tabular-io / iceberg-rest-image

Simple project to expose a catalog over REST using a Java catalog backend
Apache License 2.0
93 stars 39 forks source link

Bump org.postgresql:postgresql from 42.5.4 to 42.7.1 #71

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps org.postgresql:postgresql from 42.5.4 to 42.7.1.

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.1

Fixed regressions since 42.7.0

  • Revert "Use canonical DateStyle name (#2925)" @​vlsi (#3035)
  • Revert "feat: support SET statements combining with other queries with semicolon in PreparedStatement" @​vlsi (#3010)
  • chore: use java.release=8 when building pgjdbc from the generated source distribution @​vlsi (#3038), the driver uses Java 8 methods only

Changes

  • Apply connectTimeout before SSLSocket.startHandshake to avoid infinite wait in case the connection is broken @​davecramer (#3040)
  • perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing @​vlsi (#3044)
  • fix: avoid timezone conversions when sending LocalDateTime to the database @​vlsi (#2852)
  • fix: support waffle-jna 2.x and 3.x by using reflective approach for ManagedSecBufferDesc @​chrullrich (#2720)

🧰 Maintenance

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.1] (2023-12-06 08:34:00 -0500)

Changed

  • perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing [PR #3044](pgjdbc/pgjdbc#3044)

Fixed

[42.7.0] (2023-11-20 09:33:00 -0500)

Changed

Fixed

[42.6.0] (2023-03-17 15:34:34 -0400)

Changed

  • fix: use PhantomReferences instead of Obejct.finalize() to track Connection leaks [PR #2847](pgjdbc/pgjdbc#2847)

    The change replaces all uses of Object.finalize with PhantomReferences. The leaked resources (Connections) are tracked in a helper thread that is active as long as there are connections in use. By default, the thread keeps running for 30 seconds after all

... (truncated)

Commits
  • 27bbccf fix attribution
  • bb577e0 prepared for release 42.7.1 update changelogs (#3037)
  • c1a851c fix: avoid timezone conversions when sending LocalDateTime to the database
  • 25fdfc3 fix(deps): update dependency org.checkerframework:org.checkerframework.gradle...
  • 244f4c0 test: use a fixed 1.0.0-dev-master-SNAPSHOT driver version when testing with ...
  • 1492c98 chore: exclude postgresql 1.0.0-dev-master-SNAPSHOT from Renovate as we use t...
  • 8cfd00c chore: use allowedVersions to limit Renovate updates
  • 9e22ac0 chore(deps): update plugin biz.aqute.bnd.builder to v7
  • 9244c0d fix(deps): update dependency com.github.spotbugs:com.github.spotbugs.gradle.p...
  • 5f48b07 chore: try using different syntax for Renovate from upgrading system-stubs 1....
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)