Update jdbi3Version to v3.55.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.jdbi:jdbi3-testcontainers (source)	3.40.0 → 3.55.0
org.jdbi:jdbi3-testing (source)	3.40.0 → 3.55.0
org.jdbi:jdbi3-sqlobject (source)	3.40.0 → 3.55.0
org.jdbi:jdbi3-postgres (source)	3.40.0 → 3.55.0
org.jdbi:jdbi3-jackson2 (source)	3.40.0 → 3.55.0
org.jdbi:jdbi3-core (source)	3.40.0 → 3.55.0

---

Release Notes

jdbi/jdbi (org.jdbi:jdbi3-testcontainers)

v3.55.0

• Bind and map types that are not public: a package-private bean class with public accessors, a non-public
  constructor or @JdbiConstructor factory method, or a package-private Immutables value type. mapToBean now
  also uses a non-public no-arg constructor, e.g. a private one on a public bean. The ReflectionMappers
  accessible object strategy controls this. Unlike FieldMapper, these mappers apply the strategy in effect when
  a type is first used and cache the result for the Jdbi instance, so set the strategy on the Jdbi before
  first use, not on a Handle or statement. A ConstructorMapper for a type that Jdbi can not access now fails
  on first use, with a message that names the fix, instead of at creation (#​1684)
• Fix KotlinMapper ignoring a SQL NULL for a @PropagateNull constructor parameter or property of a
  non-null primitive type such as Long or Int. The column mapper returned 0 (or false) and the
  object was mapped instead of null. KotlinMapper now treats the NULL as null like the
  ConstructorMapper, FieldMapper, and BeanMapper do (#​3048)
• Fix a @Nested Optional<T> attribute that held null instead of Optional.empty() when T used the
  class-level @PropagateNull("column") form and that column was null. A @PropagateNull on the
  Optional attribute itself no longer turns the parent into null in this case, which matches the
  attribute-level form (#​3049)
• New JoinRowReducer (Beta) reduces the rows of a join query into root objects and links the joined
  objects to them, for to-one and to-many relations over inner and outer joins. Columns are named relative
  to the relation prefix, one type is one table, so a table row is one instance no matter through how many
  relations the query reaches it, and reducers nest for deeper graphs (#​1574)
• New RowView.getColumn(String) and RowView.getColumn(int) return a column value as the JDBC driver
  returns it from ResultSet.getObject, without a column mapper. New RowView.getColumnNames() returns
  the column labels of the result set, and RowView.getRow(RowMapper) maps the current row with a given
  mapper (#​1574)
• Add BindListStyle to render bindList / @BindList elements as single-column rows, (:a),(:b), for
  use with the SQL VALUES list constructor. Configure it with SqlStatements#setBindListStyle or
  @BindList(style = BindListStyle.ROWS) (#​1550, Alpha)
• Add LocalTransactionHandler.managed(): Jdbi manages transactions on connections with autocommit
  disabled instead of joining them, e.g. on a pool that disables autocommit as a precaution.
  inTransaction commits, retry handlers such as SerializableTransactionRunner engage, and a
  statement executed outside of a transaction is not committed. (#​2663, #​1733)
• Add NoOpTransactionHandler for connections whose transactions an external framework manages,
  e.g. a Spring TransactionAwareDataSourceProxy or an XA data source. It never reads or changes
  the transaction state of the connection. CMTTransactionHandler now extends it, with unchanged
  behavior. (#​2742, thanks @​bekoenig for the suggestion!)
• Document the transaction contract for connections with autocommit disabled: the handle joins the
  transaction that the connection owner manages. New "Transactions managed outside Jdbi" section in
  the User Guide, with tests that pin the contract. (#​1039, #​2663)
• Document how @PropagateNull resolves its column: on a class, the column name is relative to the mapper
  prefix (from @Nested or from a mapper made with a prefix), so one class maps under different prefixes.
  New "Using @PropagateNull" section in the User Guide, with tests for mappers made with a prefix. (#​1764)
• Fix JdbiExtension losing its plugins and initializer after afterAll, so a static extension whose test
  class ran a second time in the same JVM (a Surefire rerun of a failed test, or a @Nested class selected
  as its own test class) restarted with a bare Jdbi and failed with NoSuchMapperException or
  NoSuchExtensionException (#​3036)
• vavr: update to vavr 1.0.1. The vavr 1.0.0-alpha releases remain unsupported (#​2350)
• Fix repeated @RegisterKotlinMapper annotations on one method or type. Kotlin wrapped them in a generated
  container that Jdbi did not process, so none of the mappers were registered and rows mapped through the
  unprefixed KotlinMapperFactory mapper, ignoring the prefix. The annotation now uses
  RegisterKotlinMappers as its container. Recompile code that repeats the annotation to pick up the fix.
  (#​2961)
• update Spring Framework to 6.2.19 due to CVE-2026-41848 (Dependabot alert #​45, #​3026)
• ConfigRegistry.createCopy() now materializes each config object lazily on its first access instead
  of copying every config object eagerly. This removes most of the allocation cost of extension attach
  (Jdbi#onDemand re-attaches on every call), of Handle creation, and of statement creation
  (#​2982, thanks @​ulmetrs!). If code depends on the exact moment a copy is taken, restore the old
  timing with ConfigRegistry#setEagerCopies(true) (Alpha).
• Reflective row mappers (BeanMapper, ConstructorMapper, FieldMapper) that match no columns at all now
  list the result set columns in the error, and a prefixed mapper explains that SELECT t.* yields unprefixed
  labels and shows how to alias them. Document the same in the mapper and JoinRowMapper sections (#​2289)
• Fix jdbi3-spring excluding spring-jcl from consumers since 3.51.0, which broke Spring Boot 3
  applications at startup with NoClassDefFoundError: org.apache.commons.logging.LogFactory (#​2990)
• Register SQL array element types for java.time out of the box: LocalDate, LocalTime,
  LocalDateTime, OffsetDateTime, OffsetTime, Instant, and ZonedDateTime now bind to
  SQL arrays without a manual registerArrayType call. PostgresPlugin additionally registers
  Duration and Period (bound as interval) and binds the date-bearing types as text
  literals that cover the full Postgres date range, including BC dates (#​3022)
• Fix afterRollback callbacks not firing when a transaction fails at commit time, e.g. on a
  serialization failure under SerializableTransactionRunner. The failed transaction's callbacks
  also no longer leak into the next transaction on the same handle. (#​3021, thanks @​OswaldOniSango!)
• Fix afterCommit and afterRollback callbacks not firing, and leaking into the next transaction on
  the same handle, when the connection fails during a rollback or during the autocommit restore that
  follows a commit. RollbackOnlyTransactionHandler now runs the afterRollback callbacks on a
  commit, and never the afterCommit callbacks, because it never commits (#​3038)
• generator: generated SQL objects work in a GraalVM native image without reachability metadata. The
  generator now registers a GeneratedSqlObjectProvider (Alpha) for each generated class through the
  ServiceLoader, and Jdbi uses it instead of a reflective lookup by class name. Classes generated by an
  older Jdbi version must be recompiled. ExtensionMetadata.Builder#setExtensionTypeMethods
  lets an extension factory supply the extension methods instead of discovering them by reflection. (#​2474)
• Fix PreparedBatch NPE when rows bind different runtime types, e.g. mixed bean subclasses (#​2974, thanks @​arimu1!)
• Fix DefaultJdbiCache pinning entries when loader throws an exception (#​2995)
• Fix GraalVM native image missing entries and update metadata to new format, support 25.2 (#​2994)
• QualifiedType no longer synthesizes an annotation proxy for a qualifier annotation without
  members, so QualifiedType.with(Class) and the built-in @Legacy, @NVarchar, @EnumByName,
  and @EncodedJson qualifiers work in a GraalVM native image without proxy registration.
  New QualifiedType.hasQualifiers(Set) and hasNoQualifiers() compare qualifiers without
  materializing annotations. (#​2967)
• stringtemplate4: StringTemplateEngine now caches template compilation through the core statement
  cache instead of recompiling on every render, with compiled templates pooled for thread safety.
  The cached path bypasses render(String, StatementContext): a subclass that overrides render
  must also override parse, most simply to return Optional.empty(), which keeps the core on
  its render path.
  Batch and Script now render through the statement cache as well. (#​2997)
• Fix @GenerateSqlObject implementations not found when the SQL object interface is loaded by a
  class loader other than the one that loaded Jdbi, e.g. plugin containers (#​3014)
• Share the extension metadata cache across handles so handle.attach()-only workloads no longer
  recompute ExtensionMetadata on every handle (#​2991)
• Fix JdbiImmutables not finding the generated Immutable* and Modifiable* classes when the spec
  is loaded by a class loader other than the one that loaded Jdbi, e.g. plugin containers

v3.54.0

• fix deadlock in configuration caching (#​2980)
• fix prepared batch first-time-null binding (#​2975)
• Add @SqlPreflight (Alpha) for SQL Object methods. The annotation runs a literal SQL statement on
  the same Handle, immediately before the method's main statement, binding the method's arguments.
  This is useful for setting scoped/session variables before a query (e.g. a Postgres trigram
  threshold). It is repeatable and may be placed on a method or a SQL Object type. See issue #​2979.
• update postgres driver due to CVE-2026-42198

v3.53.0

Fixes: Jdbi-Freemarker Security Advisory GHSA-mggx-p7jf-jgw4

The Freemarker configuration allows templates to construct arbitrary
Java types, including freemarker.template.utility.Execute.

While exploiting this requires other unsafe practices (letting a user
dictate template input), it seems prudent to disable template class resolution.

Please see GHSA-mggx-p7jf-jgw4 for more details.

Upgrade to testcontainers 2.x

While this required no code changes, the testcontainers project has
renamed a number of their jar files. Jdbi still supports
testcontainers 1.x and now also testcontainers 2.x:

If you are using testcontainers with Jdbi today and can not update to
2.x, make sure that you reference the org.testcontainers:jdbc and
org.testcontainers:junit-jupiter dependencies. Those used to be
available as transitive dependency from jdbi3-testcontainers.

If you upgrade to testcontainers 2.x, the
org.testcontainers:testcontainers-jdbc and
org.testcontainers:testcontainers-junit-jupiter dependencies must be
available.

• Update testcontainers dependency to 2.0.5 (from 1.21.4)
• Add StatementContext parameter to SqlExceptionHandler and remove return value

v3.52.1

• fix regression for java.time.Instant mapping from 3.52.0 (#​2955, reported by @​Eng-Fouad and @​toadzky)
• Add missing mappers for java.sql.Date and java.sql.Time
• Add support for java.time.OffsetTime
• Add support for java.time.ZoneOffset

v3.52.0

Changes to java.time related classes

JDBC 4.2 added full support to map java.time classes onto SQL types
in 2014. This release of Jdbi switches from mapping these objects onto
"classic" (java.sql.Date, Time, Timestamp) to using the JDBC 4.2 API
(PreparedStatement#setObject and ResultSet#getObject).

These changes should not be visible for any database, except if you
were brave enough to map types with time zones or offsets
(ZonedDateTime and OffsetDateTime) onto SQL types that have no
timezone (TIMESTAMP or DATETIME). This affects databases that do
not support the TIMESTAMP WITH TIMEZONE data type. IAW MySQL.

If you use MySQL with Jdbi and map any of these data types, you are
already losing the zone/offset information. Now you actually get an
error (which is the correct behavior of the driver!) unless you load
the new MysqlPlugin which restores the mapping.

If your application relies on legacy mappings, you can also use the
new @Legacy annotation to force the old behavior. See the
documentation at https://jdbi.org/ for details.

• Add MySQL specific module (jdbi3-mysql) and plugin (MysqlPlugin).
• Add new SqlExceptionHandler hook to handle database exceptions thrown during statement execution
• Add option to not attach sensitive binding data with OpenTelemetry (#​2941, thanks @​gmellemstrand !)
• Add configuration for Jackson serialization of types with custom polymorphic handling (#​2915)
• Update to JUnit 6.0.2
• Retire Apache Derby integration (#​2866)
• Run test suite against Spring Framework 7 (#​2919)
• Add OraclePlugin that sets untyped null argument to Types.NULL for Oracle compatibility (#​1003)
• Support INOUT parameters for stored procedure Call statements (#​1606)
• Map java.time types according to JDBC 4.2 spec (using setObject) (#​988)
• Add @Legacy annotation to restore old timestamp mapping behavior
• Make @BindMethodsList work with the String template engine (fixes #​2917, reported by @​agavrilov76, fixed by @​JScodeconcise)

v3.51.0

• Add new jackson3 artifact for Jackson 3 ( #​2878 )

• Support configuring log level for SqlLogger (#​2901, thanks @​phinjensen! )

• Update to SLF4J 2, to allow for configurable log levels in SqlLogger (#​2902)

• Deprecate for removal installPlugins plugin discovery. It's too easy to get yourself into trouble.

• Support TYPE_USE @Nullable annotations like JSpecify ( #​2899, thanks @​protocol7 ! )

• Allow @GetGeneratedKeys on @SqlUpdate methods to return multiple results as Lists or arrays (#​2897, original PR by @​aharin, thank you!)

v3.50.0

JDK Baseline Update

3.50.0 is the first release of Jdbi to require Java 17. Thank you Java 11 for your service!
We intend to do occasional bug patches for significant bugs or security issues but there
will be no further active development work.

Experimental Java Native support
3.50.0 is the first release to support using Jdbi directly in native compilation. We only
support using the Java 25+ GraalVM toolchain and fully expect that there are bugs, breakages
and things that are not working well. If you use Jdbi in a native environment and find any
problems, we would be thrilled to get bug reports!

• CI verifies Jdbi runs well in GraalVM native-image (#​2476, thanks @​Eng-Fouad !)
• 3.50.0 contains no bug fixes, user visible code or API changes compared to 3.49.6.

v3.49.6

We have some problems with our upstream parent POM. There are changes
to Maven Central that require us to roll the parent POM into the Jdbi
project. This is a temporary thing and will go away as soon as
uploading parent poms to Central has been reenabled.

• Add support for PGvector types (#​2830)
• Improve concurrency of statement cache loading (#​2834)
• ExtensionHandler interface pulls out handling of target object into new AttachedExtensionHandler interface (#​2828)
• collectInto supports types that do not implement Collection ( #​2849, thanks @​mattbertolini !)

v3.49.5

• Fix SerializableTransactionRunner retry with failures wrapped in batch exceptions
• Add Oracle-Free tests

v3.49.4

• Add experimental support for Kotlin Value types as arguments and columns (#​2790, suggested and aided by @​SpyMachine)

v3.49.3

• Only use JFR if the flight recorder was registered (#​2736)

v3.49.2

• Fix returning long update count from update statements (#​2778)
• Fix JFR usage on GraalVM (#​2736)
• Fix SBOM creation

v3.49.1

• Fix onDemand extension handling of method invocations from a subtype (#​2769, thanks @​djsstarburst!)
• Move all kotlin deps into the module poms (fixes #​2762, thanks @​simonolander)
• Drop explicit support for obsolete Kotlin versions < 1.9 (#​2764)
• Remove Freebuilder support, which is archived upstream

v3.49.0

• Support creating a ConstructorMapper using a static factory method (#​2738, thanks @​WellingR!)
• Add support for @​Nested Optional fields (#​2733, thanks @​WellingR!)

v3.48.0

• fix new JFR feature failing on some JDKs (#​2736)

v3.47.0

• spring aot: fix @JdbiRepository so aot generation works (#​2727, thanks @​hpoettker !)
• spring/spring5: update spring dependency and tests to latest releases (dependabot #​36 / CVE-2024-38820 asks for 5.3.41 but that is not released (neither is 5.3.40. Spring is a mess)).
• deprecate the spring5 module as Spring Framework 5.x is no longer under OSS support
• add new spring module that will focus on Spring Framework 6.x and beyond. This is currently the same code as spring5 but no longer needs to maintain Spring Framework 5.x backwards compatibility.

v3.46.0

• Introduce JDK Flight Recorder and OpenTelemetry support
• geantyref 2.0.0
• sqlite: fix sqlite extension memory database usage to share between different connection (#​2688)

v3.45.4

• Avoid virtual thread deadlock on connection acquire (#​2686, thanks @​mhib !)

v3.45.3

• Fix Connection.close() on JdbiPlugin customizeConnection (#​2676)
• Fix multiple commits on handle with autocommit disabled (#​2685, thanks @​mhib !)

v3.45.2

• Move oracle12 module back into main build (#​2664, thanks @​stoyants !)
• Raise UnableToCreateStatementException if a positional param is missing (#​2675, thanks @​angusholder !)

v3.45.1

• Work around JDK-8320575 losing record constructor generic type information
• Improve record constructor detection of generic types to work around JDK-8320575 (#​2648, thanks @​elonazoulay !)
• Attempt to improve ConstructorMapper performance by caching constructor MethodHandles (#​2657, thanks @​elonazoulay! )

v3.45.0

• Testcontainer support for DB2 (#​2625, thanks @​stoyants)
• create CycloneDX SBOM files for release versions
• make builds reproducible
• add JdbiTestContainersExtension#setShutdownWaitTime(int) to control waiting for extension shutdown if a database is very slow. Addresses #​2629 (thanks @​stoyants).
• documentation updates

v3.44.1

• New @Definition feature also supports super-interface definitions

v3.44.0

• New Feature: annotate types, methods, or fields as @Definition to define computed constants
• fix edge condition when calling Connection#commit() threw an Exception, we called commit() again. Now the
  code explicitly calls Connection#rollback(). Fixes #​2595
• FieldMapper: skip static fields (#​2607, reported by @​mvysny)
• fix StackOverflowError when encountering recursive types like <T extends This<T>> (#​2582, reported by @​johnarrr)

v3.43.0

** POTENTIAL BREAKING CHANGE **

With 3.43.0, we have improved the support for calling stored procedures via Call, and in particular
returning result sets.
Like any object that comes from a Statement, the expectation is that code will consume
all results (whether it's "normal" result set or a stored procedure result) before closing the Statement.
However, previously, Jdbi did not enforce this - OutParameters could be used after the statement closed.

So, you might observe new exceptions while trying to use OutParameters after closing the Call they came from.
See: #​2592

• Support nesting row types into Java Optional or vavr Option (reported by @​martyn0ff, #​2558)
• finally give up on trying to guess SQL script parsing and add a switch to control whether to strip trailing semicolons or not. Another attempt to
  fix SQL script parsing is (reported by @​IrinaTerlizhenko, #​2554).
• add a new integration-test module for tests that require different parts of the code base. Should be used to write test cases for issue investigations.
• support null as a value for binding bean, method, field and pojo objects (Suggested by @​xak2000 in #​2562)
• Add testcontainers support for MS SQLServer
• support returning a ResultSet from Call statements for databases that do not support cursor parameters. (suggested in #​2557 by @​metaforte and @​0x1F528 in #​2546)
• support int, long, short, double and float return values from out parameters directly.

v3.42.0

• Add Spring Jdbi repositories with @EnableJdbiRepositories, thanks @​xfredk (#​2528, #​2544)
• Support Kotlin coroutine scope. (#​2524) - Suggested by @​anderssv on the mailing list
• Move from Kotlin 1.5 to 1.6 as 1.5 is deprecated and will be removed.
• Add support for Function arguments, similar to Consumer arguments, to SQL objects (#​2326)
• Fix kotlin deprecation warnings (#​2511) - Thanks @​lwach-allegro for contributing a PR
• lexer fixes (#​2520), this should fix all problems with identifier names (fixes #​2481, #​2499 and #​2510)
• correctness fix for Handle creation (#​2541)
• Fix Vavr argument usage in SqlObjects (reported by @​diversit, #​2529)
• Fix MySQL Script parsing (reported by @​IrinaTerlizhenko, #​2535)
• Added a written security policy.

v3.41.3

• Fix regression introduced by #​2481 where - at the end of named parameters get swallowed. (#​2499, thanks @​gokristian for reporting).
  • un-deprecate the otjPostgres support in jdbi-testing as the project shipped 1.02 with JPMS module name support.
  • doc updates (#​2496, thanks @​hpoettker)
  • upgrade lombok version for testing with Java 21 (#​2495)
  • address commons-compress dependabot issue
  • some version and dependency updates

v3.41.2

• Deprecate the otjPostgres support in jdbi-testing. This will be undeprecated if they ship a version that provides an automatic module name for JPMS, otherwise it will be removed when Jdbi ships with full JPMS support.
  • Restore pre-3.41.0 behavior for handles using auto-commit == false where transactions don't need Handle#begin() before Handle#commit() (#​2491, thanks @​grigorem)
  • Start a MySQL specific module. Right now, this is tests only.
  • Fix javadoc generation to build Java 11 javadocs (not Java 8 + fixes)

v3.41.1

• Support . and - as part of named parameter names. (#​2471)
  • Fix incorrect attempt to rollback txn when exception is thrown after commit (#​2478)

v3.41.0

• Fix connection leak if Handle throws an exception in the C'tor (#​2446). Thanks @​kristoffSC
  • documentation example code updates
  • remove all spotbugs annotations, replace with jakarta (#​2456)
  • rename "Handler" to "HandleCallbackDecorator", mark as @Alpha (#​2460)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every 3 months on the first day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

❌ Deploy Preview for peppy-sprite-186812 failed.

Name	Link
🔨 Latest commit	f408505
🔍 Latest deploy log	https://app.netlify.com/projects/peppy-sprite-186812/deploys/684c8021be265300089b2036

[netlify]

❌ Deploy Preview for peppy-sprite-186812 failed.

Name	Link
🔨 Latest commit	4bd8cf0
🔍 Latest deploy log	https://app.netlify.com/projects/peppy-sprite-186812/deploys/68def988e0ba3300082c20b9