manywho / service-sql

A service that allows your Flows to read from and write to an external database
MIT License
0 stars 3 forks source link

Bump postgresql from 42.2.12 to 42.2.19 #92

Closed dependabot-preview[bot] closed 3 years ago

dependabot-preview[bot] commented 3 years ago

Bumps postgresql from 42.2.12 to 42.2.19.

Changelog

Sourced from postgresql's changelog.

[42.2.19] (2021-02-18)

Notable Changes

  • Now the driver uses SASLprep normalization for SCRAM authentication fixing some issues with spaces in passwords.
  • If closeOnCompletion is called on an existing statement and the statement is executed a second time it will fail.

Changed

  • Fix: Actually close unclosed results. Previously was not closing the first unclosed result fixes #1903 (#1905) There is a small behaviour change here as a result. If closeOnCompletion is called on an existing statement and the statement is executed a second time it will fail.

Added

Fixed

  • Fix: properly set cancel socket timeout (#2044)
  • Fix "Required class information missing" when old org.jboss:jandex parses pgjdbc classes [issue 2008][https://github-redirect.dependabot.com/pgjdbc/pgjdbc/issues/2008]
  • Fix PGCopyInputStream returning the last row twice when reading with CopyOut API [issue 2016][https://github-redirect.dependabot.com/pgjdbc/pgjdbc/issues/2016]
  • Fix Connnection.isValid() to not wait longer than existing network timeout [PR #2040](pgjdbc/pgjdbc#2040)
  • Fix Passwords with spaces (ASCII and non-ASCII) now work with SCRAM authentication (driver now uses SASLprep normalization) [PR #2052](pgjdbc/pgjdbc#2052)
  • Fix DatabaseMetaData.getTablePrivileges() to include views, materialized views, and foreign tables [PR #2049](pgjdbc/pgjdbc#2049)

[42.2.18]

Fixed

  • Unfortunately changing the default of gssEncMode to ALLOW was not enough. The GSSEncMode Enum was not changed as well fixed in #1920

[42.2.17]

Changed

  • Change default of gssEncMode to ALLOW. PostgreSQL can deal with PREFER but there are cloud providers that did not implement the protocol properly. Libpq gets around this by checking for a GSS credential cache before attempting the connection. This is possible in JDK 8 and up, but not JDK6, or JDK7 fixes Issue #1868 [PR #1913](pgjdbc/pgjdbc#1913)

Added

Fixed

  • Avoid NullPointerException when receiving PGbox, PGcircle, PGline, PGlseg, PGpath, PGpoint, PGpolygon, and PGmoney [PR 1873] (pgjdbc/pgjdbc#1873).
  • The driver returns enum and jsonb arrays elements as String objects (like in 42.2.14 and earlier versions) PR 1879.
  • PgTokenizer was ignoring last empty token [PR #1882](pgjdbc/pgjdbc#1882)
  • Remove osgi from karaf fixes Issue #1891 [PR #1902](pgjdbc/pgjdbc#1902)

[42.2.16] (2020-08-20)

Known issues

  • The driver returns enum and jsonb arrays elements are returned as PGobject instances (fixed in 42.2.17)

Fixed

  • Arrays sent in binary format are now sent as 1 based. This was a regression for multi-dimensional arrays as well as text/varchar, oid and bytea arrays. Since 42.2.0 single dimensional arrays were stored 0 based. They are now sent 1 based which is the SQL standard, and the default for Postgres when sent as strings such as '{1,2,3}'. Fixes issue 1860 in PR 1863.

... (truncated)

Commits
  • 207ce36 remove diamond operator for java 6 build (#2069)
  • 18cec59 Update CHANGELOG and posts to reflect todays date (#2067)
  • 4e39b3f prepare for release 42.2.19 (#2064)
  • fc25aeb fix: Actually close unclosed results. Previously was not closing the first un...
  • e551d1a fix: properly set cancel socket timeout (#2044)
  • 9d6ab68 * Fix resolve ParseError in PGtokenizer fixes #2050
  • 444cb1b docs: Add getTablePrivileges() fix to changelog
  • a6cf67d test: Add test for ACLs returned from metadata getTablePrivileges() for views
  • f5abc65 refactor: consolidate repeated drop code in TestUtil
  • 6669081 fix: return metadata privileges for views and foreign tables
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)
dependabot-preview[bot] commented 3 years ago

Superseded by #96.