Skip to content
This repository has been archived by the owner on Dec 7, 2023. It is now read-only.

build(deps): bump org.postgresql:postgresql from 42.2.5 to 42.7.1 #424

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 7, 2023

Bumps org.postgresql:postgresql from 42.2.5 to 42.7.1.

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.1

Changes

  • prepared for release 42.7.1 update changelogs @​davecramer (#3037)
  • fix: avoid timezone conversions when sending LocalDateTime to the database @​vlsi (#2852)
  • Apply connectTimeout before SSLSocket.startHandshake to avoid infinite wait in case the connection is broken @​davecramer (#3040)
  • fix: support waffle-jna 2.x and 3.x by using reflective approach for ManagedSecBufferDesc @​chrullrich (#2720)
  • perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing @​vlsi (#3044)
  • chore: use java.release=8 when building pgjdbc from the generated source distribution @​vlsi (#3038)
  • chore: use Java 17 for building pgjdbc, and use --release 8 to target Java 8, add tests with Java 21 and 22 @​vlsi (#3026)
  • fedora/rpm: move source build to java-17-openjdk-devel @​praiskup (#3036)
  • Revert "Use canonical DateStyle name (#2925)" @​vlsi (#3035)
  • Revert "feat: support SET statements combining with other queries with semicolon in PreparedStatement" @​vlsi (#3010)
  • Update site 42 7 0 @​davecramer (#3004)

🧰 Maintenance

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.1] (2023-12-06 08:34:00 -0500)

Changed

  • perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing [PR #3044](pgjdbc/pgjdbc#3044)

Fixed

[42.7.0] (2023-11-20 09:33:00 -0500)

Changed

Fixed

[42.6.0] (2023-03-17 15:34:34 -0400)

Changed

  • fix: use PhantomReferences instead of Obejct.finalize() to track Connection leaks [PR #2847](pgjdbc/pgjdbc#2847)

    The change replaces all uses of Object.finalize with PhantomReferences. The leaked resources (Connections) are tracked in a helper thread that is active as long as there are connections in use. By default, the thread keeps running for 30 seconds after all

... (truncated)

Commits
  • 27bbccf fix attribution
  • bb577e0 prepared for release 42.7.1 update changelogs (#3037)
  • c1a851c fix: avoid timezone conversions when sending LocalDateTime to the database
  • 25fdfc3 fix(deps): update dependency org.checkerframework:org.checkerframework.gradle...
  • 244f4c0 test: use a fixed 1.0.0-dev-master-SNAPSHOT driver version when testing with ...
  • 1492c98 chore: exclude postgresql 1.0.0-dev-master-SNAPSHOT from Renovate as we use t...
  • 8cfd00c chore: use allowedVersions to limit Renovate updates
  • 9e22ac0 chore(deps): update plugin biz.aqute.bnd.builder to v7
  • 9244c0d fix(deps): update dependency com.github.spotbugs:com.github.spotbugs.gradle.p...
  • 5f48b07 chore: try using different syntax for Renovate from upgrading system-stubs 1....
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.2.5 to 42.7.1.
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.2.5...REL42.7.1)

---
updated-dependencies:
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 7, 2023
@bitzl bitzl closed this Dec 7, 2023
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 7, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/maven/org.postgresql-postgresql-42.7.1 branch December 7, 2023 15:01
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant