jprdonnelly/airbyte
1
0
Fork 0
mirror of synced 2025-12-21 11:01:41 -05:00
Code Issues Packages Projects Releases Wiki Activity

[cdk, source-postgres, source-mysql, source-mongodb-v2] Fixing vulnerabilities in dependencies (#58132)

Browse Source 
Co-authored-by: Octavia Squidington III <octavia-squidington-iii@users.noreply.github.com>
This commit is contained in:
Yue Li
2025-04-24 08:28:30 -07:00
committed by GitHub
parent 01cd16654e
commit ad7aa7af4b
15 changed files with 112 additions and 109 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
airbyte-cdk/bulk/core/base/build.gradle
View File

@@ -15,6 +15,7 @@ dependencies {
}
api 'io.github.oshai:kotlin-logging-jvm:7.0.0'
api 'io.micronaut:micronaut-runtime'
api 'org.apache.mina:mina-core:2.0.27' // for fixing vulnerability of sshd-mina
api 'org.apache.sshd:sshd-mina:2.13.2'
api 'org.jetbrains.kotlinx:kotlinx-coroutines-core'

1
airbyte-cdk/java/airbyte-cdk/README.md
View File

@@ -174,6 +174,7 @@ corresponds to that version.
| Version | Date | Pull Request | Subject |
|:-----------|:-----------|:------------------------------------------------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------|
| 0.48.9 | 2025-04-17 | [\#58132] (https://github.com/airbytehq/airbyte/pull/58132) | Fix vulnerability in dependencies. |
| 0.48.8 | 2025-03-11 | [\#55709](https://github.com/airbytehq/airbyte/pull/55709) | Filter unwanted tables in discover to prevent null table issues |
| 0.48.7 | 2025-01-26 | [\#51596](https://github.com/airbytehq/airbyte/pull/51596) | Make efficient table discovery during read |
| 0.48.6 | 2025-01-26 | [\#51596](https://github.com/airbytehq/airbyte/pull/51596) | Fix flaky source mssql tests |

1
airbyte-cdk/java/airbyte-cdk/core/build.gradle
View File

@@ -34,6 +34,7 @@ dependencies {
api 'com.zaxxer:HikariCP:5.1.0'
api 'org.jooq:jooq:3.19.11'
api 'org.apache.commons:commons-csv:1.11.0'
api 'org.apache.mina:mina-core:2.0.27' // for fixing vulnerability of sshd-mina
implementation project(':airbyte-cdk:java:airbyte-cdk:airbyte-cdk-dependencies')

2
airbyte-cdk/java/airbyte-cdk/core/src/main/resources/version.properties
View File

@@ -1 +1 @@
version=0.48.8
version=0.48.9

2
airbyte-cdk/java/airbyte-cdk/dependencies/build.gradle
View File

@@ -30,7 +30,7 @@ dependencies {
api 'org.slf4j:slf4j-api:2.0.16'
api 'io.github.oshai:kotlin-logging-jvm:7.0.0'
api 'org.jetbrains.kotlinx:kotlinx-coroutines-core:1.8.1'
api 'net.minidev:json-smart:2.5.2'
implementation 'com.jayway.jsonpath:json-path:2.9.0'
implementation 'com.networknt:json-schema-validator:1.5.1'

2
airbyte-integrations/connectors/source-mongodb-v2/build.gradle
View File

@@ -3,7 +3,7 @@ plugins {
}
airbyteJavaConnector {
cdkVersionRequired = '0.45.1'
cdkVersionRequired = '0.48.9'
features = ['db-sources', 'datastore-mongo']
useLocalCdk = false
}

2
airbyte-integrations/connectors/source-mongodb-v2/metadata.yaml
View File

@@ -36,7 +36,7 @@ data:
type: GSM
connectorType: source
definitionId: b2e713cd-cc36-4c0a-b5bd-b47cb8a0561e
dockerImageTag: 1.5.17
dockerImageTag: 1.5.18
dockerRepository: airbyte/source-mongodb-v2
documentationUrl: https://docs.airbyte.com/integrations/sources/mongodb-v2
githubIssueLabel: source-mongodb-v2

1
airbyte-integrations/connectors/source-mysql/build.gradle
View File

@@ -13,6 +13,7 @@ airbyteBulkConnector {
}
dependencies {
api "com.google.protobuf:protobuf-java:4.27.5" // for fixing vulnerability of protobuf-java used by Debezium
implementation 'com.mysql:mysql-connector-j:9.1.0'
implementation 'io.debezium:debezium-connector-mysql'

2
airbyte-integrations/connectors/source-mysql/metadata.yaml
View File

@@ -9,7 +9,7 @@ data:
connectorSubtype: database
connectorType: source
definitionId: 435bb9a5-7887-4809-aa58-28c27df0d7ad
dockerImageTag: 3.11.11
dockerImageTag: 3.11.12
dockerRepository: airbyte/source-mysql
documentationUrl: https://docs.airbyte.com/integrations/sources/mysql
githubIssueLabel: source-mysql

3
airbyte-integrations/connectors/source-postgres/build.gradle
View File

@@ -12,7 +12,7 @@ java {
}
airbyteJavaConnector {
cdkVersionRequired = '0.48.4'
cdkVersionRequired = '0.48.9'
features = ['db-sources', 'datastore-postgres']
useLocalCdk = false
}
@@ -23,6 +23,7 @@ application {
}
dependencies {
api "com.google.protobuf:protobuf-java:3.25.5" // for fixing vulnerability of protobuf-java used by Debezium
implementation 'commons-codec:commons-codec:1.16.0'
implementation 'io.debezium:debezium-embedded:3.0.1.Final'
implementation 'io.debezium:debezium-connector-postgres:3.0.1.Final'

2
airbyte-integrations/connectors/source-postgres/metadata.yaml
View File

@@ -9,7 +9,7 @@ data:
connectorSubtype: database
connectorType: source
definitionId: decd338e-5647-4c0b-adf4-da0e75f5a750
dockerImageTag: 3.6.30
dockerImageTag: 3.6.31
dockerRepository: airbyte/source-postgres
documentationUrl: https://docs.airbyte.com/integrations/sources/postgres
githubIssueLabel: source-postgres

9
airbyte-integrations/connectors/source-postgres/src/test/java/io/airbyte/integrations/source/postgres/PostgresSourceTest.java
View File

@@ -293,13 +293,8 @@ class PostgresSourceTest {
return null;
});
final JsonNode anotherUserConfig = getConfig("test_user_3", "132");
final Set<AirbyteMessage> actualMessages =
MoreIterators.toSet(source().read(anotherUserConfig, CONFIGURED_CATALOG, null));
setEmittedAtToNull(actualMessages);
// expect 6 records, 4 state messages and 4 stream status messages.
assertEquals(14, actualMessages.size());
final var actualRecordMessages = filterRecords(actualMessages);
assertEquals(PRIVILEGE_TEST_CASE_EXPECTED_MESSAGES, actualRecordMessages);
final Throwable thrown = assertThrows(Exception.class, () -> MoreIterators.toSet(source().read(anotherUserConfig, CONFIGURED_CATALOG, null)));
assertNotNull(thrown.getMessage());
}
@Test

3
docs/integrations/sources/mongodb-v2.md
View File

@@ -198,7 +198,8 @@ For more information regarding configuration parameters, please see [MongoDb Doc
<summary>Expand to review</summary>
| Version | Date | Pull Request | Subject |
|:--------|:-----------|:---------------------------------------------------------|:----------------------------------------------------------------------------------------------------------|
|:--------|:-----------|:-----------------------------------------------------------|:----------------------------------------------------------------------------------------------------------|
| 1.5.18 | 2025-04-24 | [58132](https://github.com/airbytehq/airbyte/pull/58132) | Fix vulnerabilities in dependencies. |
| 1.5.17 | 2025-04-17 | [58111](https://github.com/airbytehq/airbyte/pull/58111) | Implement timeout for document discovery |
| 1.5.16 | 2025-04-02 | [56973](https://github.com/airbytehq/airbyte/pull/56973) | Update logging configuration. |
| 1.5.15 | 2025-03-06 | [55234](https://github.com/airbytehq/airbyte/pull/55234) | Update base image version for certified DB source connectors |

1
docs/integrations/sources/mysql.md
View File

@@ -226,6 +226,7 @@ Any database or table encoding combination of charset and collation is supported
| Version | Date | Pull Request | Subject |
|:------------|:-----------|:-----------------------------------------------------------|:------------------------------------------------------------------------------------------------------------------------------------------------|
| 3.11.12 | 2025-04-18 | [58132](https://github.com/airbytehq/airbyte/pull/58132) | Fix vulnerabilities in dependencies. |
| 3.11.11 | 2025-04-23 | [58623](https://github.com/airbytehq/airbyte/pull/58623) | Bump CDK version to the latets published |
| 3.11.10 | 2025-04-22 | [58599](https://github.com/airbytehq/airbyte/pull/58599) | Extend debezium shutdown timeout to allow the engine to gracefully close |
| 3.11.9 | 2025-03-14 | [55731](https://github.com/airbytehq/airbyte/pull/55731) | More meaningful errors for variables used in extra checks for CDC |

1
docs/integrations/sources/postgres.md
View File

@@ -344,6 +344,7 @@ According to Postgres [documentation](https://www.postgresql.org/docs/14/datatyp
| Version | Date | Pull Request | Subject |
|---------| ---------- | ---------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| 3.6.31 | 2025-04-18 | [58132](https://github.com/airbytehq/airbyte/pull/58132) | Fix vulnerabilities in dependencies. |
| 3.6.30 | 2025-03-06 | [55234](https://github.com/airbytehq/airbyte/pull/55234) | Update base image version for certified DB source connectors |
| 3.6.29 | 2025-02-13 | [53649](https://github.com/airbytehq/airbyte/pull/53649) | Fix issue that column default value did not get converted |
| 3.6.28 | 2024-12-23 | [50870](https://github.com/airbytehq/airbyte/pull/50870) | Use airbyte/java-connector-base:2.0.0 |