Bump hibernate-entitymanager from 5.4.4.Final to 5.4.18.Final

[dependabot-preview]

Bumps hibernate-entitymanager from 5.4.4.Final to 5.4.18.Final.

Changelog

Sourced from hibernate-entitymanager's changelog.

Changes in 5.4.18.Final (June 22, 2020)

https://hibernate.atlassian.net/projects/HHH/versions/31861

** Bug * [HHH-14081] - CompositeIdFkGeneratedValueIdentityTest and CompositeIdFkGeneratedValueTest failures on Oracle db * [HHH-14077] - CVE-2019-14900 SQL injection issue using JPA Criteria API

** Improvement * [HHH-14083] - Gradle, add task to automate the CI release process * [HHH-14023] - H2: Adapt to sequence and column types changes in 1.4.201

** Task * [HHH-14075] - Changes to loaders and TwoPhaseLoad to allow "internal" loading to be reused by hibernate-reactive

Changes in 5.4.17.Final (May 29, 2020)

https://hibernate.atlassian.net/projects/HHH/versions/31858/tab/release-report-done

** Bug * [HHH-10956] - Persisting partially-generated composite Ids fails with HibernateException: No part of a composite identifier may be null * [HHH-13959] - Add nullability and uniqueness for @OneToOne with @JoinTable * [HHH-14022] - Oracle-Dialect does not find Sequences outside User-Schema * [HHH-14030] - hibernate-orm fails to build locally on German Win10

** Task * [HHH-14044] - Extract code from Loader into protected methods

** Patch * [HHH-14046] - Allow customizing the type of SessionFactory by changing the initial ServiceInitiator list * [HHH-14047] - Extensions points of EntityManagerFactoryBuilderImpl for Hibernate Reactive * [HHH-14048] - Expose lazy property fetching to Hibernate Reactive * [HHH-14049] - AbstractEntityPersister make three private methods protected for use in Hibernate Reactive

Changes in 5.4.16.Final (May 18, 2020)

https://hibernate.atlassian.net/projects/HHH/versions/31851/tab/release-report-done

** Bug * [HHH-13179] - Unionsubclass 2nd level caching no longer works for XML mappings in 5.3 and 5.4 * [HHH-13936] - No auto transaction joining from SessionImpl.doFlush * [HHH-14004] - Enhanced Proxies are never loaded from 2LC

** New Feature * [HHH-14019] - Allow customizing the Database target in the Schema Management tool

Commits

• ab9de8e 5.4.18.Final
• 85e9ae7 HHH-14083 add task release must run after addVersionCommit task
• f64f0bc HHH-14083 add ciRelease dependency to bintray upload
• 4cf9591 HHH-14083 Fix issue with git command
• c62674c HHH-14083 Add changeLogFile task
• 0a0ad26 HHH-14083 Enable automatic Maven Central sync when calling task bintrayPublish
• 80db996 HHH-14083 Push to github atomically and only if the release succeeds
• 55d3aa3 HHH-14083 Add more precondition checks to release tasks
• b56ea9f HHH-14083 Move the update to version.properties to a release task
• fbbba7b HHH-14083 Use a less verbose syntax for git commands
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #67.