fix(deps): update gradle dependencies - #6
Open
overfullstack wants to merge 1 commit into
Open
Conversation
overfullstack
force-pushed
the
renovate/gradle-dependencies
branch
from
July 27, 2026 10:03
20b7cdc to
610446e
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
42.7.11→42.7.135.31.0→5.34.01.3.0→1.3.11.3.0→1.3.14.3.2→4.5.08.6.0→8.8.08.6.0→8.8.00.9.8→0.9.96.1.11→6.2.36.1.11→6.2.36.1.11→6.2.36.1.11→6.2.33.17.0→3.18.025.0.3→25.1.36.53.0.0→6.56.0.00.36.0→0.37.00.36.0→0.37.02.4.0→2.4.102.4.0→2.4.102.4.0→2.4.10Release Notes
pgjdbc/pgjdbc (org.postgresql:postgresql)
v42.7.13Added
search_pathchange via GUC_REPORT (PostgreSQL 18+), so cached plans are no longer used against the wrong schema PR #4259reWriteBatchedInsertsnow merges up to 32768 rows into one multi-valuesINSERT(bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The newreWriteBatchedInsertsSizeconnection property lowers that cap when set; the default of0uses that maximum. PR #4207autosave=ALWAYS. Controlled by the newflushCacheOnDdlconnection property (defaulttrue); set tofalsefor the prior behaviour. PR #4067connectExecutorconnection property to customize theExecutorused to run the worker task that performs the connection attempt whenloginTimeoutis in effect. The value is the fully qualified name of a class implementingjava.util.concurrent.Executor. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named"PostgreSQL JDBC driver connection thread". The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it. PR #4165classLoaderStrategyconnection property to control which classloaders the driver searches when loading a class named by a connection property, for examplesocketFactory. The defaultdriver-firstnow falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Setdriverto keep the previous driver-classloader-only behaviour, orcontext-firstto prefer the thread context classloader Issue #2112 PR #4167RECORD, andrefcursorPR #4220LargeObjectBlobInputStreamnow skips by seeking instead of reading, and the driver exposes the server version so it can select the 64-bit large-object API where available PR #4204Changed
loginTimeoutis now aFutureTask(ConnectTask) instead of the hand-rolledConnectThread. When the caller hits the timeout, the task is now cancelled withcancel(true), which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, sologinTimeoutcan stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out. PR #4120PGXAConnection.ConnectionHandlernow rejectssetAutoCommit(false)andsetSavepoint(...)during an active XA branch, in addition to the long-rejectedsetAutoCommit(true)/commit()/rollback(). ThesetSavepointrejection was already meant to be in place but the guard misspelled the method name assetSavePoint, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4. PR #4114commitPrepared/rollback-of-prepared now returnXAER_RMFAILinstead ofXAER_RMERRwhen the underlying connection is left in a non-idleTransactionState. Transaction managers (Geronimo, Narayana, Atomikos) treatXAER_RMFAILas retryable on a freshXAResource; the prepared transaction is no longer abandoned. PR #4114getPrimaryKeysfrompg_constraint.conkeyPR #4202Fixed
postgresql-<version>.jarand its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar Issue #3812 PR #3814Statement#cancelstate machine by dropping the redundantCANCELLEDstate.killTimerTasknow waits for the state to return toIDLEdirectly, which removes a spin-forever case when more than one thread observes the cancel completing PR #1827.BEGINand the following query to share a network flush Issue #3894 PR #4196reWriteBatchedInsertsno longer throwsIllegalArgumentExceptionwhen batching a parameterlessINSERT(for exampleINSERT INTO t VALUES (1, 2)) of 256 rows or more PR #4207CALLin aCallableStatementno longer hides the native call, so OUT parameter registration works for/* comment */ call proc(?, ?)and similar.Parser.modifyJdbcCallnow skips leading whitespace and SQL comments (both--and/* */) before the call, tolerates a trailing comment after a{ ... }escape, and no longer adds a spurious comma when moving an OUT parameter into a call whose arguments are only a comment Issue #2538 PR #4209PreparedStatement.toString()no longer throws for abyteavalue supplied as text viaPGobject. Hex-format values (\x...) are validated and rendered as abytealiteral, and escape-format values are quoted and cast like any other literal Issue #3757 PR #4201contextClassLoaderof sharedForkJoinPool.commonPool()worker threads, which previously left unrelated tasks on those threads running with anullclassloader Issue #4155 PR #4156PgResultSet#getCharacterStreamwrapsStringin aStringReaderPR #4063PGXAConnectionno longer saves and restores the underlying connection's JDBCautoCommitflag. All XA-protocol SQL (BEGIN,PREPARE TRANSACTION,COMMIT,ROLLBACK,COMMIT PREPARED,ROLLBACK PREPARED, therecover()SELECT) is sent throughQUERY_SUPPRESS_BEGIN, so the caller'sautoCommitvalue is invariant across everyXAResourcecall. Fixes the "2nd phase commit must be issued using an idle connection" failure during recovery on managed datasources that pool connections withautoCommit=false(TomEE, WildFly, WebSphere Liberty) PR #4114PGXAConnection.prepare()now mutates XA state only afterPREPARE TRANSACTIONsucceeds. A failedPREPAREpreviously left the driver thinking the branch was already prepared, so the follow-uprollback(xid)triedROLLBACK PREPAREDagainst a non-existent gid and returnedXAER_RMERR. Transaction managers (Narayana) escalated this toHeuristicMixedException. With the fix,rollback(xid)takes the active-branch path and issues a plainROLLBACK, which the server accepts cleanly. Fixes Issue #3153, Issue #3123. PR #4114search_path. When two schemas held a table with the same name and the same primary or unique index name but a different set of key columns, the driver took the union of both schemas' columns, so the result set could be wrongly rejected as not updatable PR #4214. Supersedes PR #3400.LargeObject.close()now flushes a buffered output stream before marking the object closed, so closing a large object without an explicitflush()no longer drops buffered writes. The flush runs while the object is still open (it calls back intoLargeObject.write()), andlo_closealways runs afterward; a failure fromlo_closeno longer masks an earlier flush error, and the transaction is not committed when the flush failed Issue #4247 PR #4248.timestamp,timestamptz, anddatetext with a clearSQLException(SQLState22007) instead of anArrayIndexOutOfBoundsExceptionPR #4278CHAR_OCTET_LENGTHfor non-character columns PR #4231ResultSet.getBigDecimal(int, int)PR #4211java.timevalues in an updatableResultSetupdateRow()/insertRow()PR #3848RETURNINGclause containsvarcharornumerictypes PR #4014estimatedReceiveBufferBytesaccounting after a forcedSyncPR #4014ResultSetfor describe-statement purposes, and restore the pre-describe path for generated-key batches PR #4014search_pathchanges case-insensitively PR #4216.keyextension PR #3946KeyStoreso FIPS JVMs work PR #4193gssResponseTimeoutrather thansslResponseTimeoutfor GSS connections PR #4076SET LOCAL/SET SESSION TRANSACTIONPR #4203AssertionErrorfromBatchResultHandleron a closed connection PR #4187SQL_TSI_FRAC_SECONDwith an explicit, explained error PR #4229Driver.acceptsURLwith a clearNullPointerExceptionPR #4205NumberParser.getFastLonginstead of silently wrapping PR #4163PGInterval.setSecondsPR #4194PgConnectionsetup fails after connect PR #4161LazyCleanerImplcleanup task alive across a transient empty queue PR #4038socksNonProxyHostsis set PR #4045ResourceBundlecache on deregister so the driver can unload PR #4237IOExceptionPR #4190java.lang.managementdependency in themaxResultBufferparser PR #4069v42.7.12Security
Under
channelBinding=require, the driver silently downgraded fromSCRAM-SHA-256-PLUS(with channel binding) to plainSCRAM-SHA-256(without it) when the server presented a certificate whose signature algorithm has notls-server-end-pointchannel-binding hash (e.g.Ed25519, Ed448, or post-quantum algorithms). An attacker who can intercept the TLS connection could exploit this to strip channel-binding protection.The fix enforces channel binding in the driver's own code: it now fails the connection when no binding data can be extracted, and verifies the negotiated mechanism uses channel binding (
-PLUS) whenrequireis set.Only connections that set
channelBinding=requireare affected. The defaultpreferpolicy and releases before 42.7.4 (which introduced channel-binding support) are unaffected.See the Security Advisory for more detail.
The following CVE-2026-54291 has been issued.
rabbitmq/rabbitmq-java-client (com.rabbitmq:amqp-client)
v5.34.0: 5.34.0Changes between 5.33.1 and 5.34.0
This is a maintenance release with bug fixes and dependency upgrades. It is compatible with 5.33.1. All users are encouraged to upgrade.
Harden connection negotiation phase
GitHub PRs: #2018 #2020
Honor unlimited negotiated frame_max when capping inbound message size
GitHub PR: #2016
Reject negative body size when parsing content headers
GitHub PR: #2014
Bump dependencies
GitHub issue: #2006
Dependency
Maven
Gradle
compile 'com.rabbitmq:amqp-client:5.34.0'v5.33.1: 5.33.1Changes between 5.33.0 and 5.33.1
This is a maintenance release with a bug fix. It is compatible with 5.33.0. All users are encouraged to upgrade.
Harden
ValueReaderGitHub PR: #2008
Dependency
Maven
Gradle
compile 'com.rabbitmq:amqp-client:5.33.1'v5.33.0: 5.33.0Changes between 5.32.0 and 5.33.0
This is a maintenance release with bug fixes and dependency upgrades. It introduces minor breaking changes compared to 5.32.0 (see below for details). All users are encouraged to upgrade.
The RabbitMQ team normally maintain strict backward compatibility in minor versions. However, this release includes exceptional breaking changes that were necessary to patch security gaps and enforce secure-by-default behavior.
Breaking changes:
ConnectionFactory#useSslProtocol()now utilizes the JVM's defaultSSLContext, which validates the server certificate.useSslProtocol()was never intended for production use.ConnectionFactory#useTlsWithNoVerification()method.Harden RPC support classes
GitHub PR: #2002
Enable hostname verification by default
GitHub issue: #2005
Introduce helper for dev/test TLS setup
GitHub PR: #2001
Enforce inbound frame max more strictly
GitHub PRs: #1995 #1998
Bump dependencies
GitHub issue: #1991
Dependency
Maven
Gradle
compile 'com.rabbitmq:amqp-client:5.33.0'v5.32.0: 5.32.0Changes between 5.31.0 and 5.32.0
This is a maintenance release with dependency upgrades. It is compatible with 5.31.0. All users are encouraged to upgrade.
Bump dependencies
GitHub issue: #1973
Dependency
Maven
Gradle
compile 'com.rabbitmq:amqp-client:5.32.0'JetBrains/Exposed (org.jetbrains.exposed:exposed-jdbc)
v1.3.1Compare Source
Infrastructure:
Bug fixes:
Performance:
Docs:
kotest/kotest (io.kotest:kotest-runner-junit5)
v6.2.3Compare Source
What's Changed
New Contributors
Full Changelog: kotest/kotest@6.2.2...v6.2.3
v6.2.2Compare Source
What's Changed
plusOrMinuscomparison by @AlexCue987 with @Copilot in #6159New Contributors
Full Changelog: kotest/kotest@v6.2.1...v6.2.2
v6.2.1Compare Source
What's Changed
Full Changelog: kotest/kotest@v6.2.0...v6.2.1
v6.2.0Compare Source
✨ Features
New matchers / assertions
comparables.shouldBeAtLeast — @AlexCue987 (#5831)
MultipleMatcherResult for combining multiple matcher results — @sksamuel (#5723)
shouldContainExactCopies for lists — @AlexCue987 (#5913)
Character matchers — @JordanLongstaff (#5921)
shouldBeSingle matcher — @sksamuel (#6028)
shouldContainRepeats for strings — @AlexCue987 (#6004)
Infix form for inspectors — @alfonsoristorato (#5920)
Block-asserting overload for shouldBeFailure — @alfonsoristorato (#5927)
Per-call Eq overrides via a withEqs DSL — @PreAgile (#6010)
Per-element data class diffs in collection comparisons — @PreAgile (#5835)
Framework / API
Run data tests singularly — @alfonsoristorato (#5574)
New JVM test-suites module (deprecates JunitXmlReporter) — @sksamuel (#5801)
Support isolation modes on all KMP platforms — @sksamuel (#5806)
Breadcrumbs support for Kotest spec files — @sksamuel (#5793)
Type-safe test metadata API — @PreAgile (#5905)
Public API for creating custom styles — @sksamuel (#5814)
Support multiple --test args joined by semicolon in KOTEST_INCLUDE_PATTERN — @sksamuel (#5922)
Extend life of deprecated Test containers and add onStart — @sksamuel (#5896)
Make Arb.stringPattern multiplatform — @wilmveel (#6008)
Complete the permutations module — @sksamuel (#6016)
Add Wasm WASI target to kotest-property and kotest-property-permutations — @jsoizo (#6129)
Make fibonacci interval functions public — @mvanhorn (#6135)
Add Android instrumented test module — @sksamuel (#5900)
IntelliJ plugin
N-times setter for test invocation — @alfonsoristorato (#5815)
Invocation count on the Kotest producer — @alfonsoristorato (#5837)
Singular data-test run on the Kotest producer — @alfonsoristorato (#5843)
Amper-aware run-configuration producer — @sksamuel (#5999)
🐛 Fixes
Property testing / Arb / Exhaustive / shrinkers
Integer shrinkers proposing wrap-around values near MIN — @sksamuel (#5931)
Arb.ipAddressV4 couldn't produce 255 in any octet — @sksamuel (#5938)
Arb.multiple couldn't produce the largest multiple of k ≤ max — @sksamuel (#5939)
Arb.map maxSize off-by-one and minSize == maxSize crash — @sksamuel (#5937)
Arb.map half-open nextInt for targetSize — @sksamuel (#5946)
Arb.factor crash on k=1 / never producing k — @sksamuel (#5959)
Arb.date never producing Dec 31 in leap years — @sksamuel (#5949)
Arb.intRange overflow when domain.last == Int.MAX_VALUE — @sksamuel (#5945)
Arb.subsequence only producing prefixes — @sksamuel (#5958)
Arb.orNull(0.0) still producing nulls via boundary draw — @sksamuel (#5936)
Arb.slice throwing on empty input list — @sksamuel (#6044)
Codepoint.lowSurrogate using ushr instead of and — @sksamuel (#5935)
IntRangeShrinker overflow on Int.MAX_VALUE singleton — @sksamuel (#5957)
DurationShrinker discarding all shrinks if any candidate is Duration.ZERO — @sksamuel (#5955)
Exhaustive.merge truncating to the shorter length — @sksamuel (#5956)
Exhaustive.azstring crash on size-0 ranges — @sksamuel (#5947)
List.edgecase recursing on the unshuffled tail — @sksamuel (#5950); silently dropping un-tested arbs — @sksamuel (#5930)
orNull.edgecase returning null instead of Sample(null) — @sksamuel (#5948)
PropTestConfig.maxDiscardPercentage ignoring the global setting — @sksamuel (#5951)
Propagate expected/actual diff values to property-test errors — @sksamuel (#6009)
Degenerate ranges / inclusive max bounds in yearMonth/localTime/double/float arbs — @sksamuel (#6120)
Honor discardCheckThreshold in max-discard check — @sksamuel (#6126)
Arb.list repeated-element edgecase now actually repeats a single element — @sksamuel (#6128)
Descriptive error when Arb.distinct exhausts attempts — @sksamuel (#6122)
Dead AssertionError branch in PropertyErrorMessageBuilder — @sksamuel (#6065)
Spec DSLs / test naming / prefixes
ShouldSpec nested context missing "context " prefix — @sksamuel (#5979)
FunSpec nested context missing "context " prefix — @sksamuel (#5984)
FreeSpec config leaf test registered as container — @sksamuel (#5966)
DescribeSpec root it/fit/xit(name) always DISABLED — @sksamuel (#5965)
it/fit/xit(name, lambda) missing prefix/wrong receiver — @sksamuel (#5978)
context/fcontext no-lambda missing "Context: " prefix — @sksamuel (#5974)
WordSpec config-form should producing " when" suffix — @sksamuel (#5964);
addWhen/addShould missing withDefaultAffixes — @sksamuel (#5995)
ExpectSpec root expect leaf wrapping in container scope — @sksamuel (#5983)
BehaviorSpec missing f* overloads — @sksamuel (#5988)
given/context test-lambda missing withDefaultAffixes — @sksamuel (#5975)
FeatureSpec rename xfscenario → fscenario — @sksamuel (#5972)
scenario leaf running with wrong scope — @sksamuel (#6062)
truncateTestName splitting UTF-16 surrogate pairs — @sksamuel (#5990)
Honor WithDataTestName.dataTestName() on all platforms — @sksamuel (#6064)
Data test run including sibling regular containers — @alfonsoristorato (#6033)
Materializer dropping xmethod on nested TestCases — @sksamuel (#5992)
Descriptor.depth() off-by-one — @sksamuel (#6123)
Matchers / assertions / messages
CompletableFuture cancelled() matcher reporting "completed" — @sksamuel (#5960)
URI/URL parameter matcher NPEs and fragment/ref message typos — @sksamuel (#5961)
haveMaxLength negated message reporting wrong minimum length — @sksamuel (#5941)
shouldNotBeRegex calling positive shouldEqualRegex — @sksamuel (#5952)
kotlinx-datetime Instant before/after negated message swap — @sksamuel (#5953)
containAllInAnyOrder/containExactlyInAnyOrder mislabeling missing elements — @sksamuel (#5942)
containsInOrder "found before" slice in failure message — @sksamuel (#6054)
beUpperCase/beLowerCase for non-String CharSequence — @sksamuel (#6055)
shouldBeEmpty crashing on dynamic iterables — @sksamuel (#6025)
Inverted Path/File shouldNotEqualJson config-block overload — @sksamuel (#6068)
beEqualToUsingFields message listing wrong fields — @sksamuel (#6066)
MapEq differing-key computation via Eq typeclass, not raw == — @sksamuel (#6067)
NumberEq cross-type comparisons (Double/Long, Float/Long, etc.) — @sksamuel (#6087)
Integer overflow in shouldBeWithin near MAX_VALUE — @sksamuel (#6088)
haveElementAt swapped expected/actual + negative index handling — @sksamuel (#6125)
Path containNFiles failing gracefully on non-directory — @sksamuel (#6077)
Path haveExtension/haveNameWithoutExtension NPE on root paths — @sksamuel (#6078)
Restore large-string diff output in StringEq.diff() — @sksamuel (#5944)
Make clear what the actual string value is — @sschuberth (#6110)
escapeString in Diff producing literal control chars — @sksamuel (#5943)
Validate tolerance / handle infinities in Float plusOrMinus — @sksamuel (#6124)
Integer enum schema values never matching JSON numbers — @sksamuel (#6056)
retry exception classification + cap backoff at remaining timeout — @sksamuel (#6114)
Engine / runners / discovery / listeners
Failfast in sibling contexts via per-scope CoroutineContext tracking — @sksamuel (#5774)
Coroutines probe dump with background coroutines — @sksamuel (#5894)
DataClassEq comparator — @scottdfedorov (#5602)
KSP processor including abstract/sealed spec classes — @sksamuel (#5987)
duplicate specs across KSP rounds — @sksamuel (#6115)
AnnotationSpec @Test(expected=...) requiring exact class match — @sksamuel (#5993)
JUnit4RuleExtension running test outside rule chain when rule skips — @sksamuel (#5986)
JUnit4 runner not firing testIgnored events — @sksamuel (#5967)
JUnit listeners collapsing MultipleExceptions to a single placeholder — @sksamuel (#5976)
testIgnored creating duplicate descriptor when test already started — @sksamuel (#5982)
Discovery allow_private respecting presence not value — @sksamuel (#5980)
duplicate specs for ClassSelector + UniqueIdSelector — @sksamuel (#5981)
failOnIgnoredTests never triggering due to per-spec results reset — @sksamuel (#5968);
count TestAbortedException-skipped tests — @sksamuel (#6059)
InvocationTimeoutInterceptor missing WasmWasi guard — @sksamuel (#5991)
Tag expressions: OR-of-exclusions over-permissive — @sksamuel (#5973)
parser precedence & over | — @sksamuel (#6089)
three-valued OR identity — @sksamuel (#6090)
parenthesize operands in combine — @sksamuel (#6046)
isSubtreeComplete checking each child result, not the parent — @sksamuel (#6050)
CollectingTestEngineListener cross-thread-safe error state — @sksamuel (#6052)
FailureFirstSorter comparator contract violation — @sksamuel (#6070)
ExtensionStore untyped get key mismatch / getOrComputeIfAbsent not storing — @sksamuel ([#6092](https
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.