#146: Fixed CVE-2024-26308 and CVE-2024-25710 in test dependencies

.gitattributes

@@ -6,6 +6,7 @@ dependencies.md                             linguist-generated=true
 doc/changes/changelog.md                    linguist-generated=true
 .github/workflows/broken_links_checker.yml  linguist-generated=true
 .github/workflows/dependencies_check.yml    linguist-generated=true
+.github/workflows/dependencies_update.yml   linguist-generated=true
 extension/package-lock.json                 linguist-generated=true
 .settings/org.eclipse.jdt.core.prefs        linguist-generated=true
 .settings/org.eclipse.jdt.ui.prefs          linguist-generated=true

.github/workflows/ci-build.yml

@@ -1,67 +1,78 @@
 name: CI Build
-
 on:
   push:
     branches:
       - main
   pull_request:
 
 jobs:
-  build:
-    name: Build with Lua ${{ matrix.lua_version }} using Exasol ${{ matrix.docker_db_version }}
-    strategy:
-      fail-fast: true
-      matrix:
-        lua_version: [5.4]
-        docker_db_version: ["7.1.24", "8.23.1"]
+  matrix-build:
     runs-on: ubuntu-22.04
+    defaults:
+      run:
+        shell: "bash"
+    permissions:
+      contents: read
+      checks: write
     concurrency:
-      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.lua_version }}-${{ matrix.docker_db_version }}
+      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.lua_version }}-${{ matrix.exasol_db_version }}
       cancel-in-progress: true
+    strategy:
+      fail-fast: false
+      matrix:
+        lua_version: [5.4]
+        exasol_db_version: ["8.24.0", "7.1.25"]
+    env:
+      DEFAULT_EXASOL_DB_VERSION: "8.24.0"
     steps:
-      - name: Free Disk Space
-        run: |
-          sudo rm -rf /usr/local/lib/android
-          sudo rm -rf /usr/share/dotnet
       - name: Checkout the repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
+
       - name: Install Lua ${{ matrix.lua_version }}
-        uses: leafo/gh-actions-lua@v9.1.0
+        uses: leafo/gh-actions-lua@v10
         with:
           luaVersion: ${{ matrix.lua_version }}
       - name: "Install LuaRocks"
         uses: leafo/gh-actions-luarocks@v4
         with:
-          luarocksVersion: "3.9.2"
+          luaRocksVersion: "3.11.0"
       - name: "Install dependencies"
         run: |
           luarocks --local install *.rockspec --deps-only
-      - name: Set up JDK 11
-        uses: actions/setup-java@v3
+
+      - name: Set up JDKs
+        uses: actions/setup-java@v4
         with:
           distribution: "temurin"
-          java-version: 11
+          java-version: |
+            11
+            17
           cache: "maven"
       - name: Enable testcontainer reuse
         run: echo 'testcontainers.reuse.enable=true' > "$HOME/.testcontainers.properties"
       - name: Run tests and build with Maven
         run: |
-          eval $(luarocks path)
           mvn --batch-mode clean verify \
-              -Dcom.exasol.dockerdb.image=${{ matrix.docker_db_version }} \
               -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn \
-              -DtrimStackTrace=false
-      - name: Publish Test Report
+              -DtrimStackTrace=false \
+              -Dcom.exasol.dockerdb.image=${{ matrix.exasol_db_version }}
+      - name: Publish Test Report for Exasol ${{ matrix.exasol_db_version }}
         uses: scacap/action-surefire-report@v1
         if: ${{ always() && github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]' }}
         with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-        env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Archive code coverage results
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: luacov.report.out
           path: target/luacov-reports/luacov.report.out
+          if-no-files-found: error
+
+  build:
+    needs: matrix-build
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "Build successful"