Connector/J 3.5.9 Changelog

Download Release Notes Changelog Connector/J Overview

Release date: 15 Jun 2026

For the highlights of this release, see the release notes.

The revision number links will take you to the revision's page on GitHub. On GitHub you can view more details of the revision and view diffs of the code modified in that revision.

• Revision #240c67b56 - bump 3.6.0-SNAPSHOT version

• Revision #16ab0125a - [misc] add explicit serialVersionUID, mark non-serializable fields as transient, expand wildcard imports, and add missing @SuppressWarnings annotations

• Revision #7949a2b74 - [CONJ-1310] add GraalVM native-image configuration files for reflection and resource access

• Revision #5b265818a - [misc] code style correction

• Revision #c7612f4e2 - [misc] maxscale CI test addition

• Revision #c50a3e3ae - [misc] removing unused CI parameter

• Revision #ec459345a - [misc] update CI workflow to use actions/checkout@v6

• Revision #136240d4f - [misc] maxscale correction for test suite

• Revision #76d303be2 - [misc] fix SQL parser to correctly handle '--' in expressions and reset lastChar after block comments

• Revision #14fd99b57 - [misc] CI stability improvement

• Revision #f6c18edfa - [misc] increase network timeout in FailoverTest to improve stability

• Revision #7a0ed66b0 - [misc] code simplification

• Revision #0704e7575 - [misc] update mysql connector to recent version

• Revision #3dc653c1e - [misc] remove dead code in Ed25519PasswordPlugin

• Revision #7b3c69221 - [misc] ensure non utf8 charset cannot be used for exchanges

• Revision #05bbb01e0 - [CONJ-1315] cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion

• Revision #3c9d89791 - call inflater.end() in finally in CompressInputStream

• Revision #1ba38d952 - format Duration text value with Locale.ROOT

• Revision #7a9b132ef - [misc] code style correction

• Revision #59cb6ae07 - [CONJ-1314] Add SPI for interactive dialog (PAM) authentication callback

• Revision #56f9cc089 - [CONJ-1313] Race condition in HaMode#getAvailableHostInOrder can cause NPE

• Revision #b023a90d2 - [CONJ-1311] Connection.cancelCurrentQuery fails with SslMode.VERIFY_FULL when client.getSocketIp != null

• Revision #2f4ec4380 - [misc] code style correction

• Revision #71635350a - [CONJ-1311] add dedicated option useIpForKillQuery for cancelling

• Revision #e9463dec0 - [CONJ-1304] read CallableStatement parameter metadata from mysql.proc when available

• Revision #b4517692e - use Locale.ROOT in date/time codec text formatting

• Revision #3fac8b455 - [misc] pin Locale.ROOT on remaining locale-sensitive call sites

• Revision #3f0a81c19 - Bump org.bouncycastle:bcpkix-jdk18on from 1.83 to 1.84

• Revision #3a7bec1ec - Fix: replace [--] with [-] in LOAD LOCAL INFILE regex patterns

• Revision #3638b3c09 - [misc] use literal -- instead of [-] in LOAD LOCAL INFILE comment regex

• Revision #9e14a1ffb - Bump org.assertj:assertj-core from 3.27.6 to 3.27.7

• Revision #e36f912e0 - [misc] improving test reliability

• Revision #a93b29001 - CONJ-1304] fix CallableStatement parameter metadata on MySQL info_schema fallback

• Revision #02ca68194 - encode caching_sha2 clear password as UTF-8

• Revision #499c7cbef - [misc] hold connection lock in prepared-statement lifecycle/metadata paths

• Revision #dd8db2592 - [misc] fix cross-thread failover-state race in MultiPrimaryReplicaClient

• Revision #4d9ede477 - [CONJ-1299] keep VALUES literals after the last placeholder when rewriting batches

• Revision #a6c82bf4c - [CONJ-1264] handle LocalDateTime as a zoneless wall-clock value

• Revision #15c4ac2a7 - [misc] only buffer in-transaction statements for transaction replay

• Revision #1557c3bf9 - [misc] add .vscode and .claude to .gitignore

• Revision #42988a6e4 - [misc] code style correction

• Revision #4daabe21f - [CONJ-1223] cache TLS trust/key managers across connections

• Revision #ec3265667 - create gssapi jaas config temp file with owner-only permissions

• Revision #8e99a5944 - [misc] code style correction

• Revision #42b5008ae - [misc] update license header to 2026

• Revision #0205d8be9 - [CONJ-1318] allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server

• Revision #c7e9b0eb5 - [CONJ-1319] use constant-time comparison in validateFingerPrint

• Revision #a87c71131 - [misc] update CHANGELOG

• Revision #f4a727c76 - [CONJ-1320] PAM (dialog) authentication must require a secure connection

• Revision #d90b98723 - [misc] Implement secure authentication checks and add regression tests for credential leakage

• Revision #e39e8b980 - match local infile filename case-sensitively

• Revision #83d3da917 - [misc] Update CHANGELOG

• Revision #da297f1c0 - Merge branch 'develop'

• Revision #1e29819b9 - [misc] update README version

• Revision #4466ad6d0 - [misc] test stability improvement : update proxy close method in PooledConnectionTest

• Revision #687c84049 - [misc] update environment variable for Maxscale version

• Revision #df4ebe2c6 - [misc] enhance TcpProxy and TcpProxySocket for improved thread safety and connection handling

_{This page is: Copyright © 2025 MariaDB. All rights reserved.}