Skip to content

Bump com.baomidou:mybatis-plus-boot-starter from 3.3.0 to 3.5.18 - #13

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.baomidou-mybatis-plus-boot-starter-3.5.18
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.baomidou-mybatis-plus-boot-starter-3.5.18

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown

Bumps com.baomidou:mybatis-plus-boot-starter from 3.3.0 to 3.5.18.

Release notes

Sourced from com.baomidou:mybatis-plus-boot-starter's releases.

v3.5.18

  • fix: 安全修复 BlockAttackInnerInterceptor 常量恒等式(如 1 XOR 0、1 <= 1、NOT 1 = 2、WHERE 1)绕过全表更新/删除校验问题
  • fix: 安全修复 TenantLineInnerInterceptor、DataPermissionInterceptor 向 XOR 条件追加租户/权限条件时缺少括号,导致数据越权读写问题
  • fix: core restore Implementation-Version in JAR manifests
  • fix: keep BaseMapper.selectOne independent of JDBC cursor support
  • fix: 修复同一 JVM 内机器标识相同的多个默认主键生成器生成重复 ID
  • fix: avoid O(N^2) DEBUG log output in parserMulti
  • fix: generator recognize PostgreSQL partitioned tables
  • fix: 补齐 notIn 参数映射并增加 Lambda Wrapper 自动映射开关
  • fix: 补齐 Fury 类和枚举注册并增加完整性与序列化测试
  • fix: 恢复 JAR 清单信息及 LICENSE 和 Maven POM
  • fix: 移除 LIKE 条件的字段参数映射
  • fix: selectOne 使用 ResultHandler 在映出第二行后停止映射
  • feat: 新增多数据源插件
  • feat: 新增 mybatis-plus-up 模块及相关测试用例
  • feat: 新增支持配置加密在环境变量中使用
  • feat: Merge pull request #7182 from jianjindream/fix/postgresql-partitioned-table
  • feat: Merge pull request #7172 from jjj-n/codex/chain-query-one-throw-ex
  • feat: Merge pull request #7180 from zh-hanlabs/fix/jsqlparser-multi-debug-log
  • feat: Merge pull request #7178 from hebulin/fix/7135-duplicate-id-shared-sequence
  • feat: Merge pull request #7166 from smf-h/codex/fix-selectone-cursor-compatibility
  • feat: Merge pull request #7184 from zhanghien/feature/polardb-oracle
  • feat: Merge pull request #7186 from Lyin-OTTF/fix/7177-selectone-early-stop
  • feat: Merge pull request #7164 from arimu1/fix/7150-implementation-version-manife
  • feat: add ChainQuery.one(boolean throwEx)
  • opt: 应用 Spotless 格式化,统一导入顺序并清理无用导入
  • opt: 升级 Gradle Wrapper 至 9.6.0 并接入 Spotless 与 git 钩子
  • opt: 保留 JSqlParser 5.2 模块并升级默认模块至 5.4
  • opt: 忽略 VS Code/Zed 目录并注释本地签名配置
  • opt: 引入上游源码副本、差异补丁及发布校验
  • opt: 使用 Eclipse 120 列规则并统一源码格式
  • opt: 完善格式规则并同步上游源码与补丁格式
  • opt: 按 Boot 版本拆分测试支持并完善上游源码维护
  • opt: 调整 PolarDB 数据库说明与生成器识别

v3.5.17

  • fix: 修复 issues/6899 多租户插件 @Many 注解查无效问题
  • fix: 修复 issues/6938 HashMap 设置类型转换器异常
  • fix: 修复 issues/7081 解决拦截全表存在 schema 校验问题
  • fix: 修复 issues/6905 关于 saveOrUpdateBatch 导致 ParameterHandler 被重复执行问题
  • fix: 修复 issues/7056 支持 GraalVM Native 二进制编译问题,案例 https://gitee.com/baomidou/mybatis-plus-native-image-demo
  • fix: 修复 issues/7027 支持 JDK 9+ 模块化包重名问题,注意 mybatis-plus-spring 模块下文件包名调整
  • feat: 新增 wrapper 支持 xml 别名配置
  • feat: 新增 mybatis-plus-spring-boot-native-image 模块支持 graalvm 编译能力
  • feat: 新增 Wrapper 支持自动识别 typeHandler 类型处理器
  • feat: 新增 Wrapper 对比 eqOrIsNull 方法
  • feat: 新增 i18n 逻辑删除日期格式及自动更新填充能力
  • feat: 新增 Groovy 支持 LambdaQueryWrapper 执行能力
  • feat: 新增 Kotlin 支持 LambdaQueryWrapper 执行能力
  • feat: 新增 MybatisEnumTypeHandler 枚举类型处理器支持缓存处理机制

... (truncated)

Changelog

Sourced from com.baomidou:mybatis-plus-boot-starter's changelog.

[v3.5.18] 2026.10.21

  • fix: 安全修复 BlockAttackInnerInterceptor 常量恒等式(如 1 XOR 0、1 <= 1、NOT 1 = 2、WHERE 1)绕过全表更新/删除校验问题
  • fix: 安全修复 TenantLineInnerInterceptor、DataPermissionInterceptor 向 XOR 条件追加租户/权限条件时缺少括号,导致数据越权读写问题
  • fix: core restore Implementation-Version in JAR manifests
  • fix: keep BaseMapper.selectOne independent of JDBC cursor support
  • fix: 修复同一 JVM 内机器标识相同的多个默认主键生成器生成重复 ID
  • fix: avoid O(N^2) DEBUG log output in parserMulti
  • fix: generator recognize PostgreSQL partitioned tables
  • fix: 补齐 notIn 参数映射并增加 Lambda Wrapper 自动映射开关
  • fix: 补齐 Fury 类和枚举注册并增加完整性与序列化测试
  • fix: 恢复 JAR 清单信息及 LICENSE 和 Maven POM
  • fix: 移除 LIKE 条件的字段参数映射
  • fix: selectOne 使用 ResultHandler 在映出第二行后停止映射
  • feat: 新增多数据源插件
  • feat: 新增 mybatis-plus-up 模块及相关测试用例
  • feat: 新增支持配置加密在环境变量中使用
  • feat: Merge pull request #7182 from jianjindream/fix/postgresql-partitioned-table
  • feat: Merge pull request #7172 from jjj-n/codex/chain-query-one-throw-ex
  • feat: Merge pull request #7180 from zh-hanlabs/fix/jsqlparser-multi-debug-log
  • feat: Merge pull request #7178 from hebulin/fix/7135-duplicate-id-shared-sequence
  • feat: Merge pull request #7166 from smf-h/codex/fix-selectone-cursor-compatibility
  • feat: Merge pull request #7184 from zhanghien/feature/polardb-oracle
  • feat: Merge pull request #7186 from Lyin-OTTF/fix/7177-selectone-early-stop
  • feat: Merge pull request #7164 from arimu1/fix/7150-implementation-version-manife
  • feat: add ChainQuery.one(boolean throwEx)
  • opt: 应用 Spotless 格式化,统一导入顺序并清理无用导入
  • opt: 升级 Gradle Wrapper 至 9.6.0 并接入 Spotless 与 git 钩子
  • opt: 保留 JSqlParser 5.2 模块并升级默认模块至 5.4
  • opt: 忽略 VS Code/Zed 目录并注释本地签名配置
  • opt: 引入上游源码副本、差异补丁及发布校验
  • opt: 使用 Eclipse 120 列规则并统一源码格式
  • opt: 完善格式规则并同步上游源码与补丁格式
  • opt: 按 Boot 版本拆分测试支持并完善上游源码维护
  • opt: 调整 PolarDB 数据库说明与生成器识别

[v3.5.17] 2026.07.07

  • fix: 修复 issues/6899 多租户插件 @Many 注解查无效问题
  • fix: 修复 issues/6938 HashMap 设置类型转换器异常
  • fix: 修复 issues/7081 解决拦截全表存在 schema 校验问题
  • fix: 修复 issues/6905 关于 saveOrUpdateBatch 导致 ParameterHandler 被重复执行问题
  • fix: 修复 issues/7056 支持 GraalVM Native 二进制编译问题,案例 https://gitee.com/baomidou/mybatis-plus-native-image-demo
  • fix: 修复 issues/7027 支持 JDK 9+ 模块化包重名问题,注意 mybatis-plus-spring 模块下文件包名调整
  • feat: 新增 wrapper 支持 xml 别名配置
  • feat: 新增 mybatis-plus-spring-boot-native-image 模块支持 graalvm 编译能力
  • feat: 新增 Wrapper 支持自动识别 typeHandler 类型处理器
  • feat: 新增 Wrapper 对比 eqOrIsNull 方法
  • feat: 新增 i18n 逻辑删除日期格式及自动更新填充能力
  • feat: 新增 Groovy 支持 LambdaQueryWrapper 执行能力
  • feat: 新增 Kotlin 支持 LambdaQueryWrapper 执行能力
  • feat: 新增 MybatisEnumTypeHandler 枚举类型处理器支持缓存处理机制

... (truncated)

Commits
  • a2d9f0c 调整 action 发布脚本
  • 789538f 发布 3.5.18 版本
  • 5117f79 新增多数据源插件
  • c5502f1 fix(core): isolate selectOne ResultHandler local cache entries (#7188)
  • e11c7c8 Merge remote-tracking branch 'origin/3.0' into 3.0
  • 69ff4e5 build: 移除重复的 JAR 清单配置
  • 179871b test: 给 SystemClock 的缓存时钟与 nowDate 格式补直接用例
  • 63b6f0e test: 给 Assert 的失败类型、消息格式化与空值判定补直接用例
  • 2e996b5 test: 用外部已知向量钉住 EncryptUtils.md5Base64 的算法与编码
  • 69d29a7 test: 给 Wrappers 的工厂返回类型与空包装器补直接用例
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.baomidou:mybatis-plus-boot-starter](https://github.com/baomidou/mybatis-plus) from 3.3.0 to 3.5.18.
- [Release notes](https://github.com/baomidou/mybatis-plus/releases)
- [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md)
- [Commits](baomidou/mybatis-plus@v3.3.0...v3.5.18)

---
updated-dependencies:
- dependency-name: com.baomidou:mybatis-plus-boot-starter
  dependency-version: 3.5.18
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Author

Superseded by #15.

@dependabot dependabot Bot closed this Oct 30, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/com.baomidou-mybatis-plus-boot-starter-3.5.18 branch October 30, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants