Skip to content

Update gradle dependencies (minor/patch) - #8

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/gradle-dependencies-(minorpatch)
Aug 24, 2026
Merged

Update gradle dependencies (minor/patch)#8
renovate[bot] merged 1 commit into
mainfrom
renovate/gradle-dependencies-(minorpatch)

Conversation

@renovate

@renovaterenovateBot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

PackageChangeAgeConfidence
org.incendo:cloud-brigadier2.0.0-beta.172.0.0ageconfidence
org.incendo:cloud-minecraft-extras2.0.0-beta.172.0.0ageconfidence
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml2.17.12.22.2ageconfidence
com.fasterxml.jackson.core:jackson-databind (source)2.17.12.22.2ageconfidence
io.papermc.paper:paper-api26.1.2.build.9-alpha26.2.build.116-stableageconfidence
com.velocitypowered:velocity-api (source)3.5.0-SNAPSHOT3.5.1ageconfidence
org.incendo:cloud-paper2.0.0-beta.172.0.0ageconfidence
com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin (source)2.3.102.3.11ageconfidence
com.google.devtools.ksp:symbol-processing-api (source)2.3.52.3.11ageconfidence
org.incendo:cloud-velocity2.0.0-beta.172.0.0ageconfidence
org.incendo:cloud-bungee2.0.0-beta.172.0.0ageconfidence
com.diffplug.spotless:spotless-plugin-gradle8.9.08.10.0ageconfidence
io.insert-koin:koin-core (source)4.1.14.2.2ageconfidence
com.microsoft.sqlserver:mssql-jdbc13.2.1.jre1113.4.0.jre11ageconfidence
org.mariadb.jdbc:mariadb-java-client (source)3.5.63.5.10ageconfidence
com.oracle.database.jdbc:ojdbc8 (source)23.26.0.0.023.26.3.0.0ageconfidence
org.xerial:sqlite-jdbc3.50.2.03.53.2.1ageconfidence
org.postgresql:postgresql (source)42.7.842.7.13ageconfidence
org.spigotmc:spigot-api1.20.2-R0.1-SNAPSHOT1.20.2-experimental-SNAPSHOTageconfidence
dev.detekt:dev.detekt.gradle.plugin (source)2.0.0-alpha.52.0.0-alpha.6ageconfidence
org.incendo:cloud-kotlin-extensions2.0.02.1.0ageconfidence
org.incendo:cloud-core2.0.02.1.0ageconfidence
org.jetbrains.exposed:exposed-migration-jdbc1.3.11.4.0ageconfidence
org.jetbrains.exposed:exposed-migration-core1.3.11.4.0ageconfidence
org.jetbrains.exposed:exposed-java-time1.3.11.4.0ageconfidence
org.jetbrains.exposed:exposed-jdbc1.3.11.4.0ageconfidence
org.jetbrains.exposed:exposed-core1.3.11.4.0ageconfidence
org.jetbrains.exposed:exposed-dao1.3.11.4.0ageconfidence

Release Notes

Incendo/cloud-minecraft (org.incendo:cloud-brigadier)

v2.0.0

After 17 beta releases, Cloud’s Minecraft integrations are now stable.

Cloud Minecraft 2.0 provides integrations for Bukkit, Paper, Velocity, BungeeCord, Sponge 7, Cloudburst, and Mojang Brigadier, along with Minecraft Extras and signed argument support.

Highlights
  • Support for Cloud 2’s rewritten command framework and org.incendo API
  • Modern and legacy Paper command managers
  • Native Brigadier mappings and suggestions
  • Bukkit and Paper parsers for Minecraft-native argument types
  • Caption-based exception handling and help generation
  • Adventure component and tooltip support
  • Signed command argument support
  • A BOM for aligning all Cloud Minecraft module versions
Upgrading

If you are already using 2.0.0-beta.17, update your Cloud Minecraft dependencies to 2.0.0. The supported Minecraft versions have not changed.

Cloud Minecraft 2.0 uses Cloud Core 2.1.0.

Users migrating from Cloud 1.x should read the Cloud 2 migration guide. Cloud 2 uses the org.incendo group and package names, and platform integrations are now versioned separately from Cloud Core.

Changes since beta.17
  • Restore selector permission bypass behavior on Minecraft 1.21.1+ (#​167)
  • Expose required Immutables annotations to consumers (#​170)
  • Update Cloud Core to 2.1.0

See the Minecraft documentation for installation and usage.

Full Changelog: Incendo/cloud-minecraft@2.0.0-beta.17...2.0.0

google/ksp (com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin)

v2.3.11

Compare Source

What's Changed

  • Support org.gradle.isolated-projects for project isolation (#​3051)
  • Fix premature kspDebugAndroidTest task skipping on Android library modules (#​3050)
  • Fix missing parent declaration exception for @NotNull annotations during incremental compilation (#​3030)
  • Clean output directories instead of skipping tasks when processor classpath transitions to empty (#​3046)
  • Fix build cache misses by marking KspGradleConfig.logLevel as @Internal (#​3039)
  • Add org.gradle.isolated-projects=true to KSP Gradle properties reference table (#​3076)
  • Add KSP Gradle properties reference table to README documentation (#​3070)
  • Document collection values in KSValueArgument.value (#​3069)
  • Update error messaging for ksp.useKSP2 deprecation notice (#​3066)

Contributors

Full Changelog: google/ksp@2.3.10...2.3.11

InsertKoinIO/koin (io.insert-koin:koin-core)

v4.2.2: Koin 4.2.2

Compare Source

Maintenance release for the 4.2.x line — resolver regression fixes from the 4.2.0 CoreResolverV2 rewrite, ViewModel/scope fixes, a Ktor request-scope fix, plus new tvOS support and an R8/ProGuard guide.

Anyone hitting resolver issues on 4.2.0/4.2.1 should upgrade to 4.2.2.

Bug Fixes
  • Stacked params no longer shadow qualified dependencies (#​2370, #​2408) — A value passed via parametersOf could be returned for a get(named(...)) request of the same type, shadowing the qualified definition. Qualified lookups are now registry-only and never read the parameter stack — parameters carry no qualifier, so they can't satisfy a qualified request.

  • Root factory no longer resolves its scoped dependencies from _root_ (#​2379) — When a non-single factory defined in the root scope was resolved from a child scope, CoreResolverV2 resolved its scoped dependencies against _root_ instead of the requesting scope. Linked-scope resolution now runs the factory against the requesting scope (single instances keep their root-bound semantics, preserving #​2325).

  • viewModelScopeFactory scope is linked to its parent (#​2299) — A ViewModel scope created via viewModelScopeFactory() was not linked to the originating scope, so dependencies declared in the parent couldn't be resolved. The created scope is now linked to its parent (except when the parent is root).

  • Tolerate non-String environment properties (#​2348) — Loading environment/system properties whose values aren't String threw ClassCastException due to an unchecked map cast. Non-String values are now preserved as Any and only String keys are required.

  • Unique Ktor request-scope ids under concurrency (#​2410) — Concurrent requests could collide on request-scope ids. Ids are now generated from a monotonic counter seeded once at startup. Thanks @​lfavreli-betclic!

  • Actionable errors for SavedStateHandle / viewModelScope { } (#​2044, #​2417) — Resolving SavedStateHandle without the proper extras, or using viewModelScope { } without the viewModelScopeFactory() option, now produces a clear, actionable error message instead of an opaque failure.

Added
  • tvOS targets for koin-core-viewmodel (#​2426) — koin-core-viewmodel now publishes tvosArm64, tvosX64, and tvosSimulatorArm64, unblocking ViewModel usage on tvOS.

  • Consumer R8/ProGuard rules + guide — Android and ViewModel artifacts now ship consumer R8/ProGuard rules in their AARs, and a new R8 / ProGuard guide documents keep rules for minified builds.

Improvements
  • O(1) secondary-type registration in bind() / binds()bind/binds now append secondary types in O(1) instead of reallocating the type list per binding, removing quadratic cost when a definition declares many bindings. No user-visible behavior change.
Documentation
Contributors

Thanks to the following contributors for this release:

v4.2.1: Koin 4.2.1

Compare Source

Support for Compile Safety with Koin Compiler 1.0.0-RC1
Bug Fixes
  • Fix stacked-params lookup on linked scopes (#​2387) — The 4.2.0 resolver rewrite (CoreResolverV2) walked linked scopes but dropped the per-parent stacked-parameters check that 4.1.x performed via recursion. This broke patterns where AndroidParametersHolder is stacked on the factory scope by KoinViewModelFactory and SavedStateHandle is then resolved from a child ViewModel scope. Linked-scope resolution now also checks stacked params on each parent scope.

  • Restore ABI compatibility for runOnKoinStarted (#​2391) — The 4.2.0 release inadvertently broke binary compatibility for runOnKoinStarted on JVM. Fixed by restoring the original JVM class name via @JvmName/@JvmMultifileClass annotations.

  • Fix scope _closed concurrency issue (#​2389) — The Scope._closed flag was not volatile, which could cause stale reads under concurrent access.

Improvements
  • Improved Scope resolution error messagesCoreResolverV2 now provides clearer error messages when scope resolution fails, making it easier to diagnose misconfigured scopes.

  • Added apiCheck to CI — Binary compatibility validation (kotlinx.binary-compatibility-validator) now runs on every PR to prevent future ABI breaks.

Documentation
  • parametersOf type-collision warning (#​2328) — Added a caution note explaining that when a value passed via parametersOf has the same type as the requested definition, Koin returns the value directly and skips the factory block. Suggests using a wrapper type as a workaround.
Contributors

Thanks to the following contributors for this release:

v4.2.0

Compare Source

Kotlin 2.3.20

New Features

  • Ktor 3.4 DI Bridge — Full integration with Ktor's new DI system (ktor-server-di), bridging Ktor ↔ Koin dependency injection both ways
  • Dagger Bridge (koin-dagger-bridge) — New module to help inject Koin components from Dagger side
  • AndroidX Navigation 3 support — Entry point provider with metadata parameter passing (animations, etc.), generic EntryProvider, and navigation scopes
  • Navigation Scope for Compose Nav 2 — Added scoped navigation support for Compose Navigation 2
  • Lazy Modules — Parallel loading at startup for improved performance, with benchmarks
  • strictOverride option — New definition option to override explicitly
  • koinActivityInject — Helper to retrieve dependencies against Activity scope
  • Koin Compiler Stubs — Added stubs for KoinApplication.modules() functions
  • KoinApplication.withConfiguration() — New configuration support

Performance & Stability

  • Core Resolver V2 — Fixed parameter stack propagation, injected params handling, and child scope/ViewModel scope resolution
  • Scope Resolution & Thread Safety — Performance optimization with safer ScopeFactory protecting all operations from parallel calls
  • ThreadLocal loading optimization — Avoid cost per Scope (#​2306)
  • getAll no longer sorted by default — Instances come as declared; sort on purpose if needed
  • Params stack access optimization

Bug Fixes

  • Fix sharedKoinViewModel with type-safe navigation routes (#​2293)
  • Fix qualified name usage in WASM (#​2312)
  • Fix premature release of scope & context in Compose — don't drop in onForgotten (#​2274)
  • Fix crashing declarations for LocalKoinScope & LocalKoinApplication
  • Fix Compose Koin Context Loader and Entry Points (#​2327)
  • Fix CoreResolution with Child Scopes / ViewModelScope (#​2325)
  • Fix Scope Archetypes Qualifier in plugin support functions
  • Fix qualifier conversion

Breaking Changes

  • minSdk raised to 23 for Android
  • module renamed to lazyModule in some contexts
  • BeanDef constructor change (API signature update)

Dependencies

  • Kotlin 2.3.20
  • Ktor 3.4
  • JetBrains Compose 1.10.2
  • AndroidX Lifecycle 2.10.0
  • AndroidX Navigation 2.9.7 / Nav3 1.0.1
mariadb-corporation/mariadb-connector-j (org.mariadb.jdbc:mariadb-java-client)

v3.5.10

Compare Source

Full Changelog

Key Enhancements
  • CONJ-1333 - Add maxAllowedPacket connection option (send/receive limit)
  • CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)
  • CONJ-1330 - add infer test to CI
Issues Resolved
  • CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
  • CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is
    attacker-controlled (report by Qing Xu)
  • CONJ-1307 - Connection.setReadOnly(true) still allows DML statements to execute
  • CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
  • CONJ-1327 - Align SSL hostname verification with TLS libraries (thanks to jmestwa-coder)
  • CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to
    jmestwa-coder)
  • CONJ-1331 - trustStore-configured TLS connections defer certificate-chain/identity validation instead of validating
    up front (thanks to jmestwa-coder)
  • CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to
    jmestwa-coder)
  • CONJ-1341 - MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own
    password is supplied (report by fg0x0)
  • CONJ-1328 - restrictedAuth allowlist is matched with substring contains() instead of equality (thanks to
    jmestwa-coder)
  • CONJ-1338 - Validate length-encoded integers fit a non-negative int before use as a length (report by fg0x0)
  • CONJ-1336 - CONJ-1282 regression: TLS connection fails when JDBC hostname is an absolute FQDN ending with a trailing
    dot (report by Shaswata, thanks to Pepo48 for PR)
  • CONJ-1335 - getGeneratedKeys() throws "integer overflow" after a batch insert when the auto-increment value exceeds
    Integer.MAX_VALUE, and returns bulk generated keys out of batch order

v3.5.9

Compare Source

Full Changelog

Key Enhancements
  • CONJ-1223 - cache TLS trust/key managers across connections to reduce SSL connection cost
  • CONJ-1314 - add SPI for interactive dialog (PAM) authentication callback
  • CONJ-1311 - add dedicated option useIpForKillQuery for query cancellation
  • CONJ-1310 - Add full native image support and CI coverage
Issues Resolved
  • CONJ-1320 - PAM (dialog) authentication must require a secure connection (report by fg0x0)
  • CONJ-1319 - Use constant-time comparison when validating the server certificate fingerprint (report by jmestwa-coder)
  • CONJ-1318 - enforce allowLocalInfile=false on the server's local-infile request, so a malicious server cannot read a client file despite the option being disabled
  • CONJ-1322 - match local infile filename case-sensitively (thanks to jmestwa-coder)
  • CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)
  • CONJ-1315 - cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if MitM (report by tonghuaroot)
  • CONJ-1317 - ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)
  • CONJ-1304 - CallableStatement parameter metadata read from mysql.proc, with MySQL info_schema fallback
  • CONJ-1299 - keep VALUES literals after the last placeholder when rewriting batches
  • CONJ-1313 - race condition in HaMode#getAvailableHostInOrder can cause NPE
  • CONJ-1311 - Connection.cancelCurrentQuery fails with SslMode.VERIFY_FULL when client socket IP is set
  • CONJ-1264 - handle LocalDateTime as a zoneless wall-clock value
  • CONJ-1316 - pin Locale.ROOT on locale-sensitive call sites and date/time/Duration text formatting (fixes
    locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)
  • CONJ-1324 - fix SQL parser to correctly handle '--' in expressions and reset lastChar after block comments
  • CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)
  • CONJ-1318 - allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server (thanks to tharavel)

v3.5.8

Compare Source

Full Changelog

Issues Resolved
  • CONJ-1305 - XAResource.isSameRM() incorrectly returns true when rewriteBatchedStatements differs between connections
  • CONJ-1303 - Statement.cancel() fails to kill running query during result streaming
Other
  • CONJ-1298 - Performance improvement: avoid decoding extended format

v3.5.7

Compare Source

Full Changelog

Key Enhancements
  • CONJ-1282 - Added TLS SNI (Server Name Indication) support
  • CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message
Issues Resolved
  • CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x
  • CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue
  • CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts
  • CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554
  • CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient
  • CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+
xerial/sqlite-jdbc (org.xerial:sqlite-jdbc)

v3.53.2.1

Compare Source

Changelog

🐛 Fixes

jdbc

  • map DATETIME column type to Types.TIMESTAMP (19ac6bb), closes #​1436
  • throw SQLException from createConnection on invalid URL (fe636b7)
  • escape resolved table name in getExportedKeys query (b8eca2a)
  • escape catalog and schema in foreign key metadata queries (ff4b847)
  • escape table type values in getTables metadata query (33eaa19)
  • escape table name in getColumns metadata query (a5149f8)

pool

  • reset connection before notifying listeners on close (57f6cfa), closes #​821

unscoped

  • fallback to isAlpineLinux when map_files contains no musl entries (7537528), closes #​1382

🔄️ Changes

🛠 Build

deps

  • bump org.graalvm.buildtools:native-maven-plugin (75f593a)
  • bump org.graalvm.sdk:nativeimage from 25.0.3 to 25.1.3 (ac69b1e)
  • bump org.graalvm.buildtools:native-maven-plugin (37988f4)
  • bump org.graalvm.buildtools:native-maven-plugin (aae577a)
  • bump actions/checkout from 6 to 7 (9761dfd)
  • bump org.graalvm.buildtools:native-maven-plugin (e21a3b4)

deps-dev

  • bump org.apache.maven.plugins:maven-help-plugin (dcf3ea2)
  • bump org.jreleaser:jreleaser-maven-plugin (02e2e53)
  • bump org.sonatype.central:central-publishing-maven-plugin (72b9a31)

unscoped

  • add missing configuration for msvc (25b5de5)
  • central publishing wait only until validated (7018821)
  • switch to a maintained fork of setup-msvc-dev (3ca5e70)
  • fix older graalvm on windows (bb1382c)

Contributors

We'd like to thank the following people for their contributions:
Gauthier, Gauthier Roebroeck, Javid Khan, Kamil Krzywanski, Kilo Code Bot, dxbjavid

v3.53.2.0

Compare Source

Changelog

🚀 Features

sqlite

🛠 Build

deps

  • bump org.graalvm.buildtools:native-maven-plugin (d24c1cc)
  • bump org.graalvm.buildtools:native-maven-plugin (751989a)
  • bump org.graalvm.sdk:nativeimage from 25.0.2 to 25.0.3 (cc3e1a5)
  • bump shanegenschaw/pull-request-comment-trigger (cc93aa7)

deps-dev

  • bump surefire.version from 3.5.5 to 3.5.6 (3c29706)
  • bump org.apache.maven.plugins:maven-enforcer-plugin (8a20a64)

unscoped

  • fail workflow if child workflow also fails (49ea263)
  • remove PR comment trigger (03bfd9a)

Contributors

We'd like to thank the following people for their contributions:
Gauthier, Gauthier Roebroeck

v3.53.1.0

Compare Source

Changelog

🚀 Features

sqlite

🔄️ Changes

  • rewrite amalgamation_version.sh for POSIX shell (52522d0)
  • fix android usage (7ef8e0f)

🛠 Build

deps

  • bump gummy-bears-api-24 to 0.14.0 (a28d6ce)
  • bump gummy-bears-api-24 to 0.13.0 (248e1e9)

deps-dev

  • bump org.jreleaser:jreleaser-maven-plugin (396fdf3)
  • bump com.tngtech.archunit:archunit-junit5 (458abe1)

unscoped

  • conditionally bootstrap SLF4J API JAR (bc7d223)
  • make JAVA_CLASSPATH configurable (5aa7426)

Contributors

We'd like to thank the following people for their contributions:
Gauthier, Gauthier Roebroeck, Michael Osipov

v3.53.0.0

Compare Source

Changelog

🚀 Features

jdbc

  • expose wal_autocheckpoint pragma in SQLiteConfig (dd2adcc), closes #​1397

sqlite

unscoped

🛠 Build

deps

  • bump org.sonatype.central:central-publishing-maven-plugin (19259e5)
  • bump EndBug/add-and-commit from 9 to 10 (f572217)

deps-dev

  • bump surefire.version from 3.5.4 to 3.5.5 (b649d25)
  • bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (857a754)
  • bump org.mockito:mockito-core from 5.21.0 to 5.23.0 (a597952)

Contributors

We'd like to thank the following people for their contributions:
Gauthier, Karl-Michael Edlinger, kju2

v3.51.3.0

Compare Source

Changelog

🚀 Features

sqlite

🛠 Build

deps

  • bump org.graalvm.buildtools:native-maven-plugin (5ad5155)
  • bump actions/upload-artifact from 6 to 7 (90c726f)
  • bump actions/download-artifact from 7 to 8 (17d4998)

deps-dev

  • bump org.jreleaser:jreleaser-maven-plugin (d4d5c04)

unscoped

  • set-version trigger CI after build native (89dfbc8)
  • set-version commit and trigger workflow (eed41ae)
  • set-version fix VERSION (22e5106)
  • set-version checks before enabling (4c34072)
  • add set-version workflow (97985f8)
  • fix ppc64le (49232ef)
  • use jdk 25 where possible (8460f63)

Contributors

We'd like to thank the following people for their contributions:
Gauthier, Gauthier Roebroeck

v3.51.2.0

Compare Source

Changelog

🚀 Features

sqlite

🛠 Build

Contributors

We'd like to thank the following people for their contributions:
Gauthier Roebroeck

v3.51.1.1

Compare Source

Changelog

🚀 Features

sqlite

🛠 Build

deps

  • bump org.graalvm.sdk:nativeimage from 25.0.1 to 25.0.2 (e5e8aca)
  • bump org.graalvm.buildtools:native-maven-plugin (92e995c)
  • bump org.jreleaser:jreleaser-maven-plugin (1ba2ff1)
  • bump actions/upload-artifact from 5 to 6 (77e1e27)
  • bump actions/download-artifact from 6 to 7 (1f35b97)
  • bump org.apache.maven.plugins:maven-source-plugin (8384f5b)

deps-dev

  • bump org.apache.maven.plugins:maven-compiler-plugin (0d07829)
  • bump org.codehaus.mojo:versions-maven-plugin (2a61f25)
  • bump org.mockito:mockito-core from 5.20.0 to 5.21.0 (f8de260)

Contributors

We'd like to thank the following people for their contributions:
Gauthier, Gauthier Roebroeck

v3.51.1.0

Compare Source

Changelog

🚀 Features

sqlite

🛠 Build

deps

  • bump org.codehaus.mojo:versions-maven-plugin (7603dbb)
  • bump actions/checkout from 5 to 6 (79a5083)
  • bump org.apache.maven.plugins:maven-jar-plugin (41d4bb3)
  • bump org.graalvm.buildtools:native-maven-plugin (2499f23)
  • org.graalvm.buildtools:native-maven-plugin from 0.10.6 to 0.11.2 (#​1346) (4f126e5), closes #​1346

deps-dev

  • bump org.assertj:assertj-core from 3.27.4 to 3.27.6 (c6f063c)

unscoped

Contributors

We'd like to thank the following people for their contributions:
Gauthier, Gauthier Roebroeck, Kristof

v3.51.0.0

Compare Source

Changelog

🚀 Features

sqlite

🔄️ Changes

🧪 Tests

  • load extension enabled by connection string (751cd07)

🛠 Build

deps

  • bump org.graalvm.sdk:nativeimage from 24.1.2 to 25.0.1 (62a819a)
  • bump org.jreleaser:jreleaser-maven-plugin (3fc3374)
  • bump org.apache.maven.plugins:maven-compiler-plugin (c7f900b)
  • bump actions/download-artifact from 5 to 6 (f7063ae)
  • bump actions/upload-artifact from 4 to 5 (938d553)
  • bump org.sonatype.central:central-publishing-maven-plugin (a822d58)
  • bump org.apache.maven.plugins:maven-javadoc-plugin (be021fe)
  • bump org.apache.maven.plugins:maven-enforcer-plugin (755cf1d)
  • bump org.codehaus.mojo:versions-maven-plugin (8911981)
  • bump surefire.version from 3.5.3 to 3.5.4 (978a9ef)
  • bump org.codehaus.mojo:versions-maven-plugin (7080b4d)
  • bump org.jreleaser:jreleaser-maven-plugin (8382798)
  • bump actions/setup-java from 4 to 5 (47117fd)
  • bump org.apache.maven.plugins:maven-javadoc-plugin (ec9cf6f)
  • bump actions/checkout from 4 to 5 (8f594c8)
  • bump actions/download-artifact from 4 to 5 (0c76e59)

deps-dev

  • bump org.mockito:mockito-core from 5.19.0 to 5.20.0 (5952229)
  • bump org.mockito:mockito-core from 5.18.0 to 5.19.0 (cb727b9)
  • bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (cad6246)

native

  • disable fail fast on build native (d7cf60d)

unscoped

📝 Documentation

  • document how to enable load extension (de546a9)

Contributors

We'd like to thank the following people for their contributions:
Dr. Christian Kohlschütter, Gauthier, Gauthier Roebroeck

v3.50.3.0

Compare Source

Changelog

🚀 Features

jdbc

  • support JDBC4 CLOB and BLOB in PreparedStatement parameters (9515a80)

sqlite

unscoped

🛠 Build

deps

  • bump org.apache.maven.plugins:maven-enforcer-plugin (e20d3b6)
  • bump org.apache.maven.plugins:maven-gpg-plugin (d1efafe)
  • bump org.jreleaser:jreleaser-maven-plugin (4042011)

📝 Documentation

  • update maven snapshot badge (19e32f0)

Contributors

We'd like to thank the following people for their contributions:
Enaium, Gauthier, Gauthier Roebroeck, Tim Ward

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.13

Added
  • feat: invalidate the prepared-statement cache when the server reports a search_path change via GUC_REPORT (PostgreSQL 18+), so cached plans are no longer used against the wrong schema PR #​4259
  • feat: reWriteBatchedInserts now merges up to 32768 rows into one multi-values INSERT (bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The new reWriteBatchedInsertsSize connection property lowers that cap when set; the default of 0 uses that maximum. PR #​4207
  • feat: invalidate the prepared-statement cache after CREATE/DROP/ALTER so callers no longer trip on "cached plan must not change result type" without opting into autosave=ALWAYS. Controlled by the new flushCacheOnDdl connection property (default true); set to false for the prior behaviour. PR #​4067
  • feat: add connectExecutor connection property to customize the Executor used to run the worker task that performs the connection attempt when loginTimeout is in effect. The value is the fully qualified name of a class implementing java.util.concurrent.Executor. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named "PostgreSQL JDBC driver connection thread". The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it. PR #​4165
  • feat: add classLoaderStrategy connection property to control which classloaders the driver searches when loading a class named by a connection property, for example socketFactory. The default driver-first now falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Set driver to keep the previous driver-classloader-only behaviour, or context-first to prefer the thread context classloader Issue #​2112PR #​4167
  • feat: add OID constants for geometric arrays, RECORD, and refcursorPR #​4220
  • feat: LargeObjectBlobInputStream now skips by seeking instead of reading, and the driver exposes the server version so it can select the 64-bit large-object API where available PR #​4204
Changed
  • refactor: the worker that runs the connection attempt under loginTimeout is now a FutureTask (ConnectTask) instead of the hand-rolled ConnectThread. When the caller hits the timeout, the task is now cancelled with cancel(true), which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, so loginTimeout can stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out. PR #​4120
  • chore: PGXAConnection.ConnectionHandler now rejects setAutoCommit(false) and setSavepoint(...) during an active XA branch, in addition to the long-rejected setAutoCommit(true) / commit() / rollback(). The setSavepoint rejection was already meant to be in place but the guard misspelled the method name as setSavePoint, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4. PR #​4114
  • chore: commitPrepared / rollback-of-prepared now return XAER_RMFAIL instead of XAER_RMERR when the underlying connection is left in a non-idle TransactionState. Transaction managers (Geronimo, Narayana, Atomikos) treat XAER_RMFAIL as retryable on a fresh XAResource; the prepared transaction is no longer abandoned. PR #​4114
  • refactor: derive getPrimaryKeys from pg_constraint.conkeyPR #​4202
Fixed
  • fix: the published GitHub release now ships the released postgresql-<version>.jar and its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar Issue #​3812PR #​3814
  • fix: simplify the Statement#cancel state machine by dropping the redundant CANCELLED state. killTimerTask now waits for the state to return to IDLE directly, which removes a spin-forever case when more than one thread observes the cancel completing PR #​1827.
  • perf: defer simple-query flushes until the driver reads the response, allowing BEGIN and the following query to share a network flush Issue #​3894PR #​4196
  • fix: reWriteBatchedInserts no longer throws IllegalArgumentException when batching a parameterless INSERT (for example INSERT INTO t VALUES (1, 2)) of 256 rows or more PR #​4207
  • fix: a comment before CALL in a CallableStatement no longer hides the native call, so OUT parameter registration works for /* comment */ call proc(?, ?) and similar. Parser.modifyJdbcCall now skips leading whitespace and SQL comments (both -- and /* */) before the call, tolerates a trailing comment after a { ... } escape, and no longer adds a spurious comma when moving an OUT parameter into a call whose arguments are

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovateBot requested a review from GradientTim as a code ownerAugust 24, 2026 03:14
@renovate
renovateBot merged commit 4ab0477 into mainAug 24, 2026
1 check passed
@renovate
renovateBot deleted the renovate/gradle-dependencies-(minorpatch) branch August 24, 2026 06:42
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants