🔐 Update dependencies to fix vulnerabilities

.project-keeper.yml

@@ -7,8 +7,8 @@ sources:
 build:
   runnerOs: ubuntu-latest
   exasolDbVersions:
-    - "2025.2.1"
-    - "2025.1.10"
+    - "2026.1.0"
+    - "2025.1.13"
   workflows:
     - name: ci-build.yml
       stepCustomizations:

doc/changes/changes_3.0.1.md

@@ -0,0 +1,49 @@
+# Virtual Schema for SQLServer 3.0.1, released 2026-07-31
+
+Code name: Fixed vulnerability CVE-2026-9563 in org.eclipse.parsson:parsson:jar:1.1.7:test
+
+## Summary
+
+This release fixes the following vulnerability:
+
+### CVE-2026-9563 (CWE-400) in dependency `org.eclipse.parsson:parsson:jar:1.1.7:test`
+In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of characters consumed while parsing a single JSON document. Applications that parse attacker- controlled JSON can be forced to consume excessive CPU and memory by processing very large documents, including large arrays, objects, strings, numbers, whitespace, or nested structures, resulting in a denial of service. Eclipse Parsson 1.1.8 introduces a configurable maximum parsing limit with a default limit of 15 million parser-consumed characters.
+#### References
+* https://guide.sonatype.com/vulnerability/CVE-2026-9563?component-type=maven&component-name=org.eclipse.parsson%2Fparsson&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
+* http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2026-9563
+* https://github.com/eclipse-ee4j/parsson/pull/169
+* https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/444
+
+## Security
+
+* #48: Fixed vulnerability CVE-2026-9563 in dependency `org.eclipse.parsson:parsson:jar:1.1.7:test`
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Updated `com.exasol:virtual-schema-common-jdbc:14.0.2` to `14.0.4`
+
+### Test Dependency Updates
+
+* Updated `com.exasol:exasol-test-setup-abstraction-java:2.1.11` to `3.0.0`
+* Updated `com.exasol:exasol-testcontainers:7.2.3` to `8.0.1`
+* Updated `com.exasol:hamcrest-resultset-matcher:1.7.2` to `1.7.3`
+* Updated `com.exasol:test-db-builder-java:4.0.0` to `4.0.2`
+* Updated `com.exasol:udf-debugging-java:0.6.18` to `0.6.20`
+* Updated `com.exasol:virtual-schema-common-jdbc:14.0.2` to `14.0.4`
+* Updated `org.slf4j:slf4j-jdk14:2.0.17` to `2.0.18`
+
+### Plugin Dependency Updates
+
+* Updated `com.exasol:artifact-reference-checker-maven-plugin:0.4.4` to `1.0.1`
+* Updated `com.exasol:error-code-crawler-maven-plugin:2.0.7` to `2.1.0`
+* Updated `com.exasol:project-keeper-maven-plugin:5.6.1` to `5.7.4`
+* Removed `com.exasol:quality-summarizer-maven-plugin:0.2.1`
+* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.6.2` to `3.6.3`
+* Updated `org.apache.maven.plugins:maven-failsafe-plugin:3.5.5` to `3.5.6`
+* Updated `org.apache.maven.plugins:maven-site-plugin:3.21.0` to `3.22.0`
+* Updated `org.apache.maven.plugins:maven-surefire-plugin:3.5.5` to `3.5.6`
+* Updated `org.jacoco:jacoco-maven-plugin:0.8.14` to `0.8.15`
+* Updated `org.sonarsource.scanner.maven:sonar-maven-plugin:5.5.0.6356` to `5.7.0.6970`
+* Added `org.spdx:spdx-maven-plugin:1.0.4`

doc/user_guide/sqlserver_user_guide.md

@@ -48,7 +48,7 @@ The SQL statement below creates the adapter script, defines the Java class that
 ```sql
 CREATE OR REPLACE JAVA ADAPTER SCRIPT SCHEMA_FOR_VS_SCRIPT.ADAPTER_SCRIPT_SQLSERVER AS
   %scriptclass com.exasol.adapter.RequestDispatcher;
-  %jar /buckets/<BFS service>/<bucket>/virtual-schema-dist-14.0.2-sqlserver-3.0.0.jar;
+  %jar /buckets/<BFS service>/<bucket>/virtual-schema-dist-14.0.4-sqlserver-3.0.1.jar;
   %jar /buckets/<BFS service>/<bucket>/mssql-jdbc-<version>.jre8.jar;
 /
 ```