chore(deps): Update dependencies

[reneleonhardt]

Updates

• Update dependencies and plugins
• Test against newer Java versions and remove outdated ones
• Update GitHub Actions
• Let Dependabot update Maven and GitHub Actions

Fixes

• Default LC_ALL for Unix (otherwise initidb fails), my Mac has nothing set 😅

Improvements

• Introduce dependency management (Apache Commons is breaking a lot lately 👀)
• Extract versions into properties
• Use maven-enforcer-plugin dependencyConvergence (fixes Version 2.0.7 includes conflicting dependency versions #133)
• Run tests in parallel (half the time on my machine)

Recommendations

• Upgrade maven-gpg-plugin and check release

[tomix26]

Thank you very much for you contribution. At first glance the code looks very good, but I need to look at it in more detail. I will do it as soon as I can. Probably within the next week.

[Crystark]

Great job there on the POM. Thanks for your work @reneleonhardt. Looking forward to using this.

[reneleonhardt]

Yeah, it wasn't easy to build on Apple Silicon, never had to use this profile trick before 😅
Had to rebuild many times to test all the different combinations... if you can, extend your test matrix by building on ARM and Windows too, at least for the happy path.

[tomix26]

@reneleonhardt Do you plan to incorporate the suggested changes? If you don't mind, I could do that and finish the pull request.

[reneleonhardt]

@reneleonhardt Do you plan to incorporate the suggested changes? If you don't mind, I could do that and finish the pull request.

It's your project, you can do what you want, I'm glad that you at least plan to merge my work 😅 👍

[reneleonhardt]

I updated some more dependencies (my last updates were a month ago, so of course there already were a dozen more updates 😅).
Could you start the test workflow? It seems not to be configured to run automatically in your PRs.

Isn't it possible to update embedded-postgres-binaries to 16, it has to stay on 14?
Postgres 17 is only two months away...

[tomix26]

I updated some more dependencies

Great, I like it.

It seems not to be configured to run automatically in your PRs

It should run automatically, but not when there are changes in GitHub workflows.

Isn't it possible to update embedded-postgres-binaries to 16

This is also a potentially backwards incompatible change. So I would rather change it in the next major version.

[reneleonhardt]

Isn't it possible to update Flyway 7 to 9? 2 years newer and fewer security vulnerabilities...
https://mvnrepository.com/artifact/org.flywaydb/flyway-core

[tomix26]

Isn't it possible to update Flyway 7 to 9? 2 years newer and fewer security vulnerabilities... https://mvnrepository.com/artifact/org.flywaydb/flyway-core

Ok, great idea, let's do it. We could also update liquibase-core. Both libraries are optional dependencies, so updating them should be safe.

I would propose the following versions:

• flyway-core: 9.22.3
• liquibase-core: 4.24.0

After this change, I'm going to merge the pull request.

[tomix26]

I've just noticed that you've already updated liquibase-core. The major version is still the same, so let's keep the latest version there.

[reneleonhardt]

Oh, I didn't know that you didn't want to squash, that's not a meaningful commit history... 😢
Please test everything if you can, thank you for merging!

[tomix26]

Don't worry, this project isn't so big yet that a few commits would cause any problems 🙂

Thank you very much for all your effort. I really appreciate it.

It's great to see others contributing to the project.

[reneleonhardt]

You're welcome, feels good to be appreciated, most projects don't allow any updates or security fixes.
Thank you for providing the best database as an embedded process, I hope we can make the developer experience and performance as good as possible to become a superior alternative to testcontainers (which JDBC and Postgres support is awful in my experience) 😄

[reneleonhardt]

@tomix26 I'm trying to update zonkyio/embedded-database-spring-test#279 too which isn't easier when tests are not running locally... can you tag 2.1.0?

[tomix26]

If you mean releasing a new version, I'll try to do that during this week.