[hibernate/hibernate-orm] 21b62d: HHH-18325: Prevent comparison between proxied and ...
by Michael Clarke
Branch: refs/heads/main
Home: https://github.com/hibernate/hibernate-orm
Commit: 21b62db81d0f07e0f8fa1be8c44927595d3e0ecd
https://github.com/hibernate/hibernate-orm/commit/21b62db81d0f07e0f8fa1be...
Author: Michael Clarke <michael.m.clarke(a)gmail.com>
Date: 2025-10-01 (Wed, 01 Oct 2025)
Changed paths:
M hibernate-core/src/main/java/org/hibernate/generator/values/internal/GeneratedValuesHelper.java
A hibernate-core/src/test/java/org/hibernate/orm/test/batch/LeakingStatementCachingTest.java
Log Message:
-----------
HHH-18325: Prevent comparison between proxied and non-proxied statements
Some JDBC connection pools create a dynamic reflective Proxy wrapper
around connections in the pool, plus the generated statements and the
result sets those statements create, with the proxies allowing for
methods calls to be intercepted by the connection pool for the purposes
of returning items to the pool when they're released rather than
destroying the underlying database connection. Tomcat's JDBC pool
implementation does not correctly wrap the full chain of objects,
meaning the raw Statement can be retrieved from a ResultSet rather than
returning the proxied statement. This results in the ResourceRegistry
cache attempting to store both the proxied Statement and the non-proxied
Statement in its cache, but encountering an exception when the HashMap
encounters two entries with the same HashCode and then attempts to
differentiate them with an `equals` call which Tomcat's wrapper expects
both instances to be proxied connections. To overcome this issue in
Tomcat, as well as any other pool implementation which may use Proxy
classes but leak the un-proxied entries, the original PreparedStatement
used to create the ResultSet is being passed into the
GeneratedValuesHelper for passing into the ResourceRegistry, rather than
the GeneratedValues helper attempting to extract the Statement from the
ResultSet.
To unsubscribe from these emails, change your notification settings at https://github.com/hibernate/hibernate-orm/settings/notifications
16 hours, 6 minutes
[hibernate/hibernate-orm] 26db58: Bump the build-dependencies group across 1 directo...
by dependabot[bot]
Branch: refs/heads/dependabot/gradle/build-dependencies-7c72a25b7f
Home: https://github.com/hibernate/hibernate-orm
Commit: 26db58258b10102932d725d898c496e999ac274d
https://github.com/hibernate/hibernate-orm/commit/26db58258b10102932d725d...
Author: dependabot[bot] <49699333+dependabot[bot](a)users.noreply.github.com>
Date: 2025-10-01 (Wed, 01 Oct 2025)
Changed paths:
M build.gradle
M local-build-plugins/build.gradle
M settings.gradle
Log Message:
-----------
Bump the build-dependencies group across 1 directory with 10 updates
Bumps the build-dependencies group with 8 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| com.diffplug.spotless | `7.0.4` | `7.2.1` |
| org.checkerframework | `0.6.56` | `0.6.59` |
| org.jetbrains.gradle.plugin.idea-ext | `1.1.10` | `1.3` |
| com.gradle.develocity | `4.0.2` | `4.2` |
| com.gradle.common-custom-user-data-gradle-plugin | `2.3` | `2.4.0` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.21.1` | `1.21.2` |
| org.apache.maven:maven-embedder | `3.9.10` | `3.9.11` |
| [org.apache.maven.resolver:maven-resolver-connector-basic](https://github.... | `1.9.23` | `1.9.24` |
Updates `com.diffplug.spotless` from 7.0.4 to 7.2.1
Updates `org.checkerframework` from 0.6.56 to 0.6.59
Updates `org.jetbrains.gradle.plugin.idea-ext` from 1.1.10 to 1.3
Updates `com.gradle.develocity` from 4.0.2 to 4.2
Updates `com.gradle.common-custom-user-data-gradle-plugin` from 2.3 to 2.4.0
Updates `org.jsoup:jsoup` from 1.21.1 to 1.21.2
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)
- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.21.1...jsoup-1.21.2)
Updates `org.apache.maven:maven-embedder` from 3.9.10 to 3.9.11
Updates `org.apache.maven:maven-compat` from 3.9.10 to 3.9.11
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](https://github.com/apache/maven/compare/maven-3.9.10...maven-3.9...
Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.23 to 1.9.24
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-...
Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.23 to 1.9.24
---
updated-dependencies:
- dependency-name: com.diffplug.spotless
dependency-version: 7.2.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: build-dependencies
- dependency-name: org.checkerframework
dependency-version: 0.6.59
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build-dependencies
- dependency-name: org.jetbrains.gradle.plugin.idea-ext
dependency-version: '1.3'
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: build-dependencies
- dependency-name: com.gradle.develocity
dependency-version: '4.2'
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: build-dependencies
- dependency-name: com.gradle.common-custom-user-data-gradle-plugin
dependency-version: 2.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: build-dependencies
- dependency-name: org.jsoup:jsoup
dependency-version: 1.21.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build-dependencies
- dependency-name: org.apache.maven:maven-embedder
dependency-version: 3.9.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build-dependencies
- dependency-name: org.apache.maven:maven-compat
dependency-version: 3.9.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build-dependencies
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build-dependencies
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build-dependencies
...
Signed-off-by: dependabot[bot] <support(a)github.com>
To unsubscribe from these emails, change your notification settings at https://github.com/hibernate/hibernate-orm/settings/notifications
1 day