Bump postgresql from 42.2.9 to 42.2.16

[dependabot-preview[bot]]

Bumps postgresql from 42.2.9 to 42.2.16.

Changelog

Sourced from postgresql's changelog.

[42.2.16] (2020-08-20)

Fixed

• • Arrays sent in binary format are now sent as 1 based. This was a regression for multi-dimensional arrays as well as text/varchar, oid and bytea arrays. Since 42.2.0 single dimensional arrays were stored 0 based. They are now sent 1 based which is the SQL standard, and the default for Postgres when sent as strings such as '{1,2,3}'. Fixes issue 1860 in PR 1863.

[42.2.15] (2020-08-14)

Changed

• Rename source distribution archive to postgresql-$version-jdbc-src.tar.gz, and add top-level archive folder ba017507
• Add the ability to connect with a GSSAPI encrypted connection. As of PostgreSQL version 12 GSSAPI encrypted connections are possible. Now the driver will attempt to connect to the server with a GSSAPI encrypted connection. If that fails then attempt an SSL connection, finally falling back to a plain text connection. All of this is controlled using both the gssEncMode and sslMode parameters which, in concert with pg_hba.conf, determine if a particular mode is allowed and or required. PR 1821 ad921b9e
• Source release archive shades dependencies (scram) by default. It affects only postgresql-version-src.tar.gz release artifact f0301eb9
• Refactor decoding arrays PR 1194

Added

• Verify nullness with CheckerFramework 6e524ae5

Fixed

• Avoid preparedStatement leak when using updateable ResultSet via insert/update/refreshRow PR 1815 9a0d2b18
• Change order of checks for oid vs primary keys. OID's have been deprecated. PR 1613
• Close certificate file stream. PR 1837
• Make sure socketTimeout is enforced PR 1831
• Assume PKCS-8 SSL key format by default PR 1819
• Preserve unquoted unicode whitespace in array literals PR 1266

[42.2.14] (2020-06-10)

Changed

• Reverted com.github.waffle:waffle-jna, org.osgi:org.osgi.core, org.osgi:org.osgi.enterprise dependencies to optional=true in Maven PR 1797.

[42.2.13] (2020-06-04)

Notable Changes

• Security: The primary reason to release this version and to continue the 42.2.x branch is for CVE-2020-13692. Reported by David Dworken, this is an XXE and more information can be found here. Sehrope Sarkuni reworked the XML parsing to provide a solution in commit 14b62aca4.
• The build system has been changed to Gradle thanks to Vladimir PR 1627.
• Regression: com.github.waffle:waffle-jna, org.osgi:org.osgi.core, org.osgi:org.osgi.enterprise dependencies are listed as non-optional issue 1975.

Changed

Added

• jre-6 was added back to allow us to release fixes for all artifacts in the 42.2.x branch PR 1787

Fixed

• I/O error ru translation PR 1756
• Issue 1771 PgDatabaseMetaData.getFunctions() returns

Commits

• 5e4bbc8 chore: comment-out type "this" type annotations for jre6 and jre7
• bc03d27 Release notes for 42.2.16 (#1866)
• 0cdb5e5 chore: delegate Gradle execution to gradle-cache-action
• e8923c7 fix: preserve unquoted unicode whitespace in array literals (#1266)
• 9962307 Fix header on existing Parameter Status doc page, and include entry in the in...
• aa4cb6d fix: Remove unused .ratignore (#1857)
• ffd428f move fix to correct place and remove duplicate (#1859)
• 0c162bc docs: add release notes for 42.2.15 (#1858)
• a0babeb Binary array index (#1863)
• 3802b45 chore: enable local build cache, and use burrunan/gradle-cache-action@v1 for ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

Superseded by #1007.