fix(changelog,plugin-oracle): drop non-canonical CHANGELOG section, narrow Oracle classifier to true SSL errors

Author: datlechin

CHANGELOG.md

@@ -31,10 +31,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Welcome screen connection errors (single-click connect, sample database launch) also surface the structured SSL handshake message when applicable
 - All driver SSL mapping logic now lives in dedicated `XxxSSLMapping` files (PostgreSQL, MSSQL, Cassandra, MongoDB, Oracle); ClickHouse and Redis keep their existing encapsulated helpers
 
-### Known limitations
-
-- iOS app SSL form still uses a binary Toggle for non-MSSQL engines (mysql, mariadb, postgresql, redshift). Verify CA and Verify Identity are not yet exposed on iOS. macOS users get the full per-engine picker. Will be addressed in a follow-up.
-
 ### Fixed
 
 - PostgreSQL connections to AWS RDS, Cloud SQL, Azure, and other hosted Postgres now succeed out of the box instead of failing with "no pg_hba.conf entry for host" (#1298)

Plugins/OracleDriverPlugin/OracleConnection.swift

@@ -215,9 +215,6 @@ final class OracleConnectionWrapper: @unchecked Sendable {
         if lower.contains("ora-28860") {
             return .cipherMismatch(serverMessage: message)
         }
-        if lower.contains("ora-12537") || lower.contains("ora-12606") {
-            return .serverRejectedPlaintext(serverMessage: message)
-        }
         if lower.contains("certificate") && (lower.contains("verify") || lower.contains("untrusted")) {
             return .untrustedCertificate(serverMessage: message)
         }

TableProTests/PluginTestSources/PluginSSLClassifiers.swift

@@ -125,9 +125,6 @@ enum OracleClassifier {
         if lower.contains("ora-28860") {
             return .cipherMismatch(serverMessage: message)
         }
-        if lower.contains("ora-12537") || lower.contains("ora-12606") {
-            return .serverRejectedPlaintext(serverMessage: message)
-        }
         if lower.contains("certificate") && (lower.contains("verify") || lower.contains("untrusted")) {
             return .untrustedCertificate(serverMessage: message)
         }

TableProTests/Plugins/PluginSSLClassifierTests.swift

@@ -169,12 +169,9 @@ struct OracleClassifierTests {
         }
     }
 
-    @Test("ORA-12606 → serverRejectedPlaintext")
-    func testORA12606() {
-        guard case .serverRejectedPlaintext = OracleClassifier.classifySSLError("ORA-12606: TNS: Application timeout occurred") else {
-            Issue.record("Expected serverRejectedPlaintext")
-            return
-        }
+    @Test("Network timeout (ORA-12606) is not classified as SSL")
+    func testTimeoutNotSSL() {
+        #expect(OracleClassifier.classifySSLError("ORA-12606: TNS: Application timeout occurred") == nil)
     }
 
     @Test("ORA-28759 → clientCertRequired")