Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 16, 2024

Bumps org.postgresql:postgresql from 42.5.1 to 42.7.1.

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.1

Fixed regressions since 42.7.0

  • Revert "Use canonical DateStyle name (#2925)" @​vlsi (#3035)
  • Revert "feat: support SET statements combining with other queries with semicolon in PreparedStatement" @​vlsi (#3010)
  • chore: use java.release=8 when building pgjdbc from the generated source distribution @​vlsi (#3038), the driver uses Java 8 methods only

Changes

  • Apply connectTimeout before SSLSocket.startHandshake to avoid infinite wait in case the connection is broken @​davecramer (#3040)
  • perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing @​vlsi (#3044)
  • fix: avoid timezone conversions when sending LocalDateTime to the database @​vlsi (#2852)
  • fix: support waffle-jna 2.x and 3.x by using reflective approach for ManagedSecBufferDesc @​chrullrich (#2720)

🧰 Maintenance

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.1] (2023-12-06 08:34:00 -0500)

Changed

  • perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing [PR #3044](pgjdbc/pgjdbc#3044)

Fixed

[42.7.0] (2023-11-20 09:33:00 -0500)

Changed

Fixed

[42.6.0] (2023-03-17 15:34:34 -0400)

Changed

  • fix: use PhantomReferences instead of Obejct.finalize() to track Connection leaks [PR #2847](pgjdbc/pgjdbc#2847)

    The change replaces all uses of Object.finalize with PhantomReferences. The leaked resources (Connections) are tracked in a helper thread that is active as long as there are connections in use. By default, the thread keeps running for 30 seconds after all

... (truncated)

Commits
  • 27bbccf fix attribution
  • bb577e0 prepared for release 42.7.1 update changelogs (#3037)
  • c1a851c fix: avoid timezone conversions when sending LocalDateTime to the database
  • 25fdfc3 fix(deps): update dependency org.checkerframework:org.checkerframework.gradle...
  • 244f4c0 test: use a fixed 1.0.0-dev-master-SNAPSHOT driver version when testing with ...
  • 1492c98 chore: exclude postgresql 1.0.0-dev-master-SNAPSHOT from Renovate as we use t...
  • 8cfd00c chore: use allowedVersions to limit Renovate updates
  • 9e22ac0 chore(deps): update plugin biz.aqute.bnd.builder to v7
  • 9244c0d fix(deps): update dependency com.github.spotbugs:com.github.spotbugs.gradle.p...
  • 5f48b07 chore: try using different syntax for Renovate from upgrading system-stubs 1....
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR-Codex overview

This PR focuses on updating the versions of various dependencies in the pom.xml file.

Detailed summary

  • Updated postgresql.version from 42.5.1 to 42.7.1
  • Updated mapstruct.version from 1.5.5.Final to the latest version
  • Updated hibernate-validator.version from 8.0.1.Final to the latest version
  • Updated jakarta-validation.version from 3.0.2 to the latest version

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 16, 2024
Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.5.1 to 42.7.1. - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.5.1...REL42.7.1) --- updated-dependencies: - dependency-name: org.postgresql:postgresql dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/org.postgresql-postgresql-42.7.1 branch from 20dc5fd to 4584fcf Compare January 16, 2024 07:20
@IlyaLisov IlyaLisov merged commit 1d720dc into main Jan 16, 2024
@IlyaLisov IlyaLisov deleted the dependabot/maven/org.postgresql-postgresql-42.7.1 branch January 16, 2024 07:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

1 participant