#156: Fixed misleading error in `PreviousVersionManager.prepareBucket…

…FsFile()` (#157)

.github/workflows/dependencies_check.yml

@@ -1,12 +1,15 @@
-name: Dependencies Check
+name: Report Security Issues for Repository
 
 on:
+  workflow_dispatch:
   schedule:
     - cron: "0 2 * * *"
 
 jobs:
-  build:
+  report_security_issues:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
 
     steps:
       - uses: actions/checkout@v4
@@ -20,5 +23,17 @@ jobs:
         # This avoids this error:
         # [ERROR] Failed to execute goal on project extension-manager-integration-test-java: Could not resolve dependencies for project com.exasol:extension-manager-integration-test-java:jar:0.2.3: Could not find artifact com.exasol:extension-manager-client-java:jar:0.2.3 in central
         run: mvn --batch-mode install -DskipTests
-      - name: Checking dependencies for vulnerabilities
-        run: mvn --batch-mode org.sonatype.ossindex.maven:ossindex-maven-plugin:audit -f pom.xml
+
+      - name: Generate ossindex report
+        run: |
+          mvn org.sonatype.ossindex.maven:ossindex-maven-plugin:audit \
+              org.sonatype.ossindex.maven:ossindex-maven-plugin:audit-aggregate \
+              -Dossindex.reportFile=$(pwd)/ossindex-report.json \
+              -Dossindex.fail=false
+
+      - name: Report Security Issues
+        uses: exasol/python-toolbox/.github/actions/security-issues@main
+        with:
+          format: "maven"
+          command: "cat ossindex-report.json"
+          github-token: ${{ secrets.GITHUB_TOKEN }}

.project-keeper.yml

@@ -26,7 +26,7 @@ sources:
     path: registry-upload/package.json
   - type: npm
     path: pkg/parameterValidator/package.json
-version: 0.5.4
+version: 0.5.5
 linkReplacements:
   - "Unknown|https://github.com/DATA-DOG/go-sqlmock/blob/master/LICENSE"
   - "https://github.com/swagger-api/swagger-core/modules/swagger-annotations|https://github.com/swagger-api/swagger-core/tree/master/modules/swagger-annotations"

doc/changes/changes_0.5.5.md

@@ -0,0 +1,100 @@
+# Extension Manager 0.5.5, released 2023-??-??
+
+Code name: Fix misleading error
+
+## Summary
+
+This release fixes a misleading error in the integration test framework. When `PreviousVersionManager.prepareBucketFsFile()` is called with an invalid URL it fails with `NoSuchFileException` file exception that hides the actual exception about the invalid URL. The release also improves other error messages in Extension Manager.
+
+## Bugfixes
+
+* #156: Fixed misleading error in `PreviousVersionManager.prepareBucketFsFile()`
+
+## Dependency Updates
+
+### Extension-manager
+
+#### Compile Dependency Updates
+
+* Updated `github.com/dop251/goja:v0.0.0-20231014103939-873a1496dc8e` to `v0.0.0-20231027120936-b396bb4c349d`
+* Updated `github.com/dop251/goja_nodejs:v0.0.0-20230914102007-198ba9a8b098` to `v0.0.0-20231022114343-5c1f9037c9ab`
+* Updated `github.com/exasol/exasol-driver-go:v1.0.3` to `v1.0.4`
+
+### Extension Manager Java Client
+
+#### Compile Dependency Updates
+
+* Updated `io.swagger.core.v3:swagger-annotations:2.2.17` to `2.2.18`
+* Updated `org.glassfish.jersey.core:jersey-client:2.40` to `2.41`
+* Updated `org.glassfish.jersey.inject:jersey-hk2:2.40` to `2.41`
+* Updated `org.glassfish.jersey.media:jersey-media-json-jackson:2.40` to `2.41`
+* Updated `org.glassfish.jersey.media:jersey-media-multipart:2.40` to `2.41`
+
+#### Test Dependency Updates
+
+* Updated `nl.jqno.equalsverifier:equalsverifier:3.15.2` to `3.15.3`
+
+#### Plugin Dependency Updates
+
+* Updated `com.exasol:error-code-crawler-maven-plugin:1.3.0` to `1.3.1`
+* Updated `com.exasol:project-keeper-maven-plugin:2.9.12` to `2.9.15`
+* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.4.0` to `3.4.1`
+* Updated `org.apache.maven.plugins:maven-javadoc-plugin:3.5.0` to `3.6.0`
+* Updated `org.codehaus.mojo:versions-maven-plugin:2.16.0` to `2.16.1`
+* Updated `org.jacoco:jacoco-maven-plugin:0.8.10` to `0.8.11`
+* Updated `org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184` to `3.10.0.2594`
+
+### Extension Integration Tests Library
+
+#### Compile Dependency Updates
+
+* Updated `com.exasol:extension-manager-client-java:0.5.4` to `0.5.5`
+* Updated `com.exasol:hamcrest-resultset-matcher:1.6.1` to `1.6.2`
+
+#### Test Dependency Updates
+
+* Updated `org.mockito:mockito-junit-jupiter:5.6.0` to `5.7.0`
+
+#### Plugin Dependency Updates
+
+* Updated `com.exasol:error-code-crawler-maven-plugin:1.3.0` to `1.3.1`
+* Updated `com.exasol:project-keeper-maven-plugin:2.9.12` to `2.9.15`
+* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.4.0` to `3.4.1`
+* Updated `org.apache.maven.plugins:maven-javadoc-plugin:3.5.0` to `3.6.0`
+* Updated `org.codehaus.mojo:versions-maven-plugin:2.16.0` to `2.16.1`
+* Updated `org.jacoco:jacoco-maven-plugin:0.8.10` to `0.8.11`
+* Updated `org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184` to `3.10.0.2594`
+
+### Registry
+
+#### Compile Dependency Updates
+
+* Updated `aws-cdk-lib:2.101.1` to `2.104.0`
+
+#### Development Dependency Updates
+
+* Updated `@types/node:^20.8.6` to `^20.8.10`
+* Updated `@types/jest:^29.5.5` to `^29.5.7`
+* Updated `aws-cdk:2.101.1` to `2.104.0`
+
+### Registry-upload
+
+#### Compile Dependency Updates
+
+* Updated `@aws-sdk/client-cloudfront:^3.429.0` to `^3.441.0`
+* Updated `@aws-sdk/client-s3:^3.429.0` to `^3.441.0`
+* Updated `@aws-sdk/client-cloudformation:^3.429.0` to `^3.441.0`
+
+#### Development Dependency Updates
+
+* Updated `eslint:^8.51.0` to `^8.52.0`
+* Updated `@types/follow-redirects:^1.14.2` to `^1.14.3`
+* Updated `@typescript-eslint/parser:^6.8.0` to `^6.9.1`
+* Updated `@types/node:^20.8.6` to `^20.8.10`
+* Updated `@typescript-eslint/eslint-plugin:^6.8.0` to `^6.9.1`
+
+### ParameterValidator
+
+#### Development Dependency Updates
+
+* Updated `esbuild:0.19.2` to `0.19.5`

extension-manager-client-java/pom.xml

@@ -12,20 +12,10 @@
         <!-- ProjectKeeper already included in root project -->
         <project-keeper.skip>true</project-keeper.skip>
         <!-- Generated code dependencies -->
-        <swagger-core-version>2.2.17</swagger-core-version>
-        <jersey-version>2.40</jersey-version>
+        <swagger-core-version>2.2.18</swagger-core-version>
+        <jersey-version>2.41</jersey-version>
         <jackson-version>2.15.3</jackson-version>
     </properties>
-    <distributionManagement>
-        <snapshotRepository>
-            <id>ossrh</id>
-            <url>https://oss.sonatype.org/content/repositories/snapshots</url>
-        </snapshotRepository>
-        <repository>
-            <id>ossrh</id>
-            <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
-        </repository>
-    </distributionManagement>
     <dependencies>
         <!-- Dependencies for generated extension-manager client -->
         <dependency>
@@ -91,7 +81,7 @@
         <dependency>
             <groupId>nl.jqno.equalsverifier</groupId>
             <artifactId>equalsverifier</artifactId>
-            <version>3.15.2</version>
+            <version>3.15.3</version>
             <scope>test</scope>
         </dependency>
     </dependencies>
@@ -100,7 +90,7 @@
             <plugin>
                 <groupId>com.exasol</groupId>
                 <artifactId>project-keeper-maven-plugin</artifactId>
-                <version>2.9.12</version>
+                <version>2.9.15</version>
                 <executions>
                     <execution>
                         <goals>