build(deps): bump org.postgresql:postgresql from 42.7.10 to 42.7.11 #500

Open

dependabot[bot] wants to merge 1 commit from dependabot/gradle/org.postgresql-postgresql-42.7.11 into master

dependabot[bot] commented

2026-05-04 02:44:55 -07:00

(Migrated from github.com)

Bumps org.postgresql:postgresql from 42.7.10 to 42.7.11.

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.11

Security

fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the Security Advisory for more detail. The following CVE-2026-42198 has been issued.

Changes

fix: Add sources and javadocs to shaded published lib generation @sehrope (#4043)

update Changelog and website for release of 42.7.11 @davecramer (#4042)

Fix scram fix location in changelog and update published artifact developer list @sehrope (#4041)

Restrict test with scram_iterations to v16+ and release notes @sehrope (#4040)

chore(deps): update ubuntu:24.04 docker digest to 84e77de @renovate-bot (#4017)

test: add tests for QueryExecutor#getTransactionState @vlsi (#4006)

chore(deps): update actions/create-github-app-token action to v2.2.2 @renovate-bot (#3983)

fix: fix flaky CopyBothResponseTest by using WAL flush LSN @vlsi (#3979)

fix: fix flaky replication restart tests by waiting for confirmed_flush_lsn @vlsi (#3975)

test: fix flaky LogicalReplicationStatusTest by polling pg_stat_replication @vlsi (#3974)

chore: replace Appveyor with ikalnytskyi/action-setup-postgres @vlsi (#3966)

test: move test table creation from @BeforeEach to @BeforeAll @vlsi (#3967)

Return jsonb as PGObject fixes Issue #3926 @davecramer (#3956)

Update docker scripts @davecramer (#3958)

implement require_auth, this is pretty much how libpq does this. @davecramer (#3895)

docs: add SCRAM authentication test setup section to TESTING.md @emmaeng700 (#3945)

Add RequireServerVersion annotation for tests @sehrope (#3939)

🐛 Bug Fixes

fix: ensure extended protocol messages end with Sync message @vlsi (#3728)

fix: enable cursor-based fetching in extended protocol when transaction started via SQL command @vlsi (#3996)

fix: retry with SSL on IOException when sslMode=ALLOW @vlsi (#3973)

fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in @vlsi (#3968)

fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers @vlsi (#3962)

fix: use compareTo for LogSequenceNumber comparison @vlsi (#3961)

fix: release COPY lock on IOException to prevent connection hang (#3957) @vlsi (#3960)

🧰 Maintenance

style: replace @exception with @throws in getBoolean javadoc @vlsi (#4035)

chore: use @vlsi/github-actions-random-matrix npm package @vlsi (#4008)

chore: use tag names for pinning github actions, pin ikalnytskyi/action-setup-postgres @vlsi (#4007)

chore: bump errorprone to 2.48.0 @vlsi (#4005)

test: add @DisableLogger annotation to suppress expected log warnings in tests @vlsi (#3971)

chore: suppress deprecations in test code to reduce build verbosity @vlsi (#3972)

chore: replace log warning in ConnectionFactory.closeStream with Throwable.addSuppressed @vlsi (#3970)

chore: use greedy pairwise coverage for CI matrix generation @vlsi (#3965)

chore: use full version tags in GitHub Actions comments @vlsi (#3963)

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.11] (2026-04-28)

Security

fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the Security Advisory for more detail. The following CVE-2026-42198 has been issued.

Added

feat: implement require_auth connection property, aligning with libpq behavior [PR #3895](pgjdbc/pgjdbc#3895)

Changed

chore: replace Appveyor CI with ikalnytskyi/action-setup-postgres [PR #3966](pgjdbc/pgjdbc#3966)

chore: upgrade Gradle to v9 [PR #3978](pgjdbc/pgjdbc#3978)

Fixed

fix: ensure extended protocol messages end with Sync message [PR #3728](pgjdbc/pgjdbc#3728)

fix: enable cursor-based fetching in extended protocol when transaction started via SQL command [PR #3996](pgjdbc/pgjdbc#3996)

fix: retry with SSL on IOException when sslMode=ALLOW [PR #3973](pgjdbc/pgjdbc#3973)

fix: make sure the driver honours connectTimeout when retrying the connection [PR #3968](pgjdbc/pgjdbc#3968)

fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in [PR #3968](pgjdbc/pgjdbc#3968)

fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers [PR #3962](pgjdbc/pgjdbc#3962)

fix: use compareTo for LogSequenceNumber comparison to handle unsigned values correctly [PR #3961](pgjdbc/pgjdbc#3961)

fix: release COPY lock on IOException to prevent connection hang [PR #3957](pgjdbc/pgjdbc#3957)

fix: return jsonb as PGObject instead of String [PR #3956](pgjdbc/pgjdbc#3956)

fix: align SSL key file permission check with libpq [PR #3952](pgjdbc/pgjdbc#3952)

fix: guard connection closed flag with a reentrant lock to protect against concurrent close [PR #3905](pgjdbc/pgjdbc#3905)

Commits

78e261f fix: Add sources and javadocs to shaded published lib generation
1e09fa0 update Changelog and website for release of 42.7.11 (#4042)
d479fa5 Fix scram fix location in changelog and update published artifact developer l...
b04fc46 docs: Add scram max iters fix to changelog
cf54822 test: Disable scram test on older version without scram_iterations GUC
7dbcc79 test: Add SCRAM max iteration tests
c9d41d1 fix: Limit SCRAM PBKDF2 iterations accepted from the server
a340cb2 style: replace @exception with @throws in getBoolean javadoc
77837f8 fix(deps): update dependency org.openrewrite.rewrite:org.openrewrite.rewrite....
23af03b chore(deps): update actions/checkout action to v6
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.7.10 to 42.7.11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pgjdbc/pgjdbc/releases">org.postgresql:postgresql's releases</a>.</em></p> <blockquote> <h2>v42.7.11</h2> <h2>Security</h2> <ul> <li>fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the <a href="https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq">Security Advisory</a> for more detail. The following <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-42198">CVE-2026-42198</a> has been issued.</li> </ul> <h2>Changes</h2> <ul> <li>fix: Add sources and javadocs to shaded published lib generation <a href="https://github.com/sehrope"><code>@sehrope</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4043">#4043</a>)</li> <li>update Changelog and website for release of 42.7.11 <a href="https://github.com/davecramer"><code>@davecramer</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4042">#4042</a>)</li> <li>Fix scram fix location in changelog and update published artifact developer list <a href="https://github.com/sehrope"><code>@sehrope</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4041">#4041</a>)</li> <li>Restrict test with scram_iterations to v16+ and release notes <a href="https://github.com/sehrope"><code>@sehrope</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4040">#4040</a>)</li> <li>chore(deps): update ubuntu:24.04 docker digest to 84e77de <a href="https://github.com/renovate-bot"><code>@renovate-bot</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4017">#4017</a>)</li> <li>test: add tests for QueryExecutor#getTransactionState <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4006">#4006</a>)</li> <li>chore(deps): update actions/create-github-app-token action to v2.2.2 <a href="https://github.com/renovate-bot"><code>@renovate-bot</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3983">#3983</a>)</li> <li>fix: fix flaky CopyBothResponseTest by using WAL flush LSN <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3979">#3979</a>)</li> <li>fix: fix flaky replication restart tests by waiting for confirmed_flush_lsn <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3975">#3975</a>)</li> <li>test: fix flaky LogicalReplicationStatusTest by polling pg_stat_replication <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3974">#3974</a>)</li> <li>chore: replace Appveyor with ikalnytskyi/action-setup-postgres <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3966">#3966</a>)</li> <li>test: move test table creation from <a href="https://github.com/BeforeEach"><code>@BeforeEach</code></a> to <a href="https://github.com/BeforeAll"><code>@BeforeAll</code></a> <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3967">#3967</a>)</li> <li>Return jsonb as PGObject fixes Issue <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3926">#3926</a> <a href="https://github.com/davecramer"><code>@davecramer</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3956">#3956</a>)</li> <li>Update docker scripts <a href="https://github.com/davecramer"><code>@davecramer</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3958">#3958</a>)</li> <li>implement require_auth, this is pretty much how libpq does this. <a href="https://github.com/davecramer"><code>@davecramer</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3895">#3895</a>)</li> <li>docs: add SCRAM authentication test setup section to TESTING.md <a href="https://github.com/emmaeng700"><code>@emmaeng700</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3945">#3945</a>)</li> <li>Add RequireServerVersion annotation for tests <a href="https://github.com/sehrope"><code>@sehrope</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3939">#3939</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>fix: ensure extended protocol messages end with Sync message <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3728">#3728</a>)</li> <li>fix: enable cursor-based fetching in extended protocol when transaction started via SQL command <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3996">#3996</a>)</li> <li>fix: retry with SSL on IOException when sslMode=ALLOW <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3973">#3973</a>)</li> <li>fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3968">#3968</a>)</li> <li>fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3962">#3962</a>)</li> <li>fix: use compareTo for LogSequenceNumber comparison <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3961">#3961</a>)</li> <li>fix: release COPY lock on IOException to prevent connection hang (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3957">#3957</a>) <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3960">#3960</a>)</li> </ul> <h2>🧰 Maintenance</h2> <ul> <li>style: replace <a href="https://github.com/exception"><code>@exception</code></a> with <a href="https://github.com/throws"><code>@throws</code></a> in getBoolean javadoc <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4035">#4035</a>)</li> <li>chore: use <code>@vlsi/github-actions-random-matrix</code> npm package <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4008">#4008</a>)</li> <li>chore: use tag names for pinning github actions, pin ikalnytskyi/action-setup-postgres <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4007">#4007</a>)</li> <li>chore: bump errorprone to 2.48.0 <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4005">#4005</a>)</li> <li>test: add <a href="https://github.com/DisableLogger"><code>@DisableLogger</code></a> annotation to suppress expected log warnings in tests <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3971">#3971</a>)</li> <li>chore: suppress deprecations in test code to reduce build verbosity <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3972">#3972</a>)</li> <li>chore: replace log warning in ConnectionFactory.closeStream with Throwable.addSuppressed <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3970">#3970</a>)</li> <li>chore: use greedy pairwise coverage for CI matrix generation <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3965">#3965</a>)</li> <li>chore: use full version tags in GitHub Actions comments <a href="https://github.com/vlsi"><code>@vlsi</code></a> (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3963">#3963</a>)</li> </ul> <h2>⬆️ Dependencies</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md">org.postgresql:postgresql's changelog</a>.</em></p> <blockquote> <h2>[42.7.11] (2026-04-28)</h2> <h3>Security</h3> <ul> <li>fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the <a href="https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq">Security Advisory</a> for more detail. The following <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-42198">CVE-2026-42198</a> has been issued.</li> </ul> <h3>Added</h3> <ul> <li>feat: implement require_auth connection property, aligning with libpq behavior [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3895">#3895</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3895">pgjdbc/pgjdbc#3895</a>)</li> </ul> <h3>Changed</h3> <ul> <li>chore: replace Appveyor CI with ikalnytskyi/action-setup-postgres [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3966">#3966</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3966">pgjdbc/pgjdbc#3966</a>)</li> <li>chore: upgrade Gradle to v9 [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3978">#3978</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3978">pgjdbc/pgjdbc#3978</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>fix: ensure extended protocol messages end with Sync message [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3728">#3728</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3728">pgjdbc/pgjdbc#3728</a>)</li> <li>fix: enable cursor-based fetching in extended protocol when transaction started via SQL command [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3996">#3996</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3996">pgjdbc/pgjdbc#3996</a>)</li> <li>fix: retry with SSL on IOException when sslMode=ALLOW [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3973">#3973</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3973">pgjdbc/pgjdbc#3973</a>)</li> <li>fix: make sure the driver honours connectTimeout when retrying the connection [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3968">#3968</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3968">pgjdbc/pgjdbc#3968</a>)</li> <li>fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3968">#3968</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3968">pgjdbc/pgjdbc#3968</a>)</li> <li>fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3962">#3962</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3962">pgjdbc/pgjdbc#3962</a>)</li> <li>fix: use compareTo for LogSequenceNumber comparison to handle unsigned values correctly [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3961">#3961</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3961">pgjdbc/pgjdbc#3961</a>)</li> <li>fix: release COPY lock on IOException to prevent connection hang [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3957">#3957</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3957">pgjdbc/pgjdbc#3957</a>)</li> <li>fix: return jsonb as PGObject instead of String [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3956">#3956</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3956">pgjdbc/pgjdbc#3956</a>)</li> <li>fix: align SSL key file permission check with libpq [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3952">#3952</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3952">pgjdbc/pgjdbc#3952</a>)</li> <li>fix: guard connection closed flag with a reentrant lock to protect against concurrent close [PR <a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3905">#3905</a>](<a href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3905">pgjdbc/pgjdbc#3905</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/78e261ff2a7f16a37bdceb2204f67e484387da2f"><code>78e261f</code></a> fix: Add sources and javadocs to shaded published lib generation</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/1e09fa0496377296c9e2ef3bfd2b409945fba17a"><code>1e09fa0</code></a> update Changelog and website for release of 42.7.11 (<a href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4042">#4042</a>)</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/d479fa5b8c8c915a441ce1f2448f69f23dd0b66c"><code>d479fa5</code></a> Fix scram fix location in changelog and update published artifact developer l...</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/b04fc46af6c207bc7ce9e788fea8c43d18b73d0f"><code>b04fc46</code></a> docs: Add scram max iters fix to changelog</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/cf548225b4078db954765339720ffdf3bc94e5a6"><code>cf54822</code></a> test: Disable scram test on older version without scram_iterations GUC</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/7dbcc79b2b4adf7b71458c9434d2c43cec7713b9"><code>7dbcc79</code></a> test: Add SCRAM max iteration tests</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/c9d41d1332a7426fcef19ff89f2e6b1116429143"><code>c9d41d1</code></a> fix: Limit SCRAM PBKDF2 iterations accepted from the server</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/a340cb2b0ae24c0d98ad9dec569200ebb704d6aa"><code>a340cb2</code></a> style: replace <a href="https://github.com/exception"><code>@exception</code></a> with <a href="https://github.com/throws"><code>@throws</code></a> in getBoolean javadoc</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/77837f80c0c20a9f33f9e21b091f4d4552f8e753"><code>77837f8</code></a> fix(deps): update dependency org.openrewrite.rewrite:org.openrewrite.rewrite....</li> <li><a href="https://github.com/pgjdbc/pgjdbc/commit/23af03bc839af5217ea141946ae41e648264061c"><code>23af03b</code></a> chore(deps): update actions/checkout action to v6</li> <li>Additional commits viewable in <a href="https://github.com/pgjdbc/pgjdbc/compare/REL42.7.10...REL42.7.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.postgresql:postgresql&package-manager=gradle&previous-version=42.7.10&new-version=42.7.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/gradle/org.postgresql-postgresql-42.7.11:dependabot/gradle/org.postgresql-postgresql-42.7.11

git switch dependabot/gradle/org.postgresql-postgresql-42.7.11

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff dependabot/gradle/org.postgresql-postgresql-42.7.11

git switch dependabot/gradle/org.postgresql-postgresql-42.7.11

git rebase master

git switch master

git merge --ff-only dependabot/gradle/org.postgresql-postgresql-42.7.11

git switch dependabot/gradle/org.postgresql-postgresql-42.7.11

git rebase master

git switch master

git merge --no-ff dependabot/gradle/org.postgresql-postgresql-42.7.11

git switch master

git merge --squash dependabot/gradle/org.postgresql-postgresql-42.7.11