FINERACT-2684: Update all non-major dependencies - #6275
Open
renovate-bot wants to merge 1 commit into
Open
renovate-bot wants to merge 1 commit into
renovate-bot wants to merge 1 commit into
Conversation
renovate-bot
force-pushed
the
renovate/all-minor-patch
branch
13 times, most recently
from
August 24, 2026 09:21
b3163ab to
cfa7cc9
Compare
renovate-bot
force-pushed
the
renovate/all-minor-patch
branch
12 times, most recently
from
September 1, 2026 02:16
f234df3 to
5ab6be4
Compare
renovate-bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
September 3, 2026 01:31
4819c41 to
9bb73ce
Compare
renovate-bot
force-pushed
the
renovate/all-minor-patch
branch
18 times, most recently
from
September 15, 2026 12:09
e30e53a to
1a36ada
Compare
renovate-bot
force-pushed
the
renovate/all-minor-patch
branch
10 times, most recently
from
September 20, 2026 18:51
60e5c96 to
a5aa920
Compare
renovate-bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 21, 2026 11:56
a5aa920 to
ef04341
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.2.0-rc2→4.4.0-rc22.1→2.312.2→12.318.3→18.610.1.59-jdk25-temurin→10.1.60-jdk25-temurin1.11.0→1.11.34.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final4.1.135.Final→4.2.18.Final10.9→10.107.34.3→7.34.87.34.3→7.34.87.34.3→7.34.87.34.3→7.34.82.17.1→2.19.02.17.1→2.19.042.7.11→42.7.133.5.8→3.5.101.12.1→1.12.29.1.0.Final→9.1.4.Final2.2.49→2.2.552.2.49→2.2.552.2.49→2.2.556.2.5→6.3.23.0.3→3.1.17.6.0.202603022253-r→7.8.0.202609011348-r7.6.0.202603022253-r→7.8.0.202609011348-r7.6.0.202603022253-r→7.8.0.202609011348-r1.84→1.861.84→1.861.84→1.861.84→1.861.18.46→1.18.481.22.0→1.22.15.14.0→5.15.04.9.8→4.10.44.8.184→4.8.1952.14.2→2.14.45.4→5.4.35.4→5.4.39.4.1→9.6.17.22.0→7.25.06.5.4→6.5.111.13.0→1.15.03.5.3→3.5.43.3.0→3.3.22.2.49→2.2.554.1.0→4.1.11.2.2→1.2.30.8.1→0.11.03.3.0→3.3.23.3.0→3.3.23.3.0→3.3.23.0.4→3.0.52.3.6→2.3.84.5.0→4.6.01.35.0→1.36.133.6.0-jre→33.7.1-jre1.5.35→1.6.31.5.35→1.6.32.44.4→2.55.17.34.3→7.34.82.22.1→2.22.26.0.3→6.1.32.3.21→2.4.201.62.0→1.66.04.0.2→4.1.14.1.0→4.1.11.16.5→1.17.12.0.17→2.0.194.1.0→4.3.0Release Notes
apache/kafka (apache/kafka)
v4.3.1Compare Source
v4.3.0Compare Source
yawkat/lz4-java (at.yawk.lz4:lz4-java)
v1.11.3: lz4-java v1.11.3Not a security release. This is the second attempt at this release due to a javadoc issue.
What's Changed
Full Changelog: yawkat/lz4-java@v1.11.2...v1.11.3
v1.11.2: lz4-java v1.11.2Security release for GHSA-6cx8-rjf8-pr8g and GHSA-4v53-57pg-c464.
What's Changed
New Contributors
Full Changelog: yawkat/lz4-java@v1.11.1...v1.11.2
v1.11.1: lz4-java v1.11.1Security release for CVE-2026-59949.
What's Changed
Full Changelog: yawkat/lz4-java@v1.11.0...v1.11.1
connect2id/nimbus-jose-jwt (com.nimbusds:nimbus-jose-jwt)
v10.10Compare Source
v10.9.1Compare Source
cucumber/cucumber-jvm (io.cucumber:cucumber-spring)
v7.34.8Compare Source
Fixed
AbstractTestNGCucumberTests.scenarios()throws without setup (#3235)v7.34.7Compare Source
Fixed
v7.34.6Compare Source
Fixed
v7.34.5Compare Source
Fixed
v7.34.4Compare Source
Fixed
pgjdbc/pgjdbc (org.postgresql:postgresql)
v42.7.13Added
search_pathchange via GUC_REPORT (PostgreSQL 18+), so cached plans are no longer used against the wrong schema PR #4259reWriteBatchedInsertsnow merges up to 32768 rows into one multi-valuesINSERT(bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The newreWriteBatchedInsertsSizeconnection property lowers that cap when set; the default of0uses that maximum. PR #4207autosave=ALWAYS. Controlled by the newflushCacheOnDdlconnection property (defaulttrue); set tofalsefor the prior behaviour. PR #4067connectExecutorconnection property to customize theExecutorused to run the worker task that performs the connection attempt whenloginTimeoutis in effect. The value is the fully qualified name of a class implementingjava.util.concurrent.Executor. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named"PostgreSQL JDBC driver connection thread". The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it. PR #4165classLoaderStrategyconnection property to control which classloaders the driver searches when loading a class named by a connection property, for examplesocketFactory. The defaultdriver-firstnow falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Setdriverto keep the previous driver-classloader-only behaviour, orcontext-firstto prefer the thread context classloader Issue #2112 PR #4167RECORD, andrefcursorPR #4220LargeObjectBlobInputStreamnow skips by seeking instead of reading, and the driver exposes the server version so it can select the 64-bit large-object API where available PR #4204Changed
loginTimeoutis now aFutureTask(ConnectTask) instead of the hand-rolledConnectThread. When the caller hits the timeout, the task is now cancelled withcancel(true), which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, sologinTimeoutcan stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out. PR #4120PGXAConnection.ConnectionHandlernow rejectssetAutoCommit(false)andsetSavepoint(...)during an active XA branch, in addition to the long-rejectedsetAutoCommit(true)/commit()/rollback(). ThesetSavepointrejection was already meant to be in place but the guard misspelled the method name assetSavePoint, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4. PR #4114commitPrepared/rollback-of-prepared now returnXAER_RMFAILinstead ofXAER_RMERRwhen the underlying connection is left in a non-idleTransactionState. Transaction managers (Geronimo, Narayana, Atomikos) treatXAER_RMFAILas retryable on a freshXAResource; the prepared transaction is no longer abandoned. PR #4114getPrimaryKeysfrompg_constraint.conkeyPR #4202Fixed
postgresql-<version>.jarand its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar Issue #3812 PR #3814Statement#cancelstate machine by dropping the redundantCANCELLEDstate.killTimerTasknow waits for the state to return toIDLEdirectly, which removes a spin-forever case when more than one thread observes the cancel completing PR #1827.BEGINand the following query to share a network flush Issue #3894 PR #4196reWriteBatchedInsertsno longer throwsIllegalArgumentExceptionwhen batching a parameterlessINSERT(for exampleINSERT INTO t VALUES (1, 2)) of 256 rows or more PR #4207CALLin aCallableStatementno longer hides the native call, so OUT parameter registration works for/* comment */ call proc(?, ?)and similar.Parser.modifyJdbcCallnow skips leading whitespace and SQL comments (both--and/* */) before the call, tolerates a trailing comment after a{ ... }escape, and no longer adds a spurious comma when moving an OUT parameter into a call whose arguments are only a comment Issue #2538 PR #4209PreparedStatement.toString()no longer throws for abyteavalue supplied as text viaPGobject. Hex-format values (\x...) are validated and rendered as abytealiteral, and escape-format values are quoted and cast like any other literal Issue #3757 PR #4201contextClassLoaderof sharedForkJoinPool.commonPool()worker threads, which previously left unrelated tasks on those threads running with anullclassloader Issue #4155 PR #4156PgResultSet#getCharacterStreamwrapsStringin aStringReaderPR #4063PGXAConnectionno longer saves and restores the underlying connection's JDBCautoCommitflag. All XA-protocol SQL (BEGIN,PREPARE TRANSACTION,COMMIT,ROLLBACK,COMMIT PREPARED,ROLLBACK PREPARED, therecover()SELECT) is sent throughQUERY_SUPPRESS_BEGIN, so the caller'sautoCommitvalue is invariant across everyXAResourcecall. Fixes the "2nd phase commit must be issued using an idle connection" failure during recovery on managed datasources that pool connections withautoCommit=false(TomEE, WildFly, WebSphere Liberty) PR #4114PGXAConnection.prepare()now mutates XA state only afterPREPARE TRANSACTIONsucceeds. A failedPREPAREpreviously left the driver thinking the branch was already prepared, so the follow-uprollback(xid)triedROLLBACK PREPAREDagainst a non-existent gid and returnedXAER_RMERR. Transaction managers (Narayana) escalated this toHeuristicMixedException. With the fix,rollback(xid)takes the active-branch path and issues a plainROLLBACK, which the server accepts cleanly. Fixes Issue #3153, Issue #3123. PR #4114search_path. When two schemas held a table with the same name and the same primary or unique index name but a different set of key columns, the driver took the union of both schemas' columns, so the result set could be wrongly rejected as not updatable PR #4214. Supersedes PR #3400.LargeObject.close()now flushes a buffered output stream before marking the object closed, so closing a large object without an explicitflush()no longer drops buffered writes. The flush runs while the object is still open (it calls back intoLargeObject.write()), andlo_closealways runs afterward; a failure fromlo_closeno longer masks an earlier flush error, and the transaction is not committed when the flush failed Issue #4247 PR #4248.timestamp,timestamptz, anddatetext with a clearSQLException(SQLState22007) instead of anArrayIndexOutOfBoundsExceptionPR #4278CHAR_OCTET_LENGTHfor non-character columns PR #4231ResultSet.getBigDecimal(int, int)PR #4211java.timevalues in an updatableResultSetupdateRow()/insertRow()PR #3848RETURNINGclause containsvarcharornumerictypes PR #4014estimatedReceiveBufferBytesaccounting after a forcedSyncPR #4014ResultSetfor describe-statement purposes, and restore the pre-describe path for generated-key batches PR #4014search_pathchanges case-insensitively PR #4216.keyextension PR #3946KeyStoreso FIPS JVMs work PR #4193gssResponseTimeoutrather thansslResponseTimeoutfor GSS connections [PR #407Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.