Bump com.unboundid:unboundid-ldapsdk from 7.0.3 to 7.0.5

[dependabot]

Bumps com.unboundid:unboundid-ldapsdk from 7.0.3 to 7.0.5.

Release notes

Sourced from com.unboundid:unboundid-ldapsdk's releases.

UnboundID LDAP SDK for Java 7.0.5

We have just released version 7.0.5 of the UnboundID LDAP SDK for Java. It is available for download from GitHub and SourceForge, and it is available in the Maven Central Repository. You can find the release notes for this release (and all previous versions) at https://docs.ldap.com/ldap-sdk/docs/release-notes.html, but here’s a summary of the changes:

• We have updated the persistence framework to provide improved security validation when using Java serialization for certain fields. In general, we don’t recommend the use of Java serialization in the persistence framework, since there are security concerns, and since the persisted objects can only be used by Java applications. If you wish to store an object in an LDAP server that has fields of types that aren’t supported by the out-of-the-box persistence framework, we recommend creating a custom ObjectEncoder to handle the conversion to and from LDAP attributes.

• We updated the usage information for the ldapdelete tool to include a --searchBaseDN argument that was mentioned in the description but omitted from the set of sample arguments.

• We updated the documentation to include the latest revisions of a number of LDAP-related specifications, including draft-bouchez-scram-mcf, draft-codere-ldapsyntax, draft-kaliski-asn1-layman-guide, draft-ietf-kitten-password-storage, draft-ietf-kitten-sasl-ht, draft-khan-ldap-bind-return-dn, and draft-sabadello-did-challenge-sasl.

UnboundID LDAP SDK for Java 7.0.4

We have just released version 7.0.4 of the UnboundID LDAP SDK for Java. It is available for download from GitHub and SourceForge, and it is available in the Maven Central Repository. You can find the release notes for this release (and all previous versions) at https://docs.ldap.com/ldap-sdk/docs/release-notes.html, but here’s a summary of the changes:

• We added a “discard results” search result listener that can be used in cases where a search should be performed, but the actual matching entries and references aren’t needed (for example, if you only need to know the number of matching entries).

• We added client-side support for a W3C trace context request control that can be included in requests sent to the latest versions of the Ping Identity Directory Server or ForgeRock Directory Services. This can be used to convey information for use in distributed tracing (e.g., via OpenTelemetry).

• We improved debug logging when adding or removing servers from the blacklist used to temporarily avoid creating connections to a server when using the round robin and fewest connections server set.

• We updated the PropertyManager class to make it possible to cache property values for faster access with less contention. Caching is disabled by default, although you can enable it by specifying a maximum cache duration. You can also programmatically clear the cache and pre-populate the cache based on currently defined system properties and environment variables.

• We improved performance and reduced contention when retrieving the values of environment variables from the JVM process.

• We updated the documentation to include the latest revisions of draft-bouchez-scram-mcf and draft-codere-ldapsyntax in the set of LDAP-related specifications.

Changelog

Sourced from com.unboundid:unboundid-ldapsdk's changelog.

          <div align="right">

${TARGET="offline"} LDAP SDK Home Page ${TARGET="offline"} Product Information

          <h2>Release Notes</h2>
      &lt;h3&gt;Version 7.0.6&lt;/h3&gt;
  &amp;lt;p&amp;gt;
    The following changes were made between the 7.0.5 and 7.0.6 releases:
  &amp;lt;/p&amp;gt;

  &amp;lt;ul&amp;gt;
    &amp;lt;li&amp;gt;
      Updated the collect-support-data tool, extended request, and administrative task
      to add an option to exclude Java Flight Recorder data from the resulting archive.
      This may be useful in cases where it is desirable to make collect-support-data
      processing operate as quickly as possible, or to minimize the size of the
      generated archive.
      &amp;lt;br&amp;gt;&amp;lt;br&amp;gt;
    &amp;lt;/li&amp;gt;

    &amp;lt;li&amp;gt;
      Added a new VerifyChainSignaturesTrustManager class, which represents an X.509
      trust manager that can be used to verify the signatures in a presented
      certificate chain.  If the chain includes a self-signed certificate, then it will
      ensure that it has a valid signature, and if the chain includes multiple
      certificates, it will ensure that each subsequent certificate in the chain is the
      correct signer for the previous certificate in that chain.  Note that this does
      not perform any other validation and should only be used specifically for
      validating signatures in a certificate chain, so it is recommended to use it only
      in an AggregateTrustManager that combines this logic with other appropraite forms
      of trust processing.
      &amp;lt;br&amp;gt;&amp;lt;br&amp;gt;
    &amp;lt;/li&amp;gt;
  &amp;lt;/ul&amp;gt;

  &amp;lt;p&amp;gt;&amp;lt;/p&amp;gt;



  &amp;lt;h3&amp;gt;Version 7.0.5&amp;lt;/h3&amp;gt;

  &amp;lt;p&amp;gt;
    The following changes were made between the 7.0.4 and 7.0.5 releases:
  &amp;lt;/p&amp;gt;

  &amp;lt;ul&amp;gt;

... (truncated)

Commits

• cab6672 Correct draft expiration times
• 257ae82 Update the OID registry for a new alert type
• 72c6234 Updated LDAP-related specifications
• b2f9c2b Better persist framework deserialization security
• da18114 Update an ldapdelete example
• c041862 Update copyright years to include 2026
• 1299fc5 Update a public OID reference DB link
• 72f34e5 Update Maven artifact generation
• 5882334 Post-7.0.4 updates
• 2b16a37 Updated LDAP-related Internet Drafts
• Additional commits viewable in compare view