[dependabot]

Bumps com.mchange:c3p0 from 0.14.2 to 0.15.0.

Changelog

Sourced from com.mchange:c3p0's changelog.

c3p0-0.15.1 -- Fix some embarrasing documentation errors, update README.md. -- Make mchange-commons-java transitive dependencies optional in ivy.xml as well as under pom.xml, so we don't sometimes see them pulled in, sometimes not. (mchange-commons-java) -- Eliminate loud warnings with scary stack traces accidentally introduced into the logging path when HOCON / typesafe-config libraries can't be found. The absences of typesafe-config is a common and supported configuration, not a crisis to shout about. (mchange-commons-java) c3p0-0.15.0 -- Use the prior two extensibility augmentations to mchange-commons-java to support c3p0-xml directly within com.mchange.v2.cfg, but without layer inversions that would have required the config and log libraries to know anything about their client c3p0. -- Make com.mchange.v2.log config extensible by allowing specification of extra resource paths for log config in mlog-config-resource-paths.txt, which becomes a #-commented, one-per-line list of resource paths the current configuration of com.mchange.v2.cfg supports. (mchange-commons-java) -- Make com.mchange.v2.cfg extensible, by allowing users to specify ExtraPropertiesConfigSources (by fqcn) in a resoure called mcfg-extra-properties-config-sources.txt, which becomes a #-commented, one-per-line list if by-name-instantiable sublasses of com.mchange.v2.cfg.ExtraPropertiesConfigSources. (mchange-commons-java) -- Clarify, fix, and test support for config and user names containing dots, as long as they don't contain dot delineated "named-configs", "extensions", or "user-overrides" elements. -- Port XML config parsing (including the security hardenings) to the new, unified config. Support compound properties in , not just unprefixed c3p0.xxx properties. -- Improve, and add much better documentation for, the API permitting refreshes, augmentations, and therefore customization of c3p0 config at runtime. Make it configurable whether MLog config should also be updated on such a refresh. Allow augmenting with "backstops" as well as with "overrides" when refreshing config. Backstops only take effect if nothing else in config sets the value. Overrides override values set within standard c3p0 configuration. -- The never-really-documented feature of permitting user-specified "C3P0ConfigFinder" implementations is no longer supported and has been removed. It opened more doors to mischief than it solved likely problems. (In the unlikely case you used and actually miss this feature, please do let us know.) -- Major reworking of c3p0's internal config library, com.mchange.v2.c3p0.cfg. Structurally it used to have two views of config data that could under some circumstances slip out of sync. Now the code is much simpler, and there is only one, canonical representation of the data. -- Take greater care that items that might contain passwords or credentials are masked before appearing in logs. LOOSEN restriction on usernames appearing in logs. They can be helpful for debugging (particularly in deployments where the user-overrides feature is used)

... (truncated)

Commits

• 5c8deb2 Update versions for c3p0-0.15.0 final.
• a054402 Fix some errors and out-of-date work in test javadocs.
• a4351f8 Release notes and documentation updates.
• 98cbfbc Remove illegal -- from inside XML comment.
• 9295bbd Remove recommendation to run ad hoc tests as C3P0_TEST_JVM_ARGS='-ea' since -...
• afeefdf Clean away stranded reference (in comment) to eliminated C3P0ConfigFinder
• 801533d Say why a by-name instantiation was refused, and what c3p0 did instead.
• e1c6031 Read configuration uncached, so live System properties are honored.
• 3533d46 Stop a probe's answers merging into the log output beside them.
• 4eaf953 Whitelist the JDBC driver class names deployments actually name.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #8602.