Liquibase 4.16.0 Release Notes

Liquibase v4.16.0 is a major release.

See GitHub formatted release notes for more information. Full changelog: 4.15.0–4.16.0 (September 9, 2022)

Notable Changes

  • [LABS] The liquibase flow command and flow files are still available under the Liquibase Labs license.
    • Documentation on flow is here: flow
    • If you want to provide feedback on this capability, please email mario@liquibase.com.
  • [PRO] The Quality Checks for Databases are now available to all Pro license users. These checks inspect your active database, or a Liquibase-generated snapshot for compliance with your rules. Learn more here: Library of Policy Checks
  • Introduces "contextFilter" and "labelFilter" replacement settings by @nvoxland in 2971
    • Liquibase has always had a way to use "labels" and "contexts" and then filter on those attributes in order to control which changesets are considered for execution. The new "contextFilter" and "labelFilter" attributes help simplify workflows and prevent confusion.

Enhancements

Fixes

  • Fix addColumn on mysql when including a "value" attribute by @nvoxland in #3070
  • Add support for AS <dataType> clause for H2 since version 2.0 by @marcus-nl in #3047
  • Fixed NUMBER not compatible with H2 by @nick318 in #3098
  • SpringResourceAccessor: fix issue with incorrect match pattern for files from classPath root by @danilmalkin in #3095
  • Made liquibase.snapshot.ResultSetCache an extensible class. by @breglerj in #2087
  • Added support for \u2116 symbol win1251 Cyrillic symbol of number by @Stuchalin in #1324
  • Tidy ExecutorService code, remove superfluous map access (Issue 1841) by @jamey-clari in #1842
  • Fixed order of enum values on MySQL 8 by @Tantalon in #3150
  • Removed invalid warning in Maven by @nvoxland in #3189
  • [PRO] DAT-10810 QC: checks show changes (--show-cols flag, drop some, etc) by @dyadyushko in #3187

Updates

Security Updates

Updates the snakeyaml dependency shipped in the liquibase-maven-plugin POM to address CVE-2022-25857

JDBC Driver and Third-Party Library Updates

  • Upgraded postgresql from 42.4.0 to 42.4.1 by @dependabot in #3145
  • Upgraded mariadb-java-client from 3.0.6 to 3.0.7 by @dependabot in #3149
  • Upgraded sqlite-jdbc from 3.36.0.3 to 3.39.2.0 by @dependabot in #3148
  • Upgraded mssql-jdbc from 10.2.1.jre8 to 11.2.0.jre8 by @dependabot in #3162
  • Upgraded postgresql from 42.4.1 to 42.5.0 by @dependabot in #3199
  • Upgraded sqlite-jdbc from 3.39.2.0 to 3.39.2.1 by @dependabot in #3198
  • Upgraded snakeyaml from 1.30 to 1.31 by @dependabot in #3224
  • Upgraded snakeyaml in liquibase-maven-plugin from 1.27 to 1.31 by @dependabot in #3263

OWASP Dependency Check: Reported Vulnerabilities

snakeyaml.jar – This is a "medium" vulnerability reported against the snakeyaml library. We are currently on the newest version of snakeyaml and there is no fix for the issue as of yet.

New Contributors

  • @marcus-nl made their first contribution in #3047
  • @nick318 made their first contribution in #3098
  • @danilmalkin made their first contribution in #3095
  • @breglerj made their first contribution in #3087
  • @Stuchalin made their first contribution in #1324
  • @jamey-clari made their first contribution in #1842
  • @Tantalon made their first contribution in #3150
  • @atzawada made their first contribution in #1386
  • @MalloD12 made their first contribution in #3210
  • @dyadyushko made their first contribution in #3187