build(deps-dev): Bump org.liquibase:liquibase-core from 4.33.0 to 5.0.4 #16

2026-10-22T13:25:03Z

dependabot[bot] commented

2026-10-22 13:25:03 +00:00

(Migrated from github.com)

Bumps org.liquibase:liquibase-core from 4.33.0 to 5.0.4.

Release notes

Sourced from org.liquibase:liquibase-core's releases.

Liquibase v5.0.4

Liquibase Community 5.0.4 Release Notes

Liquibase Community v5.0.4 is a security-focused release: credentials are now redacted from error messages and logs, new opt-in lockdown flags let you restrict changelog features that execute code, and more than thirty fixes land across Oracle, PostgreSQL, MySQL and MariaDB, diff-changelog, and embedded use. Thanks to the twenty-three contributors who made their first contribution in this release!

Latest release: v5.0.4, August 20, 2026

Nightly builds: Updated automatically after each successful test run on main: https://github.com/liquibase/liquibase/releases/tag/nightly

Roadmap: https://github.com/orgs/liquibase/projects/3/views/9?layout=board

Thank you to every contributor who filed an issue, reviewed code, or submitted a fix.

New Contributors

@v-petrovych made their first contribution in #7729

@mgustimz made their first contribution in #7696

@Khromushkin made their first contribution in #7759

@officialasishkumar made their first contribution in #7705

@jstastny made their first contribution in #7566

@pranithreddym made their first contribution in #7708

@edu1006 made their first contribution in #7847

@profiluefter made their first contribution in #7560

@Devansh-ops made their first contribution in #7834

@singhvishalkr made their first contribution in #7725

@Akshatsharma2205 made their first contribution in #7798

@renechoi made their first contribution in #7869

@om7057 made their first contribution in #7825

@yosimasu made their first contribution in #7831

@makssent made their first contribution in #7850

@felhag made their first contribution in #7803

@hutiefang76 made their first contribution in #7835

@sakshichitnis27 made their first contribution in #7866

@seonwooj0810 made their first contribution in #7812

@kamilkrzywanski made their first contribution in #7848

@fudianchn made their first contribution in #7881

@ET-TOUNANI made their first contribution in #7801

@pwielgolaski made their first contribution in #7909

What's in this release

Security

Release signing key rotated: The Liquibase release signing key was rotated following the revocation of the old key. GPG verification requires Liquibase Community 5.0.4 or later. Past releases are safe and untampered.

(#7737, #7738, #7740, #7756, #7739, #7746) by @v-petrovych Database credentials are now redacted from error messages, logs, and stored parameters. If you pass a JDBC URL with embedded credentials (such as jdbc:postgresql://user:password@host/db) and the connection fails, the password no longer appears in the resulting error message or in log output. This covers unrecognized-driver errors and mistyped offline: URLs, and the URL sanitizer now handles PostgreSQL, SQL Server, and third-party JDBC drivers rather than only a few specific databases. Credential-bearing values captured from CLI arguments, liquibase.properties defaults files, and Maven plugin parameters are now masked before being stored internally. The init start-h2 example server also now prints ***** instead of the real password in its connection information banner. If you relied on copying the password from that output, use the value you configured instead (the default is letmein).

(#7741, #7742, #7743, #7764) by @v-petrovych Passwords are cleared from memory once Liquibase is done with them. The CLI, the Maven plugin, and the Ant tasks now release password values as soon as the operation that needed them finishes. For Ant, clearing happens when the build finishes, so a shared <database> definition keeps working across multiple tasks in one build. This shortens the window in which a heap dump or memory inspection of a long-running JVM could expose your credentials. If you call Liquibase programmatically, CommandScope.execute() does not clear credentials automatically (so reusing one scope for several executions keeps working), and you can opt in by calling the now-public clearCredentialArguments() after your last execution.

(#7747, #7748, #7768, #7767, #7766, #7765, #7750) by @v-petrovych New opt-in lockdown flags for changelog features that can execute code or reach outside your project. Several changelog features are intentionally powerful under Liquibase's standard trust model of team-authored, team-reviewed changelogs. If you run changelogs from less-trusted sources, you can now disable each of these features individually. Every flag defaults to true, so nothing changes unless you set it. When a flag is set to false, the offending element is rejected with a clear error that names the flag, before any of its code runs.

... (truncated)

Changelog

Sourced from org.liquibase:liquibase-core's changelog.

Liquibase Community 5.0.4 is a minor patch release

See the Liquibase Community 5.0.4 Release Notes for the complete set of release information.

New Features

Add nocontexts pseudo-context to allow opt-in strict context matching by @filipelautert with @Copilot in liquibase/liquibase#7650

feat: Provide a listUnexpectedChangeSets() to be consistent with other methods in that class by @Vampire in liquibase/liquibase#7522

INT-2211: reference-scoped configuration for two-connection commands by @SvampX in liquibase/liquibase#7841

Detect Firebird-compatible RedDatabase servers as Firebird by @makssent in liquibase/liquibase#7850

Bug Fixes

Fix #7602: Set database filter when user-provided ChangeLogParameters is passed by @mgustimz in liquibase/liquibase#7696

fix(postgres): preserve PARTITION BY in diff-changelog (#6885) by @Khromushkin in liquibase/liquibase#7759

Fix Redshift snapshot failure: skip pg_partitioned_table enrichment on pre-PG10 servers by @KushnirykOleh in liquibase/liquibase#7827

fix(mysql): preserve timestamp column attributes in native types by @officialasishkumar in liquibase/liquibase#7705

fix: use CURRENT_TIMESTAMP instead of SYSTIMESTAMP for Oracle by @filipelautert in liquibase/liquibase#7641

fix: reduce misleading WARN log when CLOB value contains spaces by @jstastny in liquibase/liquibase#7566

Fix MySQL TINYINT(1) snapshotted as BIT(1) causing spurious diffs by @pranithreddym in liquibase/liquibase#7708

Fix #7623: Handle null URL in isCorrectDatabaseImplementation by @mgustimz in liquibase/liquibase#7697

fix: use integerExp type for numeric sequence attributes in XSD by @filipelautert in liquibase/liquibase#7643

fix(changelog): fall back when stored changelog path is missing by @officialasishkumar in liquibase/liquibase#7704

Fix primaryKeyExists precondition ignoring PK name on Oracle by @filipelautert in liquibase/liquibase#7645

INT-2215: don't silently drop same-order value modifiers / table-name generators by @SvampX in liquibase/liquibase#7845

fix: Update list of reserved keywords for MySQL and MariaDB by @profiluefter in liquibase/liquibase#7560

Fix Oracle statement splitting for q-quoted string literals by @Devansh-ops in liquibase/liquibase#7834

Treat 'NULL' default value as null for MySQL/MariaDB enum columns by @singhvishalkr in liquibase/liquibase#7725

Fix grouped context expression parsing by @Akshatsharma2205 in liquibase/liquibase#7798

fix the ChangeSet checksum cache to recalculate when a different checksum version is requested by @renechoi in liquibase/liquibase#7869

fix: share a single root scope across threads by @filipelautert in liquibase/liquibase#7877

fix: give each command execution its own CommandStep instances by @filipelautert in liquibase/liquibase#7876

Refactor: track MDC scope entries per-thread by @om7057 in liquibase/liquibase#7825

Fix --output-default-schema/--output-default-catalog being ignored by update-sql and other SQL output commands by @yosimasu in liquibase/liquibase#7831

Route deprecated-AWS-extension warning to System.err by @wwillard7800 in liquibase/liquibase#7884

fix: default-schema-name not working when runInTransaction is false by @felhag in liquibase/liquibase#7803

Fix formatted SQL precondition messages by @hutiefang76 in liquibase/liquibase#7835

Fix URL loading from driver properties file by @sakshichitnis27 in liquibase/liquibase#7866

fix(snapshot): close owning Statement in ResultSetCache.extract to prevent JDBC Statement leak by @seonwooj0810 in liquibase/liquibase#7812

Fix service discovery aborting when a provider fails to load by @kamilkrzywanski in liquibase/liquibase#7848

Fix ClassCastException in diff-changelog when a PK/UC backing index is delegated by @fudianchn in liquibase/liquibase#7881

fix: preserve addColumn before foreign key in diff changelog output by @ET-TOUNANI in liquibase/liquibase#7801

Fix uppercase acronym parameters being dropped in customChange by @fudianchn in liquibase/liquibase#7882

Fix: don't release the changelog lock in AbstractUpdateCommandStep unless it was acquired there by @om7057 in liquibase/liquibase#7886

fix: do not hoist a foreign key column ahead of its own table by @filipelautert in liquibase/liquibase#7898

fix: carry the index relation down to its columns by @filipelautert in liquibase/liquibase#7897

Fix fast check cache after rollback by @hutiefang76 in liquibase/liquibase#7896

fix: ship commons-text and commons-collections4 in the distribution again by @filipelautert in liquibase/liquibase#7907

fix: drop throwable from ChangeSet SEVERE log to prevent double-reporting by @wwillard7800 in liquibase/liquibase#7910

fix: scope per-database service cleanup so parallel Maven reactor builds no longer corrupt each other's state by @pwielgolaski in liquibase/liquibase#7909

... (truncated)

Commits

2c25134 Update changelog.txt for 5.0.4 (#7920)
15a0885 [TECHOPS-1048] Gate DigiCert KeyLocker signing behind dry_run, drop from inst...
c7a01d5 chore(deps): bump the github-actions group with 5 updates (#7917)
83e6a89 chore(deps): bump the test-deps group with 2 updates (#7916)
59a7617 fix: emit valid timestamp with time zone syntax (#7808)
0f1129f fix: scope per-database service cleanup so parallel Maven reactor builds no l...
e5ec227 fix: drop throwable from ChangeSet SEVERE log to prevent double-reporting (#7...
56c9dca chore(deps): bump org.apache.maven:apache-maven from 3.9.5 to 3.9.16 (#7914)
5568a48 chore(deps): bump org.apache.maven.wrapper:maven-wrapper from 3.2.0 to 3.3.4 ...
e3cc406 Fix the SonarCloud quality gate: suppress false-positive S3077 on two safely-...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.liquibase:liquibase-core](https://github.com/liquibase/liquibase) from 4.33.0 to 5.0.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/liquibase/liquibase/releases">org.liquibase:liquibase-core's releases</a>.</em></p> <blockquote> <h2>Liquibase v5.0.4</h2> <h1>Liquibase Community 5.0.4 Release Notes</h1> <h3>Liquibase Community v5.0.4 is a security-focused release: credentials are now redacted from error messages and logs, new opt-in lockdown flags let you restrict changelog features that execute code, and more than thirty fixes land across Oracle, PostgreSQL, MySQL and MariaDB, diff-changelog, and embedded use. Thanks to the twenty-three contributors who made their first contribution in this release!</h3> <p><strong>Latest release:</strong> v5.0.4, August 20, 2026</p> <p><strong>Nightly builds</strong>: Updated automatically after each successful test run on main: <a href="https://github.com/liquibase/liquibase/releases/tag/nightly">https://github.com/liquibase/liquibase/releases/tag/nightly</a></p> <p><strong>Roadmap:</strong> <a href="https://github.com/orgs/liquibase/projects/3/views/9?layout=board">https://github.com/orgs/liquibase/projects/3/views/9?layout=board</a></p> <p>Thank you to every contributor who filed an issue, reviewed code, or submitted a fix.</p> <h3>New Contributors</h3> <ul> <li><a href="https://github.com/v-petrovych"><code>@v-petrovych</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7729">#7729</a></li> <li><a href="https://github.com/mgustimz"><code>@mgustimz</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7696">#7696</a></li> <li><a href="https://github.com/Khromushkin"><code>@Khromushkin</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7759">#7759</a></li> <li><a href="https://github.com/officialasishkumar"><code>@officialasishkumar</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7705">#7705</a></li> <li><a href="https://github.com/jstastny"><code>@jstastny</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7566">#7566</a></li> <li><a href="https://github.com/pranithreddym"><code>@pranithreddym</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7708">#7708</a></li> <li><a href="https://github.com/edu1006"><code>@edu1006</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7847">#7847</a></li> <li><a href="https://github.com/profiluefter"><code>@profiluefter</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7560">#7560</a></li> <li><a href="https://github.com/Devansh-ops"><code>@Devansh-ops</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7834">#7834</a></li> <li><a href="https://github.com/singhvishalkr"><code>@singhvishalkr</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7725">#7725</a></li> <li><a href="https://github.com/Akshatsharma2205"><code>@Akshatsharma2205</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7798">#7798</a></li> <li><a href="https://github.com/renechoi"><code>@renechoi</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7869">#7869</a></li> <li><a href="https://github.com/om7057"><code>@om7057</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7825">#7825</a></li> <li><a href="https://github.com/yosimasu"><code>@yosimasu</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7831">#7831</a></li> <li><a href="https://github.com/makssent"><code>@makssent</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7850">#7850</a></li> <li><a href="https://github.com/felhag"><code>@felhag</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7803">#7803</a></li> <li><a href="https://github.com/hutiefang76"><code>@hutiefang76</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7835">#7835</a></li> <li><a href="https://github.com/sakshichitnis27"><code>@sakshichitnis27</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7866">#7866</a></li> <li><a href="https://github.com/seonwooj0810"><code>@seonwooj0810</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7812">#7812</a></li> <li><a href="https://github.com/kamilkrzywanski"><code>@kamilkrzywanski</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7848">#7848</a></li> <li><a href="https://github.com/fudianchn"><code>@fudianchn</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7881">#7881</a></li> <li><a href="https://github.com/ET-TOUNANI"><code>@ET-TOUNANI</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7801">#7801</a></li> <li><a href="https://github.com/pwielgolaski"><code>@pwielgolaski</code></a> made their first contribution in <a href="https://redirect.github.com/liquibase/liquibase/pull/7909">#7909</a></li> </ul> <h2>What's in this release</h2> <h3>Security</h3> <p><strong>Release signing key rotated:</strong> The Liquibase release signing key was rotated following the revocation of the old key. GPG verification requires Liquibase Community 5.0.4 or later. Past releases are safe and untampered.</p> <p>(<a href="https://redirect.github.com/liquibase/liquibase/issues/7737">#7737</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7738">#7738</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7740">#7740</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7756">#7756</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7739">#7739</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7746">#7746</a>) by <a href="https://github.com/v-petrovych"><code>@v-petrovych</code></a> Database credentials are now redacted from error messages, logs, and stored parameters. If you pass a JDBC URL with embedded credentials (such as <code>jdbc:postgresql://user:password@host/db</code>) and the connection fails, the password no longer appears in the resulting error message or in log output. This covers unrecognized-driver errors and mistyped <code>offline:</code> URLs, and the URL sanitizer now handles PostgreSQL, SQL Server, and third-party JDBC drivers rather than only a few specific databases. Credential-bearing values captured from CLI arguments, <code>liquibase.properties</code> defaults files, and Maven plugin parameters are now masked before being stored internally. The <code>init start-h2</code> example server also now prints <code>*****</code> instead of the real password in its connection information banner. If you relied on copying the password from that output, use the value you configured instead (the default is <code>letmein</code>).</p> <p>(<a href="https://redirect.github.com/liquibase/liquibase/issues/7741">#7741</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7742">#7742</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7743">#7743</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7764">#7764</a>) by <a href="https://github.com/v-petrovych"><code>@v-petrovych</code></a> Passwords are cleared from memory once Liquibase is done with them. The CLI, the Maven plugin, and the Ant tasks now release password values as soon as the operation that needed them finishes. For Ant, clearing happens when the build finishes, so a shared <code><database></code> definition keeps working across multiple tasks in one build. This shortens the window in which a heap dump or memory inspection of a long-running JVM could expose your credentials. If you call Liquibase programmatically, <code>CommandScope.execute()</code> does not clear credentials automatically (so reusing one scope for several executions keeps working), and you can opt in by calling the now-public <code>clearCredentialArguments()</code> after your last execution.</p> <p>(<a href="https://redirect.github.com/liquibase/liquibase/issues/7747">#7747</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7748">#7748</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7768">#7768</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7767">#7767</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7766">#7766</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7765">#7765</a>, <a href="https://redirect.github.com/liquibase/liquibase/issues/7750">#7750</a>) by <a href="https://github.com/v-petrovych"><code>@v-petrovych</code></a> New opt-in lockdown flags for changelog features that can execute code or reach outside your project. Several changelog features are intentionally powerful under Liquibase's standard trust model of team-authored, team-reviewed changelogs. If you run changelogs from less-trusted sources, you can now disable each of these features individually. Every flag defaults to <code>true</code>, so nothing changes unless you set it. When a flag is set to <code>false</code>, the offending element is rejected with a clear error that names the flag, before any of its code runs.</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/liquibase/liquibase/blob/main/changelog.txt">org.liquibase:liquibase-core's changelog</a>.</em></p> <blockquote> <h1>Liquibase Community 5.0.4 is a minor patch release</h1> <p>See the <a href="https://docs.liquibase.com/community/release-notes/liquibase-community-5-0-4-release-notes">Liquibase Community 5.0.4 Release Notes</a> for the complete set of release information.</p> <h2>New Features</h2> <ul> <li>Add <code>nocontexts</code> pseudo-context to allow opt-in strict context matching by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7650">liquibase/liquibase#7650</a></li> <li>feat: Provide a listUnexpectedChangeSets() to be consistent with other methods in that class by <a href="https://github.com/Vampire"><code>@Vampire</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7522">liquibase/liquibase#7522</a></li> <li>INT-2211: reference-scoped configuration for two-connection commands by <a href="https://github.com/SvampX"><code>@SvampX</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7841">liquibase/liquibase#7841</a></li> <li>Detect Firebird-compatible RedDatabase servers as Firebird by <a href="https://github.com/makssent"><code>@makssent</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7850">liquibase/liquibase#7850</a></li> </ul> <h2>Bug Fixes</h2> <ul> <li>Fix <a href="https://redirect.github.com/liquibase/liquibase/issues/7602">#7602</a>: Set database filter when user-provided ChangeLogParameters is passed by <a href="https://github.com/mgustimz"><code>@mgustimz</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7696">liquibase/liquibase#7696</a></li> <li>fix(postgres): preserve PARTITION BY in diff-changelog (<a href="https://redirect.github.com/liquibase/liquibase/issues/6885">#6885</a>) by <a href="https://github.com/Khromushkin"><code>@Khromushkin</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7759">liquibase/liquibase#7759</a></li> <li>Fix Redshift snapshot failure: skip pg_partitioned_table enrichment on pre-PG10 servers by <a href="https://github.com/KushnirykOleh"><code>@KushnirykOleh</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7827">liquibase/liquibase#7827</a></li> <li>fix(mysql): preserve timestamp column attributes in native types by <a href="https://github.com/officialasishkumar"><code>@officialasishkumar</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7705">liquibase/liquibase#7705</a></li> <li>fix: use CURRENT_TIMESTAMP instead of SYSTIMESTAMP for Oracle by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7641">liquibase/liquibase#7641</a></li> <li>fix: reduce misleading WARN log when CLOB value contains spaces by <a href="https://github.com/jstastny"><code>@jstastny</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7566">liquibase/liquibase#7566</a></li> <li>Fix MySQL TINYINT(1) snapshotted as BIT(1) causing spurious diffs by <a href="https://github.com/pranithreddym"><code>@pranithreddym</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7708">liquibase/liquibase#7708</a></li> <li>Fix <a href="https://redirect.github.com/liquibase/liquibase/issues/7623">#7623</a>: Handle null URL in isCorrectDatabaseImplementation by <a href="https://github.com/mgustimz"><code>@mgustimz</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7697">liquibase/liquibase#7697</a></li> <li>fix: use integerExp type for numeric sequence attributes in XSD by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7643">liquibase/liquibase#7643</a></li> <li>fix(changelog): fall back when stored changelog path is missing by <a href="https://github.com/officialasishkumar"><code>@officialasishkumar</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7704">liquibase/liquibase#7704</a></li> <li>Fix primaryKeyExists precondition ignoring PK name on Oracle by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7645">liquibase/liquibase#7645</a></li> <li>INT-2215: don't silently drop same-order value modifiers / table-name generators by <a href="https://github.com/SvampX"><code>@SvampX</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7845">liquibase/liquibase#7845</a></li> <li>fix: Update list of reserved keywords for MySQL and MariaDB by <a href="https://github.com/profiluefter"><code>@profiluefter</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7560">liquibase/liquibase#7560</a></li> <li>Fix Oracle statement splitting for q-quoted string literals by <a href="https://github.com/Devansh-ops"><code>@Devansh-ops</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7834">liquibase/liquibase#7834</a></li> <li>Treat 'NULL' default value as null for MySQL/MariaDB enum columns by <a href="https://github.com/singhvishalkr"><code>@singhvishalkr</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7725">liquibase/liquibase#7725</a></li> <li>Fix grouped context expression parsing by <a href="https://github.com/Akshatsharma2205"><code>@Akshatsharma2205</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7798">liquibase/liquibase#7798</a></li> <li>fix the ChangeSet checksum cache to recalculate when a different checksum version is requested by <a href="https://github.com/renechoi"><code>@renechoi</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7869">liquibase/liquibase#7869</a></li> <li>fix: share a single root scope across threads by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7877">liquibase/liquibase#7877</a></li> <li>fix: give each command execution its own CommandStep instances by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7876">liquibase/liquibase#7876</a></li> <li>Refactor: track MDC scope entries per-thread by <a href="https://github.com/om7057"><code>@om7057</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7825">liquibase/liquibase#7825</a></li> <li>Fix --output-default-schema/--output-default-catalog being ignored by update-sql and other SQL output commands by <a href="https://github.com/yosimasu"><code>@yosimasu</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7831">liquibase/liquibase#7831</a></li> <li>Route deprecated-AWS-extension warning to System.err by <a href="https://github.com/wwillard7800"><code>@wwillard7800</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7884">liquibase/liquibase#7884</a></li> <li>fix: default-schema-name not working when runInTransaction is false by <a href="https://github.com/felhag"><code>@felhag</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7803">liquibase/liquibase#7803</a></li> <li>Fix formatted SQL precondition messages by <a href="https://github.com/hutiefang76"><code>@hutiefang76</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7835">liquibase/liquibase#7835</a></li> <li>Fix URL loading from driver properties file by <a href="https://github.com/sakshichitnis27"><code>@sakshichitnis27</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7866">liquibase/liquibase#7866</a></li> <li>fix(snapshot): close owning Statement in ResultSetCache.extract to prevent JDBC Statement leak by <a href="https://github.com/seonwooj0810"><code>@seonwooj0810</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7812">liquibase/liquibase#7812</a></li> <li>Fix service discovery aborting when a provider fails to load by <a href="https://github.com/kamilkrzywanski"><code>@kamilkrzywanski</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7848">liquibase/liquibase#7848</a></li> <li>Fix ClassCastException in diff-changelog when a PK/UC backing index is delegated by <a href="https://github.com/fudianchn"><code>@fudianchn</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7881">liquibase/liquibase#7881</a></li> <li>fix: preserve addColumn before foreign key in diff changelog output by <a href="https://github.com/ET-TOUNANI"><code>@ET-TOUNANI</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7801">liquibase/liquibase#7801</a></li> <li>Fix uppercase acronym parameters being dropped in customChange by <a href="https://github.com/fudianchn"><code>@fudianchn</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7882">liquibase/liquibase#7882</a></li> <li>Fix: don't release the changelog lock in AbstractUpdateCommandStep unless it was acquired there by <a href="https://github.com/om7057"><code>@om7057</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7886">liquibase/liquibase#7886</a></li> <li>fix: do not hoist a foreign key column ahead of its own table by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7898">liquibase/liquibase#7898</a></li> <li>fix: carry the index relation down to its columns by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7897">liquibase/liquibase#7897</a></li> <li>Fix fast check cache after rollback by <a href="https://github.com/hutiefang76"><code>@hutiefang76</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7896">liquibase/liquibase#7896</a></li> <li>fix: ship commons-text and commons-collections4 in the distribution again by <a href="https://github.com/filipelautert"><code>@filipelautert</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7907">liquibase/liquibase#7907</a></li> <li>fix: drop throwable from ChangeSet SEVERE log to prevent double-reporting by <a href="https://github.com/wwillard7800"><code>@wwillard7800</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7910">liquibase/liquibase#7910</a></li> <li>fix: scope per-database service cleanup so parallel Maven reactor builds no longer corrupt each other's state by <a href="https://github.com/pwielgolaski"><code>@pwielgolaski</code></a> in <a href="https://redirect.github.com/liquibase/liquibase/pull/7909">liquibase/liquibase#7909</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/liquibase/liquibase/commit/2c25134e198054c70da3122b6179b64d2279b1c9"><code>2c25134</code></a> Update changelog.txt for 5.0.4 (<a href="https://redirect.github.com/liquibase/liquibase/issues/7920">#7920</a>)</li> <li><a href="https://github.com/liquibase/liquibase/commit/15a08857a34da6f7e0dc8d1de2ed8631313a0fd4"><code>15a0885</code></a> [TECHOPS-1048] Gate DigiCert KeyLocker signing behind dry_run, drop from inst...</li> <li><a href="https://github.com/liquibase/liquibase/commit/c7a01d5e326a99b7b4f1cd3d005e3c2afc43492b"><code>c7a01d5</code></a> chore(deps): bump the github-actions group with 5 updates (<a href="https://redirect.github.com/liquibase/liquibase/issues/7917">#7917</a>)</li> <li><a href="https://github.com/liquibase/liquibase/commit/83e6a89f83b4b5eb1571f966fad8f5ccd5c9a14d"><code>83e6a89</code></a> chore(deps): bump the test-deps group with 2 updates (<a href="https://redirect.github.com/liquibase/liquibase/issues/7916">#7916</a>)</li> <li><a href="https://github.com/liquibase/liquibase/commit/59a7617172df89a77a5f8f3510daf48a91e8f246"><code>59a7617</code></a> fix: emit valid timestamp with time zone syntax (<a href="https://redirect.github.com/liquibase/liquibase/issues/7808">#7808</a>)</li> <li><a href="https://github.com/liquibase/liquibase/commit/0f1129f3400c7782501b9ad5ab6c58e06507f556"><code>0f1129f</code></a> fix: scope per-database service cleanup so parallel Maven reactor builds no l...</li> <li><a href="https://github.com/liquibase/liquibase/commit/e5ec227dea5de6c6e75703003e8aa133af92152c"><code>e5ec227</code></a> fix: drop throwable from ChangeSet SEVERE log to prevent double-reporting (<a href="https://redirect.github.com/liquibase/liquibase/issues/7">#7</a>...</li> <li><a href="https://github.com/liquibase/liquibase/commit/56c9dcaeaec5bf126686b7f1521f749b9d86e63b"><code>56c9dca</code></a> chore(deps): bump org.apache.maven:apache-maven from 3.9.5 to 3.9.16 (<a href="https://redirect.github.com/liquibase/liquibase/issues/7914">#7914</a>)</li> <li><a href="https://github.com/liquibase/liquibase/commit/5568a48af154cd1c200528f433e642740f280ff8"><code>5568a48</code></a> chore(deps): bump org.apache.maven.wrapper:maven-wrapper from 3.2.0 to 3.3.4 ...</li> <li><a href="https://github.com/liquibase/liquibase/commit/e3cc406be8d4126a0e77a60f85003a62bac23706"><code>e3cc406</code></a> Fix the SonarCloud quality gate: suppress false-positive S3077 on two safely-...</li> <li>Additional commits viewable in <a href="https://github.com/liquibase/liquibase/compare/v4.33.0...v5.0.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.liquibase:liquibase-core&package-manager=maven&previous-version=4.33.0&new-version=5.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

KofTwentyTwo (Migrated from github.com) reviewed

2026-10-22 13:25:03 +00:00

You are not authorized to merge this pull request.

This pull request can be merged automatically.

This branch is out-of-date with the base branch

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/maven/develop/org.liquibase-liquibase-core-5.0.4:dependabot/maven/develop/org.liquibase-liquibase-core-5.0.4

git checkout dependabot/maven/develop/org.liquibase-liquibase-core-5.0.4

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-release-notes#16