVERITY |    LIBRARY     |      ID       |                                             TOP FIX                                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-21.0.jar | CVE-2023-2976 | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| LOW      | guava-21.0.jar | CVE-2020-8908 | Upgrade to version com.google.guava:guava:32.0.0-android, https://github.com/google/guava.git - |
|          |                |               | v32.0.0                                                                                         |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

path-mapped-pathdb-3.3-SNAPSHOT.pom
|-- path-mapped-pathdb-datastax-3.3-SNAPSHOT.jar
	|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
	|-- cassandra-driver-core-3.12.1.jar
		|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
	|-- cassandra-driver-mapping-3.12.1.jar
		|-- guava-21.0.jar [1 MEDIUM, 1 LOW]


No Policy violations were detected

Project 'path-mapped-storage' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=a525e644-1c7f-4265-a1f6-f949714f4deb
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=a6f4fbb9a2544f0c8b6685dec5ba58dee9596f69943146098106ab43cb758822

Mend AI scan succeeded.

Support Token: 27cd3aa2bdc354ac8aa989367733a669c1789399161831
SAST scan output
*no findings*

Full logs and artifacts

@dependabot
dependabot Bot force-pushed the dependabot/maven/hibernateVersion-5.6.15.Final branch from bed7020 to fa065fe Compare September 9, 2026 13:31
Bumps `hibernateVersion` from 5.4.33.Final to 5.6.15.Final.

Updates `org.hibernate:hibernate-entitymanager` from 5.4.33.Final to 5.6.15.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/5.6.15/changelog.txt)
- [Commits](hibernate/hibernate-orm@5.4.33...5.6.15)

Updates `org.hibernate:hibernate-core` from 5.4.33.Final to 5.6.15.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/5.6.15/changelog.txt)
- [Commits](hibernate/hibernate-orm@5.4.33...5.6.15)

---
updated-dependencies:
- dependency-name: org.hibernate:hibernate-core
  dependency-version: 5.6.15.Final
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.hibernate:hibernate-entitymanager
  dependency-version: 5.6.15.Final
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/hibernateVersion-5.6.15.Final branch from fa065fe to d214ecd Compare September 14, 2026 15:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants