dependabot[bot] opened a new pull request, #6179: URL: https://github.com/apache/texera/pull/6179
Bumps the sbt-patch group with 16 updates: | Package | From | To | | --- | --- | --- | | [com.thesamet.scalapb:compilerplugin_2.13](https://github.com/scalapb/ScalaPB) | `0.11.1` | `0.11.20` | | [com.typesafe:config](https://github.com/lightbend/config) | `1.4.6` | `1.4.9` | | [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.4` | `42.7.12` | | ch.epfl.scala:sbt-scalafix | `0.14.6` | `0.14.7` | | com.github.sbt:sbt-native-packager | `1.11.1` | `1.11.7` | | [org.scalatest:scalatest_2.13](https://github.com/scalatest/scalatest) | `3.2.15` | `3.2.20` | | [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.157` | `4.8.184` | | [com.thesamet.scalapb:scalapb-json4s_2.13](https://github.com/scalapb/scalapb-json4s) | `0.12.0` | `0.12.2` | | [com.flipkart.zjsonpatch:zjsonpatch](https://github.com/flipkart-incubator/zjsonpatch) | `0.4.13` | `0.4.16` | | [io.reactivex.rxjava3:rxjava](https://github.com/ReactiveX/RxJava) | `3.1.6` | `3.1.12` | | [com.typesafe.scala-logging:scala-logging_2.13](https://github.com/lightbend/scala-logging) | `3.9.5` | `3.9.6` | | [org.scalactic:scalactic_2.13](https://github.com/scalatest/scalatest) | `3.2.15` | `3.2.20` | | [com.konghq:unirest-java](https://github.com/Kong/unirest-java) | `3.14.2` | `3.14.5` | | [org.ehcache:sizeof](https://github.com/ehcache/sizeof) | `0.4.3` | `0.4.4` | | org.apache.commons:commons-jcs3-core | `3.2` | `3.2.1` | | [com.softwaremill.sttp.client4:core_2.13](https://github.com/softwaremill/sttp) | `4.0.0-M6` | `4.0.25` | Updates `com.thesamet.scalapb:compilerplugin_2.13` from 0.11.1 to 0.11.20 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/scalapb/ScalaPB/releases";>com.thesamet.scalapb:compilerplugin_2.13's releases</a>.</em></p> <blockquote> <h2>v0.11.17</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/scalapb/ScalaPB/compare/v0.11.16...v0.11.17";>https://github.com/scalapb/ScalaPB/compare/v0.11.16...v0.11.17</a></p> <h2>v0.11.16</h2> <h2>What's Changed</h2> <ul> <li>Update mockito-core to 5.10.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1636";>scalapb/ScalaPB#1636</a></li> <li>Bump bazelbuild/setup-bazelisk from 2 to 3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1638";>scalapb/ScalaPB#1638</a></li> <li>Bump actions/cache from 3 to 4 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1634";>scalapb/ScalaPB#1634</a></li> <li>Update commons-codec to 1.16.1 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1641";>scalapb/ScalaPB#1641</a></li> <li>Update coursier to 2.1.9 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1642";>scalapb/ScalaPB#1642</a></li> <li>Update grpc-netty, grpc-protobuf, grpc-stub to 1.61.1 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1643";>scalapb/ScalaPB#1643</a></li> <li>Update scalatest to 3.2.18 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1645";>scalapb/ScalaPB#1645</a></li> <li>Update scalacheck-1-17 to 3.2.18.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1646";>scalapb/ScalaPB#1646</a></li> <li>Update silencer-lib, silencer-plugin to 1.7.15 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1648";>scalapb/ScalaPB#1648</a></li> <li>Update silencer-lib, silencer-plugin to 1.7.16 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1649";>scalapb/ScalaPB#1649</a></li> <li>Update sbt to 1.9.9 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1650";>scalapb/ScalaPB#1650</a></li> <li>Update grpc-netty, grpc-protobuf, grpc-stub to 1.62.2 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1651";>scalapb/ScalaPB#1651</a></li> <li>Update scala-compiler, scala-library to 2.12.19 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1652";>scalapb/ScalaPB#1652</a></li> <li>Update scala-compiler, scala-library to 2.13.13 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1653";>scalapb/ScalaPB#1653</a></li> <li>Update sbt-projectmatrix to 0.10.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1654";>scalapb/ScalaPB#1654</a></li> <li>Update mockito-core to 5.11.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1655";>scalapb/ScalaPB#1655</a></li> <li>Update scala3-compiler, scala3-library, ... to 3.3.3 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1656";>scalapb/ScalaPB#1656</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/scalapb/ScalaPB/compare/v0.11.15...v0.11.16";>https://github.com/scalapb/ScalaPB/compare/v0.11.15...v0.11.16</a></p> <h2>v0.11.15</h2> <h2>What's Changed</h2> <ul> <li>Update sbt-native-packager to 1.9.14 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1485";>scalapb/ScalaPB#1485</a></li> <li>Update sbt-native-packager to 1.9.15 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1487";>scalapb/ScalaPB#1487</a></li> <li>add <code>asRecognized</code> method in GeneratedEnum by <a href="https://github.com/xuwei-k";><code>@xuwei-k</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1489";>scalapb/ScalaPB#1489</a></li> <li>Update sbt-native-packager to 1.9.16 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1490";>scalapb/ScalaPB#1490</a></li> <li>Update mockito-core to 5.2.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1494";>scalapb/ScalaPB#1494</a></li> <li>Update coursier to 2.1.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1495";>scalapb/ScalaPB#1495</a></li> <li>Update nscplugin, sbt-scala-native, ... to 0.4.11 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1497";>scalapb/ScalaPB#1497</a></li> <li>Update nscplugin, sbt-scala-native, ... to 0.4.12 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1498";>scalapb/ScalaPB#1498</a></li> <li>Update sbt-mima-plugin to 1.1.2 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1502";>scalapb/ScalaPB#1502</a></li> <li>MethodDescriptor: add input and output types by <a href="https://github.com/jordancoll";><code>@jordancoll</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1503";>scalapb/ScalaPB#1503</a></li> <li>Add http4s-grpc by <a href="https://github.com/armanbilge";><code>@armanbilge</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1492";>scalapb/ScalaPB#1492</a></li> <li>Use Scaladex badge on ReadMe to show Scala version support by <a href="https://github.com/rtyley";><code>@rtyley</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1504";>scalapb/ScalaPB#1504</a></li> <li>Update mockito-core to 5.3.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1507";>scalapb/ScalaPB#1507</a></li> <li>Update coursier to 2.1.1 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1506";>scalapb/ScalaPB#1506</a></li> <li>Update grpc-netty, grpc-protobuf, grpc-stub to 1.54.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1499";>scalapb/ScalaPB#1499</a></li> <li>Update sbt-ci-release to 1.5.11 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1420";>scalapb/ScalaPB#1420</a></li> <li>Update grpc-netty, grpc-protobuf, grpc-stub to 1.54.1 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1510";>scalapb/ScalaPB#1510</a></li> <li>Update coursier to 2.1.2 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1511";>scalapb/ScalaPB#1511</a></li> <li>Bump <code>@sideway/formula</code> from 3.0.0 to 3.0.1 in /website by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1508";>scalapb/ScalaPB#1508</a></li> <li>Update mockito-core to 5.3.1 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1512";>scalapb/ScalaPB#1512</a></li> <li>Update scala-collection-compat to 2.10.0 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1513";>scalapb/ScalaPB#1513</a></li> <li>Update sbt-ci-release to 1.5.12 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/scalapb/ScalaPB/pull/1514";>scalapb/ScalaPB#1514</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/scalapb/ScalaPB/blob/master/CHANGELOG.md";>com.thesamet.scalapb:compilerplugin_2.13's changelog</a>.</em></p> <blockquote> <h1>Change Log</h1> <h2>[1.0.0] (Not yet released)</h2> <ul> <li>Bump protobuf and protoc to 4.28.2. Currently files must specify proto2 and proto3 syntax. Editions are not supported yet.</li> <li>References to descriptors are fully qualified (<a href="https://redirect.github.com/scalapb/ScalaPB/issues/1724";>#1724</a>)</li> <li>Oneofs are now generated as sealed abstract class instead of sealed traits (<a href="https://redirect.github.com/scalapb/ScalaPB/issues/1694";>#1694</a>)</li> <li>BREAKING CHANGE: As a result of protobuf 4.x change, extensions in proto3 now have presence, and so are wrapped in an <code>Option[]</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/scalapb/ScalaPB/commit/e025fdeed05f71b696de88c0d7a8e1a1775e7ee2";><code>e025fde</code></a> Fix organization name</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/38eab157bfa5d04bd063ed5d596e5ee2d89fe30a";><code>38eab15</code></a> Add claude to gitignore</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/732324001abf1d30fb138477f8bc3f2dded7baed";><code>7323240</code></a> resolve oneof field name conflicts with imported packages (<a href="https://redirect.github.com/scalapb/ScalaPB/issues/1947";>#1947</a>)</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/55b6847468a483b311052cbb87d93a49f60b9ba4";><code>55b6847</code></a> Upgrade to ubuntu latest</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/9c8fb12370d89c2bd85ec1b6ee8db146d6ace9a3";><code>9c8fb12</code></a> Update mockito-core to 5.19.0 in 0.11.x (<a href="https://redirect.github.com/scalapb/ScalaPB/issues/1931";>#1931</a>)</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/822f8b847981bc60fef2cc6ef5348857c98a668c";><code>822f8b8</code></a> Update sbt, scripted-plugin to 1.11.4 in 0.11.x (<a href="https://redirect.github.com/scalapb/ScalaPB/issues/1929";>#1929</a>)</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/ada3678ed40789b2d2677c8b8b3d41a0cc04207c";><code>ada3678</code></a> Update commons-codec to 1.19.0 in 0.11.x (<a href="https://redirect.github.com/scalapb/ScalaPB/issues/1923";>#1923</a>)</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/f7d4058ef638a94ca485b0eb9c57f266266c7d27";><code>f7d4058</code></a> Update sbt-mdoc to 2.7.2 in 0.11.x (<a href="https://redirect.github.com/scalapb/ScalaPB/issues/1921";>#1921</a>)</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/f4c626e1e612a4a3c385292ba7377777c664c7f6";><code>f4c626e</code></a> Upgrade sbt ci release</li> <li><a href="https://github.com/scalapb/ScalaPB/commit/8da06911b15aed7d84f83c4df5bc8561b6d28b43";><code>8da0691</code></a> Add required using keyword under Scala 3 (<a href="https://redirect.github.com/scalapb/ScalaPB/issues/1854";>#1854</a>)</li> <li>Additional commits viewable in <a href="https://github.com/scalapb/ScalaPB/compare/v0.11.1...v0.11.20";>compare view</a></li> </ul> </details> <br /> Updates `com.typesafe:config` from 1.4.6 to 1.4.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lightbend/config/releases";>com.typesafe:config's releases</a>.</em></p> <blockquote> <h2>v1.4.9</h2> <h2>What's Changed</h2> <ul> <li>docs: release notes 1.4.8 by <a href="https://github.com/johanandren";><code>@johanandren</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/847";>lightbend/config#847</a></li> <li>fix: origin line numbers after newline separators by <a href="https://github.com/mattheworford";><code>@mattheworford</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/850";>lightbend/config#850</a></li> <li>feat: opt-in unknown key validation for ConfigBeanFactory by <a href="https://github.com/mattheworford";><code>@mattheworford</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/851";>lightbend/config#851</a></li> <li>fix: wrong line number for objects after multiline string by <a href="https://github.com/mattheworford";><code>@mattheworford</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/853";>lightbend/config#853</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mattheworford";><code>@mattheworford</code></a> made their first contribution in <a href="https://redirect.github.com/lightbend/config/pull/850";>lightbend/config#850</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lightbend/config/compare/v1.4.8...v1.4.9";>https://github.com/lightbend/config/compare/v1.4.8...v1.4.9</a></p> <h2>v1.4.8</h2> <h2>What's Changed</h2> <ul> <li>fix: BugOrBroken - partially-shadowed object has nested delayed merge by <a href="https://github.com/johanandren";><code>@johanandren</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/846";>lightbend/config#846</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lightbend/config/compare/v1.4.7...v1.4.8";>https://github.com/lightbend/config/compare/v1.4.7...v1.4.8</a></p> <h2>v1.4.7</h2> <h2>What's Changed</h2> <ul> <li>docs: adjust description of release process by <a href="https://github.com/sebastian-alfers";><code>@sebastian-alfers</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/834";>lightbend/config#834</a></li> <li>docs: Update NEWS with latest two releases by <a href="https://github.com/johanandren";><code>@johanandren</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/835";>lightbend/config#835</a></li> <li>CI fixes by <a href="https://github.com/jsoref";><code>@jsoref</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/843";>lightbend/config#843</a></li> <li>Fix spelling by <a href="https://github.com/jsoref";><code>@jsoref</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/840";>lightbend/config#840</a></li> <li>fix: rendering of substituted list with space by <a href="https://github.com/johanandren";><code>@johanandren</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/841";>lightbend/config#841</a></li> <li>fix: Don't evaluate substitutions hidden by values from resolved objects by <a href="https://github.com/johanandren";><code>@johanandren</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/839";>lightbend/config#839</a></li> <li>Drop the broken Maven chip in Readme by <a href="https://github.com/ennru";><code>@ennru</code></a> in <a href="https://redirect.github.com/lightbend/config/pull/844";>lightbend/config#844</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jsoref";><code>@jsoref</code></a> made their first contribution in <a href="https://redirect.github.com/lightbend/config/pull/843";>lightbend/config#843</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lightbend/config/compare/v1.4.6...v1.4.7";>https://github.com/lightbend/config/compare/v1.4.6...v1.4.7</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/lightbend/config/blob/main/NEWS.md";>com.typesafe:config's changelog</a>.</em></p> <blockquote> <h1>1.4.9: June 3, 2026</h1> <ul> <li>fix: origin line numbers after newline separators (<a href="https://redirect.github.com/lightbend/config/pull/850";>#850</a>) thanks to <a href="https://github.com/mattheworford";><code>@mattheworford</code></a></li> <li>feat: opt-in unknown key validation for ConfigBeanFactory (<a href="https://redirect.github.com/lightbend/config/pull/851";>#851</a>) thanks to <a href="https://github.com/mattheworford";><code>@mattheworford</code></a></li> <li>fix: wrong line number for objects after multiline string (<a href="https://redirect.github.com/lightbend/config/pull/853";>#853</a>) thanks to <a href="https://github.com/mattheworford";><code>@mattheworford</code></a></li> </ul> <h1>1.4.8: May 5, 2026</h1> <ul> <li>fix: BugOrBroken - partially-shadowed object has nested delayed merge, fix for regression introduced in 1.4.7, (<a href="https://redirect.github.com/lightbend/config/pull/846";>#846</a>) thanks to <a href="https://github.com/johanandren";><code>@johanandren</code></a></li> </ul> <h1>1.4.7: April 28, 2026</h1> <ul> <li>fix: rendering of substituted list with space (<a href="https://redirect.github.com/lightbend/config/pull/841";>#841</a>) thanks to <a href="https://github.com/johanandren";><code>@johanandren</code></a></li> <li>fix: Don't evaluate substitutions hidden by values from resolved objects (<a href="https://redirect.github.com/lightbend/config/pull/839";>#839</a>) thanks to <a href="https://github.com/johanandren";><code>@johanandren</code></a></li> <li>build: CI improvements (<a href="https://redirect.github.com/lightbend/config/pull/843";>#843</a>) thanks to <a href="https://github.com/jsoref";><code>@jsoref</code></a></li> <li>docs: spelling improvements by (<a href="https://redirect.github.com/lightbend/config/pull/840";>#840</a>) thanks to <a href="https://github.com/jsoref";><code>@jsoref</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lightbend/config/commit/92fc7df0296191db982cd80b9139db2d280882af";><code>92fc7df</code></a> fix: wrong line number for objects after multiline string (<a href="https://redirect.github.com/lightbend/config/issues/853";>#853</a>)</li> <li><a href="https://github.com/lightbend/config/commit/81f2de09c9072f940ee888ce19107378fa4421e7";><code>81f2de0</code></a> feat: opt-in unknown key validation for ConfigBeanFactory (<a href="https://redirect.github.com/lightbend/config/issues/851";>#851</a>)</li> <li><a href="https://github.com/lightbend/config/commit/be40b4b63574febc19805680213781d5a8545ac8";><code>be40b4b</code></a> chore: correct origin line numbers after newline separators (<a href="https://redirect.github.com/lightbend/config/issues/850";>#850</a>)</li> <li><a href="https://github.com/lightbend/config/commit/8a928478a10d66d7604f79ee5fb690f5e1c112ea";><code>8a92847</code></a> docs: release notes 1.4.8 (<a href="https://redirect.github.com/lightbend/config/issues/847";>#847</a>)</li> <li><a href="https://github.com/lightbend/config/commit/b0a1e43b61d11e0f1aeefb939ea8d8576229a684";><code>b0a1e43</code></a> fix: regression - partially-shadowed object has nested delayed merge (<a href="https://redirect.github.com/lightbend/config/issues/846";>#846</a>)</li> <li><a href="https://github.com/lightbend/config/commit/eb80714c074036e723d6cb14929bcb1582ec34a7";><code>eb80714</code></a> Drop the broken Maven chip in Readme (<a href="https://redirect.github.com/lightbend/config/issues/844";>#844</a>)</li> <li><a href="https://github.com/lightbend/config/commit/833bacb616f92cae73c67d8b7a8ae9f6e44b474c";><code>833bacb</code></a> fix: Don't evaluate substitutions hidden by values from resolved objects (<a href="https://redirect.github.com/lightbend/config/issues/839";>#839</a>)</li> <li><a href="https://github.com/lightbend/config/commit/dd3a0df142f7def91c13b4a0576af5528e9fd7f4";><code>dd3a0df</code></a> fix: rendering of substituted list with spacce (<a href="https://redirect.github.com/lightbend/config/issues/841";>#841</a>)</li> <li><a href="https://github.com/lightbend/config/commit/eb46e0e09065f974de851de83a7ab121aae91e6d";><code>eb46e0e</code></a> chore: Fix spelling here and there (<a href="https://redirect.github.com/lightbend/config/issues/840";>#840</a>)</li> <li><a href="https://github.com/lightbend/config/commit/affd59d79928662f262fc12c20aeff9784600349";><code>affd59d</code></a> build: update actions, replace deprecated apt-key</li> <li>Additional commits viewable in <a href="https://github.com/lightbend/config/compare/v1.4.6...v1.4.9";>compare view</a></li> </ul> </details> <br /> Updates `org.postgresql:postgresql` from 42.7.4 to 42.7.12 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pgjdbc/pgjdbc/releases";>org.postgresql:postgresql's releases</a>.</em></p> <blockquote> <h2>v42.7.12: security</h2> <h3>Silent channel-binding authentication downgrade (CVE-2026-54291)</h3> <p><code>channelBinding=require</code> connections can be silently downgraded from SCRAM-SHA-256-PLUS (with channel binding) to plain SCRAM-SHA-256 (without it), losing the man-in-the-middle protection the setting is meant to guarantee. An attacker who can intercept the TLS connection triggers the downgrade with a certificate whose signature algorithm has no tls-server-end-point channel-binding hash. Examples are Ed25519, Ed448, and post-quantum algorithms.</p> <p>Two issues combine in releases 42.7.4 through 42.7.11:</p> <p>The bundled <code>com.ongres.scram:scram-client</code> (3.1 or 3.2) returns an empty byte array instead of failing when it cannot derive the binding hash for such a certificate. This is the library issue tracked as <a href="https://github.com/ongres/scram/security/advisories/GHSA-p9jg-fcr6-3mhf";>GHSA-p9jg-fcr6-3mhf</a>.</p> <p>pgJDBC does not enforce channelBinding=require where it matters. ScramAuthenticator checks only that the server advertised a -PLUS mechanism; it neither rejects the empty binding nor checks that the negotiated mechanism uses channel binding. The connection therefore downgrades silently.</p> <p>Only connections that set channelBinding=require are affected. Under the default prefer policy, and under allow or disable, falling back to plain SCRAM is the documented behaviour.</p> <p>Releases before 42.7.4 are unaffected, because they do not support channel binding.</p> <h2>v42.7.11</h2> <h2>Security</h2> <ul> <li>fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the <a href="https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq";>Security Advisory</a> for more detail. The following <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-42198";>CVE-2026-42198</a> has been issued.</li> </ul> <h2>Changes</h2> <ul> <li>fix: Add sources and javadocs to shaded published lib generation <a href="https://github.com/sehrope";><code>@sehrope</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4043";>#4043</a>)</li> <li>update Changelog and website for release of 42.7.11 <a href="https://github.com/davecramer";><code>@davecramer</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4042";>#4042</a>)</li> <li>Fix scram fix location in changelog and update published artifact developer list <a href="https://github.com/sehrope";><code>@sehrope</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4041";>#4041</a>)</li> <li>Restrict test with scram_iterations to v16+ and release notes <a href="https://github.com/sehrope";><code>@sehrope</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4040";>#4040</a>)</li> <li>chore(deps): update ubuntu:24.04 docker digest to 84e77de <a href="https://github.com/renovate-bot";><code>@renovate-bot</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4017";>#4017</a>)</li> <li>test: add tests for QueryExecutor#getTransactionState <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4006";>#4006</a>)</li> <li>chore(deps): update actions/create-github-app-token action to v2.2.2 <a href="https://github.com/renovate-bot";><code>@renovate-bot</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3983";>#3983</a>)</li> <li>fix: fix flaky CopyBothResponseTest by using WAL flush LSN <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3979";>#3979</a>)</li> <li>fix: fix flaky replication restart tests by waiting for confirmed_flush_lsn <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3975";>#3975</a>)</li> <li>test: fix flaky LogicalReplicationStatusTest by polling pg_stat_replication <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3974";>#3974</a>)</li> <li>chore: replace Appveyor with ikalnytskyi/action-setup-postgres <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3966";>#3966</a>)</li> <li>test: move test table creation from <a href="https://github.com/BeforeEach";><code>@BeforeEach</code></a> to <a href="https://github.com/BeforeAll";><code>@BeforeAll</code></a> <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3967";>#3967</a>)</li> <li>Return jsonb as PGObject fixes Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3926";>#3926</a> <a href="https://github.com/davecramer";><code>@davecramer</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3956";>#3956</a>)</li> <li>Update docker scripts <a href="https://github.com/davecramer";><code>@davecramer</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3958";>#3958</a>)</li> <li>implement require_auth, this is pretty much how libpq does this. <a href="https://github.com/davecramer";><code>@davecramer</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3895";>#3895</a>)</li> <li>docs: add SCRAM authentication test setup section to TESTING.md <a href="https://github.com/emmaeng700";><code>@emmaeng700</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3945";>#3945</a>)</li> <li>Add RequireServerVersion annotation for tests <a href="https://github.com/sehrope";><code>@sehrope</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3939";>#3939</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>fix: ensure extended protocol messages end with Sync message <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3728";>#3728</a>)</li> <li>fix: enable cursor-based fetching in extended protocol when transaction started via SQL command <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3996";>#3996</a>)</li> <li>fix: retry with SSL on IOException when sslMode=ALLOW <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3973";>#3973</a>)</li> <li>fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3968";>#3968</a>)</li> <li>fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3962";>#3962</a>)</li> <li>fix: use compareTo for LogSequenceNumber comparison <a href="https://github.com/vlsi";><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3961";>#3961</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md";>org.postgresql:postgresql's changelog</a>.</em></p> <blockquote> <h2>[42.7.12] (2026-xx-xx)</h2> <h3>Security</h3> <h3>Added</h3> <ul> <li>feat: <code>reWriteBatchedInserts</code> now merges up to 32768 rows into one multi-values <code>INSERT</code> (bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The new <code>reWriteBatchedInsertsSize</code> connection property lowers that cap when set; the default of <code>0</code> uses that maximum.</li> <li>feat: invalidate the prepared-statement cache after CREATE/DROP/ALTER so callers no longer trip on "cached plan must not change result type" without opting into <code>autosave=ALWAYS</code>. Controlled by the new <code>flushCacheOnDdl</code> connection property (default <code>true</code>); set to <code>false</code> for the prior behaviour.</li> <li>feat: add <code>connectExecutor</code> connection property to customize the <code>Executor</code> used to run the worker task that performs the connection attempt when <code>loginTimeout</code> is in effect. The value is the fully qualified name of a class implementing <code>java.util.concurrent.Executor</code>. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named <code>"PostgreSQL JDBC driver connection thread"</code>. The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it.</li> <li>feat: add <code>connectThreadFactory</code> connection property to customize the <code>ThreadFactory</code> used to spawn the worker thread that runs the connection attempt when <code>loginTimeout</code> is in effect. The value is the fully qualified name of a class implementing <code>java.util.concurrent.ThreadFactory</code>. With a null value, the default, the driver retains the prior behavior of using a daemon thread named <code>"PostgreSQL JDBC driver connection thread"</code>. Useful for testing timeout behaviour or for applications that want detailed control of all driver-created threads.</li> <li>feat: add <code>classLoaderStrategy</code> connection property to control which classloaders the driver searches when loading a class named by a connection property, for example <code>socketFactory</code>. The default <code>driver-first</code> now falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Set <code>driver</code> to keep the previous driver-classloader-only behaviour, or <code>context-first</code> to prefer the thread context classloader [Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2112";>#2112</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2112";>pgjdbc/pgjdbc#2112</a>)</li> </ul> <h3>Changed</h3> <ul> <li>refactor: the worker that runs the connection attempt under <code>loginTimeout</code> is now a <code>FutureTask</code> (<code>ConnectTask</code>) instead of the hand-rolled <code>ConnectThread</code>. When the caller hits the timeout, the task is now cancelled with <code>cancel(true)</code>, which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, so <code>loginTimeout</code> can stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out.</li> <li>chore: <code>PGXAConnection.ConnectionHandler</code> now rejects <code>setAutoCommit(false)</code> and <code>setSavepoint(...)</code> during an active XA branch, in addition to the long-rejected <code>setAutoCommit(true)</code> / <code>commit()</code> / <code>rollback()</code>. The <code>setSavepoint</code> rejection was already meant to be in place but the guard misspelled the method name as <code>setSavePoint</code>, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4.</li> <li>chore: <code>commitPrepared</code> / <code>rollback</code>-of-prepared now return <code>XAER_RMFAIL</code> instead of <code>XAER_RMERR</code> when the underlying connection is left in a non-idle <code>TransactionState</code>. Transaction managers (Geronimo, Narayana, Atomikos) treat <code>XAER_RMFAIL</code> as retryable on a fresh <code>XAResource</code>; the prepared transaction is no longer abandoned.</li> </ul> <h3>Fixed</h3> <ul> <li>fix: the published GitHub release now ships the released <code>postgresql-<version>.jar</code> and its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar [Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3812";>#3812</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3812";>pgjdbc/pgjdbc#3812</a>) [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3814";>#3814</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3814";>pgjdbc/pgjdbc#3814</a>)</li> <li>fix: simplify the <code>Statement#cancel</code> state machine by dropping the redundant <code>CANCELLED</code> state. <code>killTimerTask</code> now waits for the state to return to <code>IDLE</code> directly, which removes a spin-forever case when more than one thread observes the cancel completing [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/1827";>#1827</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/1827";>pgjdbc/pgjdbc#1827</a>).</li> <li>perf: defer simple-query flushes until the driver reads the response, allowing <code>BEGIN</code> and the following query to share a network flush [Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3894";>#3894</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3894";>pgjdbc/pgjdbc#3894</a>)</li> <li>fix: <code>reWriteBatchedInserts</code> no longer throws <code>IllegalArgumentException</code> when batching a parameterless <code>INSERT</code> (for example <code>INSERT INTO t VALUES (1, 2)</code>) of 256 rows or more.</li> <li>fix: a comment before <code>CALL</code> in a <code>CallableStatement</code> no longer hides the native call, so OUT parameter registration works for <code>/* comment */ call proc(?, ?)</code> and similar. <code>Parser.modifyJdbcCall</code> now skips leading whitespace and SQL comments (both <code>--</code> and <code>/* */</code>) before the call, tolerates a trailing comment after a <code>{ ... }</code> escape, and no longer adds a spurious comma when moving an OUT parameter into a call whose arguments are only a comment [Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2538";>#2538</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2538";>pgjdbc/pgjdbc#2538</a>)</li> <li>fix: <code>PreparedStatement.toString()</code> no longer throws for a <code>bytea</code> value supplied as text via <code>PGobject</code>. Hex-format values (<code>\x...</code>) are validated and rendered as a <code>bytea</code> literal, and escape-format values are quoted and cast like any other literal [Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3757";>#3757</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3757";>pgjdbc/pgjdbc#3757</a>)</li> <li>fix: the driver no longer nulls the <code>contextClassLoader</code> of shared <code>ForkJoinPool.commonPool()</code> worker threads, which previously left unrelated tasks on those threads running with a <code>null</code> classloader [Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4155";>#4155</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4155";>pgjdbc/pgjdbc#4155</a>)</li> <li>fix: getCharacterStream wraps String in StringReader [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4063";>#4063</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4063";>pgjdbc/pgjdbc#4063</a>)</li> <li>fix: <code>PGXAConnection</code> no longer saves and restores the underlying connection's JDBC <code>autoCommit</code> flag. All XA-protocol SQL (<code>BEGIN</code>, <code>PREPARE TRANSACTION</code>, <code>COMMIT</code>, <code>ROLLBACK</code>, <code>COMMIT PREPARED</code>, <code>ROLLBACK PREPARED</code>, the <code>recover()</code> SELECT) is sent through <code>QUERY_SUPPRESS_BEGIN</code>, so the caller's <code>autoCommit</code> value is invariant across every <code>XAResource</code> call. Fixes the "2nd phase commit must be issued using an idle connection" failure during recovery on managed datasources that pool connections with <code>autoCommit=false</code> (TomEE, WildFly, WebSphere Liberty).</li> <li>fix: <code>PGXAConnection.prepare()</code> now mutates XA state only after <code>PREPARE TRANSACTION</code> succeeds. A failed <code>PREPARE</code> previously left the driver thinking the branch was already prepared, so the follow-up <code>rollback(xid)</code> tried <code>ROLLBACK PREPARED</code> against a non-existent gid and returned <code>XAER_RMERR</code>. Transaction managers (Narayana) escalated this to <code>HeuristicMixedException</code>. With the fix, <code>rollback(xid)</code> takes the active-branch path and issues a plain <code>ROLLBACK</code>, which the server accepts cleanly. Fixes [Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3153";>#3153</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3153";>pgjdbc/pgjdbc#3153</a>), [Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3123";>#3123</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3123";>pgjdbc/pgjdbc#3123</a>).</li> <li>fix: an updatable result set over an unqualified table name is now classified using only the table visible through <code>search_path</code>. When two schemas held a table with the same name and the same primary or unique index name but a different set of key columns, the driver took the union of both schemas' columns, so the result set could be wrongly rejected as not updatable [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4214";>#4214</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4214";>pgjdbc/pgjdbc#4214</a>). Supersedes [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3400";>#3400</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3400";>pgjdbc/pgjdbc#3400</a>).</li> </ul> <h2>[42.7.11] (2026-04-28)</h2> <h3>Security</h3> <ul> <li>fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the <a href="https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq";>Security Advisory</a> for more detail. The following <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-42198";>CVE-2026-42198</a> has been issued.</li> </ul> <h3>Added</h3> <ul> <li>feat: implement require_auth connection property, aligning with libpq behavior [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3895";>#3895</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3895";>pgjdbc/pgjdbc#3895</a>)</li> </ul> <h3>Changed</h3> <ul> <li>chore: replace Appveyor CI with ikalnytskyi/action-setup-postgres [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3966";>#3966</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3966";>pgjdbc/pgjdbc#3966</a>)</li> <li>chore: upgrade Gradle to v9 [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3978";>#3978</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3978";>pgjdbc/pgjdbc#3978</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>fix: ensure extended protocol messages end with Sync message [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3728";>#3728</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3728";>pgjdbc/pgjdbc#3728</a>)</li> <li>fix: enable cursor-based fetching in extended protocol when transaction started via SQL command [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3996";>#3996</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3996";>pgjdbc/pgjdbc#3996</a>)</li> <li>fix: retry with SSL on IOException when sslMode=ALLOW [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3973";>#3973</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3973";>pgjdbc/pgjdbc#3973</a>)</li> <li>fix: make sure the driver honours connectTimeout when retrying the connection [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3968";>#3968</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3968";>pgjdbc/pgjdbc#3968</a>)</li> <li>fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3968";>#3968</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3968";>pgjdbc/pgjdbc#3968</a>)</li> <li>fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3962";>#3962</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3962";>pgjdbc/pgjdbc#3962</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99";><code>77df98e</code></a> Merge commit from fork</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/68c53a435291fea8be40eb1d9c550311743d326d";><code>68c53a4</code></a> chore: bump version to 42.7.12</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/78e261ff2a7f16a37bdceb2204f67e484387da2f";><code>78e261f</code></a> fix: Add sources and javadocs to shaded published lib generation</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/1e09fa0496377296c9e2ef3bfd2b409945fba17a";><code>1e09fa0</code></a> update Changelog and website for release of 42.7.11 (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4042";>#4042</a>)</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/d479fa5b8c8c915a441ce1f2448f69f23dd0b66c";><code>d479fa5</code></a> Fix scram fix location in changelog and update published artifact developer l...</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/b04fc46af6c207bc7ce9e788fea8c43d18b73d0f";><code>b04fc46</code></a> docs: Add scram max iters fix to changelog</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/cf548225b4078db954765339720ffdf3bc94e5a6";><code>cf54822</code></a> test: Disable scram test on older version without scram_iterations GUC</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/7dbcc79b2b4adf7b71458c9434d2c43cec7713b9";><code>7dbcc79</code></a> test: Add SCRAM max iteration tests</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/c9d41d1332a7426fcef19ff89f2e6b1116429143";><code>c9d41d1</code></a> fix: Limit SCRAM PBKDF2 iterations accepted from the server</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/a340cb2b0ae24c0d98ad9dec569200ebb704d6aa";><code>a340cb2</code></a> style: replace <a href="https://github.com/exception";><code>@exception</code></a> with <a href="https://github.com/throws";><code>@throws</code></a> in getBoolean javadoc</li> <li>Additional commits viewable in <a href="https://github.com/pgjdbc/pgjdbc/compare/REL42.7.4...REL42.7.12";>compare view</a></li> </ul> </details> <br /> Updates `ch.epfl.scala:sbt-scalafix` from 0.14.6 to 0.14.7 Updates `com.github.sbt:sbt-native-packager` from 1.11.1 to 1.11.7 Updates `org.scalatest:scalatest_2.13` from 3.2.15 to 3.2.20 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/scalatest/scalatest/releases";>org.scalatest:scalatest_2.13's releases</a>.</em></p> <blockquote> <h2>3.2.20</h2> <p>Scalactic/ScalaTest 3.2.20 is a point release that makes a bug fixes and few enhancements.</p> <p>Changes included:</p> <ul> <li>In scala-js and scala-native MasterRunner and SlaveRunner, do not hardcode explicitlySpecified to false, use the one passed from TaskDef instead. (<a href="https://redirect.github.com/scalatest/scalatest/pull/2362";>scalatest/scalatest#2362</a>).</li> <li>Removed the long time debugging println in TaskRunner of scala-js and scala-native. (<a href="https://redirect.github.com/scalatest/scalatest/pull/2362";>scalatest/scalatest#2362</a>).</li> <li>Fixed TypeCheckedTripleEqual macro problem in Scala 3. (<a href="https://redirect.github.com/scalatest/scalatest/pull/2373";>scalatest/scalatest#2373</a>).</li> <li>Corrected scaladoc about default execution context in JS. (<a href="https://redirect.github.com/scalatest/scalatest/pull/2374";>scalatest/scalatest#2374</a>).</li> </ul> <h2>3.2.19</h2> <p>Scalactic/ScalaTest 3.2.19 is a point release that makes a bug fixes and few enhancements.</p> <p>Changes included:</p> <ul> <li>Fixed remaining Scala 3 infix warnings in method used in DSL. (<a href="https://redirect.github.com/scalatest/scalatest/pull/2315";>scalatest/scalatest#2315</a>)</li> <li>Upgraded to Scala Native 0.5. (<a href="https://redirect.github.com/scalatest/scalatest/pull/2322";>scalatest/scalatest#2322</a>) ScalaTest+JUnit5</li> <li>Added support to run tests with dynamic test name when running a suite. (<a href="https://redirect.github.com/scalatest/scalatestplus-junit5/pull/19";>scalatest/scalatestplus-junit5#19</a>)</li> <li>Added support for ParallelTestExecution. (<a href="https://redirect.github.com/scalatest/scalatestplus-junit5/pull/18";>scalatest/scalatestplus-junit5#18</a>)</li> <li>Fixed a bug when extracting payload from throwable. (<a href="https://redirect.github.com/scalatest/scalatestplus-junit5/pull/16";>scalatest/scalatestplus-junit5#16</a>)</li> <li>Added wait for tests to finish before continuing. (<a href="https://redirect.github.com/scalatest/scalatestplus-junit5/pull/15";>scalatest/scalatestplus-junit5#15</a>)</li> <li>Updated JUnitSuite example. (<a href="https://redirect.github.com/scalatest/scalatestplus-junit5/pull/14";>scalatest/scalatestplus-junit5#14</a>)</li> <li>Upgraded JUnit version to 5.10.2 in ScalaTest+JUnit5. ScalaTest+JUnit</li> <li>Made JUnitRunner Filterable. (<a href="https://redirect.github.com/scalatest/scalatestplus-junit/pull/8";>scalatest/scalatestplus-junit#8</a>)</li> <li>Translate TestCanceled to fireAssumptionFailed. (<a href="https://redirect.github.com/scalatest/scalatestplus-junit/pull/28";>scalatest/scalatestplus-junit#28</a>) ScalaTest+ScalaCheck</li> <li>Upgraded ScalaCheck version to 1.18 in ScalaTest+ScalaCheck (<a href="https://redirect.github.com/scalatest/scalatestplus-scalacheck/pull/66";>scalatest/scalatestplus-scalacheck#66</a>)</li> <li>Report original arg value if it was shrunk. (<a href="https://redirect.github.com/scalatest/scalatestplus-scalacheck/pull/12";>scalatest/scalatestplus-scalacheck#12</a>) ScalaTest+Mockito</li> <li>Add convient methods for ArgumentCaptor. (<a href="https://redirect.github.com/scalatest/scalatestplus-mockito/pull/27";>scalatest/scalatestplus-mockito#27</a>)</li> <li>Upgraded Mockito version to 5.12 in ScalaTest+Mockito. ScalaTest+Selenium</li> <li>Upgraded Selenium version to 4.21 in ScalaTest+Selenium. ScalaTest+TestNG</li> <li>Upgraded TestNG version to 7.10 in ScalaTest+TestNG. ScalaTest+JMock</li> <li>Upgraded JMock version to 2.13 in ScalaTest+JMock. ScalaTest+EasyMock</li> <li>Upgraded EasyMock version to 5.3 in ScalaTest+EasyMock.</li> </ul> <h2>3.2.18</h2> <p>Scalactic/ScalaTest 3.2.18 is a point release that makes a few enhancements.</p> <p>Changes included:</p> <ul> <li>Added the missing sleep call in Retries to withRetry function. ([PR <a href="https://redirect.github.com/scalatest/scalatest/issues/2279";>#2279</a>](<a href="https://redirect.github.com/scalatest/scalatest/pull/2279";>scalatest/scalatest#2279</a>))</li> <li>Fixed unexpected warning in Scala 2 macro for assert(foo.isEmpty()). ([PR <a href="https://redirect.github.com/scalatest/scalatest/issues/2298";>#2298</a>](<a href="https://redirect.github.com/scalatest/scalatest/pull/2298";>scalatest/scalatest#2298</a>))</li> <li>Call the sleep function in Retries that takes nano part. ([PR <a href="https://redirect.github.com/scalatest/scalatest/issues/2279";>#2279</a>](<a href="https://redirect.github.com/scalatest/scalatest/pull/2279";>scalatest/scalatest#2279</a>))</li> <li>Enhanced Conductors to catch UnsupportedOperationException when calling Thread's stop, and call method interrupt when that happens as next attempt to stop the running thread, avoiding hang problem when using Conductors. ([PR <a href="https://redirect.github.com/scalatest/scalatest/issues/2284";>#2284</a>](<a href="https://redirect.github.com/scalatest/scalatest/pull/2284";>scalatest/scalatest#2284</a>))</li> <li>Reimplemented InsertionOrderSet using scala.collection.mutable.LinkedHashSet to improve performance. ([PR <a href="https://redirect.github.com/scalatest/scalatest/issues/2308";>#2308</a>](<a href="https://redirect.github.com/scalatest/scalatest/pull/2308";>scalatest/scalatest#2308</a>))</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/scalatest/scalatest/commit/b4efe5a942fd290e9b1bb377a2efeb816b34ea21";><code>b4efe5a</code></a> Updated previous version to 3.2.19.</li> <li><a href="https://github.com/scalatest/scalatest/commit/eb5a55d9f3ffbc0a351dd971ebcf21a1560b14e9";><code>eb5a55d</code></a> Fixed problem when staging 3.2.20.</li> <li><a href="https://github.com/scalatest/scalatest/commit/ca3f2fbc0854fa2f032e5c79091b871d25aa8a91";><code>ca3f2fb</code></a> Added allowUnsafeScalaLibUpgrade := true to NativeBuild to fix build problem ...</li> <li><a href="https://github.com/scalatest/scalatest/commit/ba31dcedeeb448382cea5a6059c17f3b97cdc8e0";><code>ba31dce</code></a> Fixed failing test in HavePropertyMatcherSpec.scala when building with Scala ...</li> <li><a href="https://github.com/scalatest/scalatest/commit/cfb733511af3fafadcbb718397d93a84b2337229";><code>cfb7335</code></a> Made 2.13.10 as first crossScalaVersions, which will be the default scala ver...</li> <li><a href="https://github.com/scalatest/scalatest/commit/825436882cbe152197d13f34cf40a568552dd1dc";><code>8254368</code></a> Changed to use sonaUpload.</li> <li><a href="https://github.com/scalatest/scalatest/commit/2d5717287f2c6f117af4e58c22d3c90d75949806";><code>2d57172</code></a> Made build to work with publishing to Sonatype Central.</li> <li><a href="https://github.com/scalatest/scalatest/commit/ca2f528f9b6944bdd440f889582e5d75f4b43270";><code>ca2f528</code></a> Merge branch 'feature-scala-3-type-checked-triple-equal-fix' of <a href="https://githu";>https://githu</a>...</li> <li><a href="https://github.com/scalatest/scalatest/commit/555ff413b5555c3f152c1c650ba9ba59d0508c12";><code>555ff41</code></a> Corrected scaladoc about default execution context in JS.</li> <li><a href="https://github.com/scalatest/scalatest/commit/829fa73680c46f6fe3fb7401a50d44208f9c257e";><code>829fa73</code></a> Got the new tests for TypeCheckedTripleEquals to work in a separate Assertion...</li> <li>Additional commits viewable in <a href="https://github.com/scalatest/scalatest/compare/release-3.2.15...release-3.2.20";>compare view</a></li> </ul> </details> <br /> Updates `io.github.classgraph:classgraph` from 4.8.157 to 4.8.184 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/classgraph/classgraph/releases";>io.github.classgraph:classgraph's releases</a>.</em></p> <blockquote> <h2>classgraph-4.8.184</h2> <ul> <li>Fix <a href="https://redirect.github.com/classgraph/classgraph/issues/919";>#919</a> -- thanks to <a href="https://github.com/aurimasniekis";><code>@aurimasniekis</code></a></li> <li>Fix <a href="https://redirect.github.com/classgraph/classgraph/issues/920";>#920</a> via <a href="https://redirect.github.com/classgraph/classgraph/issues/921";>#921</a> -- thanks to <a href="https://github.com/chubert-ch";><code>@chubert-ch</code></a></li> </ul> <h2>classgraph-4.8.183</h2> <ul> <li>Fixed some build issues.</li> </ul> <h2>classgraph-4.8.182</h2> <ul> <li>Dropped support for JDK 7 (since JDK 7 is no longer supported by javac as of JDK 20).</li> <li>Dropped support for JVM-Driver for overcoming strong encapsulation in problematic classloaders (Narcissus is still supported).</li> <li>Fix broken module declaration (<a href="https://redirect.github.com/classgraph/classgraph/issues/923";>#923</a>, <a href="https://redirect.github.com/classgraph/classgraph/issues/922";>#922</a>, <a href="https://redirect.github.com/classgraph/classgraph/issues/911";>#911</a>).</li> </ul> <h2>classgraph-4.8.181</h2> <p>Fixes:</p> <ul> <li><a href="https://redirect.github.com/classgraph/classgraph/issues/906";>#906</a> (classloader delegation order issue)</li> <li><a href="https://redirect.github.com/classgraph/classgraph/issues/896";>#896</a>/<a href="https://redirect.github.com/classgraph/classgraph/issues/907";>#907</a> (JBoss/WildFly -- exploded jars not being found -- regression)</li> </ul> <h2>classgraph-4.8.180</h2> <p>Stops showing this warning on JDK 24+ (<a href="https://redirect.github.com/classgraph/classgraph/issues/899";>#899</a>):</p> <pre><code>WARNING: A terminally deprecated method in sun.misc.Unsafe has been called WARNING: sun.misc.Unsafe::invokeCleaner has been called by nonapi.io.github.classgraph.utils.FileUtils (file:/home/zakkak/.m2/repository/io/github/classgraph/classgraph/4.8.179/classgraph-4.8.179.jar) WARNING: Please consider reporting this to the maintainers of class nonapi.io.github.classgraph.utils.FileUtils WARNING: sun.misc.Unsafe::invokeCleaner will be removed in a future release </code></pre> <p>Downside: <code>ClassGraph#enableMemoryMapping()</code> is disabled for now on JDK 24+ (this was not enabled by default).</p> <p>Memory mapping wasn't that much faster than the default of standard NIO file access, so this should not impact performance much, and the impact should be limited to a small number of users.</p> <p>ClassGraph version 5 should support memory management again (but there is no timeline for when that will be released).</p> <h2>classgraph-4.8.179</h2> <p>Fixes URL generation on Windows (uses <code>file:///</code> rather than <code>file:/</code>) -- <a href="https://redirect.github.com/classgraph/classgraph/issues/888";>#888</a>. Thanks to <a href="https://github.com/cowwoc";><code>@cowwoc</code></a> for the fix, <a href="https://redirect.github.com/classgraph/classgraph/issues/889";>#889</a>.</p> <h2>classgraph-4.8.178</h2> <p>Fixes classpath finding on Quarkus 3.16 (which changed how the classloader works, <a href="https://redirect.github.com/classgraph/classgraph/issues/891";>#891</a>). Thanks to <a href="https://github.com/michael-simons";><code>@michael-simons</code></a> for the fix!</p> <h2>classgraph-4.8.177</h2> <p>Throw <code>IllegalStateException</code> rather than NPE if the user tries to access a resource after the <code>ScanResult</code> has been closed (<a href="https://redirect.github.com/classgraph/classgraph/issues/885";>#885</a>, thanks to <a href="https://github.com/sebthom";><code>@sebthom</code></a> for reporting).</p> <h2>classgraph-4.8.176</h2> <p>Add <code>synchronized</code> block around API methods that have side effects, to make them threadsafe (<a href="https://redirect.github.com/classgraph/classgraph/issues/883";>#883</a>, thanks to <a href="https://github.com/inphonetic";><code>@inphonetic</code></a>).</p> <h2>classgraph-4.8.175</h2> <p>Merged two PRs from <a href="https://github.com/freya022";><code>@freya022</code></a> (thanks!):</p> <ul> <li><a href="https://redirect.github.com/classgraph/classgraph/issues/878";>#878</a> (Store annotation getters of ClassInfo and MethodInfo)</li> <li><a href="https://redirect.github.com/classgraph/classgraph/issues/879";>#879</a> (Catch <code>NoClassDefFoundError</code> when loading methods)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/classgraph/classgraph/commit/49a64e78cbe278b68949b57a9ece2ea2831af479";><code>49a64e7</code></a> Bump version number</li> <li><a href="https://github.com/classgraph/classgraph/commit/ef5c88874352e58de1e34c1d2a2d73b085f7fe4f";><code>ef5c888</code></a> Merge branch 'latest' of <a href="https://github.com/classgraph/classgraph";>https://github.com/classgraph/classgraph</a> into latest</li> <li><a href="https://github.com/classgraph/classgraph/commit/11cd1aae71922c2890890f18bd239a910e5d5d43";><code>11cd1aa</code></a> Probably fix <a href="https://redirect.github.com/classgraph/classgraph/issues/916";>#916</a></li> <li><a href="https://github.com/classgraph/classgraph/commit/b42e9b88ef5a2a2b41526e4fe89f9067ea8f1669";><code>b42e9b8</code></a> Merge pull request <a href="https://redirect.github.com/classgraph/classgraph/issues/919";>#919</a> from aurimasniekis/latest</li> <li><a href="https://github.com/classgraph/classgraph/commit/4024fbf2f178c7e19af186eef9cdfbf80cc9f995";><code>4024fbf</code></a> Build fix</li> <li><a href="https://github.com/classgraph/classgraph/commit/6f60747cedc02cb698672c87572c1c460e38f440";><code>6f60747</code></a> Bump minimum JDK version to 8</li> <li><a href="https://github.com/classgraph/classgraph/commit/1534463a334aaf8eabc7193cc3c8e3efed4a169c";><code>1534463</code></a> Remove EOL JVM-Driver support (Narcissus is still supported)</li> <li><a href="https://github.com/classgraph/classgraph/commit/f329d650a73b4e4738704ff5e2573aa40f50437e";><code>f329d65</code></a> Remove EOL JVM-Driver support (Narcissus is still supported)</li> <li><a href="https://github.com/classgraph/classgraph/commit/f1b1a4fcd49cb84cd8028928eb1a82a967cea372";><code>f1b1a4f</code></a> Update version number</li> <li><a href="https://github.com/classgraph/classgraph/commit/4d941924a724c6696707ce392d86cec9285eee0e";><code>4d94192</code></a> feat(scan): propagate ScanResult to module and package annotations</li> <li>Additional commits viewable in <a href="https://github.com/classgraph/classgraph/compare/classgraph-4.8.157...classgraph-4.8.184";>compare view</a></li> </ul> </details> <br /> Updates `com.thesamet.scalapb:scalapb-json4s_2.13` from 0.12.0 to 0.12.2 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/f2776a6a0641731e0005440a1679eb62ceac3ec0";><code>f2776a6</code></a> Add install SBT step in CI</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/8f9f0fc339cd92b43ada9eadb7f8c8fea2b424f6";><code>8f9f0fc</code></a> Bump up ScalaPB</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/aa48aedcbd4b659f1a7d1e7a60a47ade77c5d0d0";><code>aa48aed</code></a> Update Scala versions</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/75a0685018d20f95642e5edf17a8a08bc035d342";><code>75a0685</code></a> Bump up protobuf-java</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/2afe38f58a5119f8d33a49f6fb625ac36602ddc8";><code>2afe38f</code></a> Add test for Any containing a timestamp</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/b98221b5297e3ad9e477efcc0b2b0ef11d0f5a31";><code>b98221b</code></a> Update scalafmt-core to 3.7.17 (<a href="https://redirect.github.com/scalapb/scalapb-json4s/issues/431";>#431</a>)</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/491da21352300d8a44114f637a5dbb4d62b55771";><code>491da21</code></a> Update protobuf-java, protobuf-java-util to 3.25.1 (<a href="https://redirect.github.com/scalapb/scalapb-json4s/issues/430";>#430</a>)</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/d6ad9b226e9f57a66ac064cfe17470bf5ebe823c";><code>d6ad9b2</code></a> Update protobuf-java, protobuf-java-util to 3.25.0 (<a href="https://redirect.github.com/scalapb/scalapb-json4s/issues/428";>#428</a>)</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/01b380ad0b2f6e55d5072889e997e6c8031b4f78";><code>01b380a</code></a> Update scalafmt-core to 3.7.15 (<a href="https://redirect.github.com/scalapb/scalapb-json4s/issues/427";>#427</a>)</li> <li><a href="https://github.com/scalapb/scalapb-json4s/commit/ece5c9f270c6608be21083e37cbfcc7c0583db5e";><code>ece5c9f</code></a> Update sbt to 1.9.7 (<a href="https://redirect.github.com/scalapb/scalapb-json4s/issues/426";>#426</a>)</li> <li>Additional commits viewable in <a href="https://github.com/scalapb/scalapb-json4s/compare/v0.12.0...v0.12.2";>compare view</a></li> </ul> </details> <br /> Updates `com.flipkart.zjsonpatch:zjsonpatch` from 0.4.13 to 0.4.16 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/flipkart-incubator/zjsonpatch/releases";>com.flipkart.zjsonpatch:zjsonpatch's releases</a>.</em></p> <blockquote> <h2>Releasing 0.4.16</h2> <p>Changes include the following - <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/174";>#174</a> <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/172";>#172</a> <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/171";>#171</a> <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/165";>#165</a></p> <h2>Releasing 0.4.15</h2> <p>No release notes provided.</p> <h2>Releasing 0.4.14</h2> <p>Changes includes <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/164";>#164</a> <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/157";>#157</a> <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/158";>#158</a> <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/159";>#159</a> <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/160";>#160</a> <a href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/161";>#161</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/flipkart-incubator/zjsonpatch/commit/d3ea5b2ede7f0090eb441f96a06a3b535db62992";><code>d3ea5b2</code></a> releasing 0.4.16</li> <li><a href="https://github.com/flipkart-incubator/zjsonpatch/commit/08a80529b4a407223ed7e53be47691c4e53b9fce";><code>08a8052</code></a> commenting out maven-surefire-plugin configuration</li> <li><a href="https://github... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
