build(deps): bump the all-gradle group across 1 directory with 8 updates by dependabot[bot] · Pull Request #757 · ExtraToast/personal-stack

dependabot · 2026-08-12T16:35:43Z

Bumps the all-gradle group with 8 updates in the / directory:

Package	From	To
org.springdoc:springdoc-openapi-starter-webmvc-ui	`3.0.3`	`3.1.0`
tools.jackson.module:jackson-module-kotlin	`3.1.4`	`3.2.1`
io.rest-assured:rest-assured	`6.0.0`	`6.0.1`
org.junit.jupiter:junit-jupiter	`6.1.0`	`6.1.2`
commons-codec:commons-codec	`1.22.0`	`1.22.1`
org.postgresql:postgresql	`42.7.11`	`42.7.13`
com.microsoft.playwright:playwright	`1.60.0`	`1.62.0`
gradle-wrapper	`9.5.1`	`9.6.1`

Updates org.springdoc:springdoc-openapi-starter-webmvc-ui from 3.0.3 to 3.1.0

Release notes

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's releases.

springdoc-openapi v3,1,0 released!

What's Changed

Fix request-specific Swagger UI index transformations by @limehee in springdoc/springdoc-openapi#3279

Fix #3282: preserve nest() version predicate across all routes in nest by @seonwooj0810 in springdoc/springdoc-openapi#3296

Upgrade Spring Boot to version 4.1.0

Upgrade Spring AI to version 2.0.0

Upgrade swagger-core to version 2.2.52

Upgrade swagger-ui to version 5.32.11

#3307 – Act upon SonarQube warnings

#3306 – Act upon SonarQube warnings

Added

#3269 – Add mechanism to disable nullable for Kotlin properties

Allow request-specific Swagger UI index transformation

Fixed

#3304 – Kotlin parent class's field is not properly marked as nullable

#3294 – Duplicated path getting swagger-config

#3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase

#3292 – Make WebProperties and WebMvcProperties optional in SwaggerConfig

#3284 – Upgrade swagger-core from version 2.2.48 to 2.2.49

#3282 – Preserve version from nest() predicate across all routes in nest

#3281 – Stabilize Spring Data Page schema property order

#3274 – Description disappears from the generated json after upgrade to 3.0.3

#3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints

#3266 – Upgrade swagger-core from version 2.2.47 to 2.2.48

#3263 – Null key for a Map not allowed in JSON

Full Changelog: springdoc/springdoc-openapi@v3.0.3...v3.1.0

Changelog

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's changelog.

[3.1.0] - 2026-07-31

Added

#3269 – Add mechanism to disable nullable for Kotlin properties

Allow request-specific Swagger UI index transformation

Changed

Upgrade Spring Boot to version 4.1.0

Upgrade Spring AI to version 2.0.0

Upgrade swagger-core to version 2.2.52

Upgrade swagger-ui to version 5.32.11

#3307 – Act upon SonarQube warnings

#3306 – Act upon SonarQube warnings

Fixed

#3304 – Kotlin parent class's field is not properly marked as nullable

#3294 – Duplicated path getting swagger-config

#3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase

#3292 – Make WebProperties and WebMvcProperties optional in SwaggerConfig

#3284 – Upgrade swagger-core from version 2.2.48 to 2.2.49

#3282 – Preserve version from nest() predicate across all routes in nest

#3281 – Stabilize Spring Data Page schema property order

#3274 – Description disappears from the generated json after upgrade to 3.0.3

#3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints

#3266 – Upgrade swagger-core from version 2.2.47 to 2.2.48

#3263 – Null key for a Map not allowed in JSON

Commits

e04f91f [maven-release-plugin] prepare release v3.1.0
83551ce CHANGELOG.md update
4a2b5bd CHANGELOG.md update
ad0a5a5 swagger-ui upgrade to version 5.32.11
6e14cb4 Fix sonarqube errors
eae2056 Fix sonarqube errors
b09a77b chore: act upon SonarQube warnings
cc3d86d upgrade spring-ai to version 2.0.0
df1c2ba spring-boot upgrade to 4.1.0
b6e5212 Kotlin parent class's field is not properly marked as nullable. Fixes #3304
Additional commits viewable in compare view

Updates tools.jackson.module:jackson-module-kotlin from 3.1.4 to 3.2.1

Commits

0012069 [maven-release-plugin] prepare release jackson-module-kotlin-3.2.1
7995d7c Prep for 3.2.1 release
207ff6d Merge branch '3.1' into 3.2
3a4b58d Post-release dep version bump
c2a69a5 [maven-release-plugin] prepare for next development iteration
fdf6805 [maven-release-plugin] prepare release jackson-module-kotlin-3.1.5
4167e6b Prep for 3.1.5 release
52c3387 Merge branch '3.1' into 3.2
4f979dc Merge branch '2.x' into 3.1
7e1bcc6 Merge branch '2.22' into 2.x
Additional commits viewable in compare view

Updates io.rest-assured:rest-assured from 6.0.0 to 6.0.1

Changelog

Sourced from io.rest-assured:rest-assured's changelog.

Changelog 6.0.1 (2026-07-10)

Fix a JsonPath denial-of-service where oversized numeric literals in untrusted JSON were parsed into arbitrarily large BigIntegers, an O(n^2) CPU and heap cost. JSON number tokens are now capped at 1000 characters by default, configurable via JsonPathConfig.numberLengthLimit and JsonConfig.numberLengthLimit (a negative value disables the check). Thanks to Brian Lee (PhD security researcher, Georgia Tech SSLab) for the private report.

Use custom Jackson 3 object mapper in JsonPath (#1858) (thanks to gkiel for PR)

Fix Spring MockMvc cookie handling with Jakarta-only servlet APIs (fixes #1853)

Use Jackson 3 mapper in JsonPath deserialization when Jackson 3 is the only Jackson on the classpath (#1865) (thanks to dickerpulli for PR)

Add JsonPath.using(Jackson3ObjectMapperFactory) overload (#1861) (thanks to Anusha-7254 for PR)

Fix typo in duplicate-finder-maven-plugin phase property (#1866) (thanks to metacosm for PR)

Fix incorrect serialization of enum constants declared with a body when used as query/path parameters (#1799)

The spring-mock-mvc and spring-web-test-client modules now target Spring Framework 7 and no longer expose their own Spring version as a transitive dependency (the Spring dependencies are declared optional), so they no longer drag Spring 5 onto a Spring Boot 4 / Spring Framework 7 classpath. This removes the need for manual Spring exclusions on Spring Boot 4 (fixes #1853, #1868). Thanks to spencerarq for the detailed investigation.

Changelog 5.5.7 (2026-01-16)

Spring MockMvc module now supports Spring Framework 7.0 (thanks to Marcin Grzejszczak for PR)

Commits

8cc835a [maven-release-plugin] prepare release rest-assured-6.0.1
92551ed Sync dist and OSGi module versions during release
29b55e2 Sync dist and osgi module parent versions to 6.0.1-SNAPSHOT
f1abe77 [ci skip] Preparing for release
d134dfb Target Spring Framework 7 in the Spring modules and stop leaking Spring onto ...
a146f56 Add AGENTS.md with changelog convention, reference it from CLAUDE.md
2bbb19a Fix remaining duplicate-finder property typo in spring7-mvc-webapp
c5214b8 Fix serialization of enum constants declared with a body (#1799)
bc4608f [ci skip] Updated changelog to reflect the latest changes
2054f37 Add JsonPath.using(Jackson3ObjectMapperFactory) overload
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 6.1.0 to 6.1.2

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.1...r6.1.2

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

Commits

b685426 Release 6.1.2
ae244a6 Remove blanket outputDirectoryCreator from SuiteEngineTests (#5793)
43bd154 Finalize 6.1.2 release notes
0cd9510 Fix order of release note sections
a1507cb Add initial 6.1.2 release notes to release notes index
9326641 Fix NoTestsDiscoveredException for suites containing only dynamic tests (#5839)
2ef1123 Create initial 6.1.2 release notes from template
83fa9ab Back to snapshots for further development
0d85889 Release 6.1.1
0363eee Finalize 6.1.1 release notes
Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.22.0 to 1.22.1

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.22.1 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.1.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

Fixed Bugs
CODEC-344: Base64.Builder.setEncodeTable(byte...) accepts invalid custom alphabets. Thanks to Ruiqi Dong, Gary Gregory.

CODEC-340: Base58.Builder.setEncodeTable(byte...) is ignored when encoding and decoding. Thanks to Ruiqi Dong, Gary Gregory.

CODEC-342: Base32.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.

CODEC-343: Base32.Builder.setHexDecodeTable(boolean) sets the encode table to a decode lookup table. Thanks to Ruiqi Dong, Gary Gregory.

CODEC-341: Base16.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.

CODEC-339: URLCodec.encodeUrl(BitSet, byte[]) allows custom safe sets to emit URL encoding control characters. Thanks to Ruiqi Dong, Gary Gregory.

CODEC-338: PercentCodec loses literal '+' when plusForSpace is enabled. Thanks to Ruiqi Dong, Gary Gregory.

CODEC-337: Digest ALL reuses System.in, so only the first algorithm sees the real input (#431). Thanks to Ruiqi Dong, Gary Gregory.
        Fix Base64.toIntegerBytes(BigInteger) for zero edge case ([#441](https://github.com/apache/commons-codec/issues/441)). Thanks to Gary Gregory.
        Add messages when throwing NullPointerException. Thanks to Gary Gregory.
        Add messages when throwing NullPointerException. Thanks to Gary Gregory.
        StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails fast on null input. Thanks to Gary Gregory.
Changes
        Bump org.apache.commons:commons-parent from 98 to 103. Thanks to Gary Gregory.
        Bump commons-io:commons-io from 2.21.0 to 2.22.0. Thanks to Gary Gregory.
For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi

Commits

dc8f6c8 Prepare for the release candidate 1.22.1 RC1
8203c1c Prepare for the next release candidate
5647fe2 StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails
00c27a9 Reduce vertical whitespace
568f2d7 Remove unused method
316fb15 Remove unused method
bf6b543 Bump actions/checkout from 7.0.0 to 7.0.1
e14cdfe Extract redundant code.
3351e63 Add messages when throwing NullPointerException.
f22dab7 Update SCM tag
Additional commits viewable in compare view

Updates org.postgresql:postgresql from 42.7.11 to 42.7.13

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.13

Changes

docs: add 42.7.13 release changelog @davecramer (#4270)

Adjust EditorConfig für Makefile @BaumiCoder (#4279)

fix(scram): fail closed on channel-binding downgrade (no scram bump) @vlsi (#4272)

Bump pgjdbc version from 42.7.12 to 42.7.13 @davecramer (#4269)

chore: remove test-anorm-sbt module and its disabled CI wiring @vlsi (#4261)

refactor(test-gss): convert to Java/JUnit 5 submodule of the main build @vlsi (#4166)

ci: derive PG test versions from a Renovate-managed maxPgVersion @vlsi (#4218)

feat(insert): cap reWriteBatchedInserts by the protocol limit, not 128 @vlsi (#4207)

refactor(metadata): derive getPrimaryKeys from pg_constraint.conkey @vlsi (#4202)

fix(protocol): defer flushes until response processing @vlsi (#4196)

fix(build): resolve the Temurin 8 test toolchain by vendor @vlsi (#4257)

build: include multi-release source sets in the JaCoCo coverage report @vlsi (#4256)

fix(ci): read java_vendor before overwriting java_distribution @vlsi (#4255)

ci: generate the whole matrix in one batch, coverage job included @vlsi (#4253)

ci: pass CODECOV_TOKEN so protected-branch coverage uploads succeed @vlsi (#4254)

ci: collect coverage on one pinned job @vlsi (#4245)

ci: apply -DqueryTimeout from the matrix query_timeout axis @vlsi (#4246)

ci: make Codecov project and patch statuses informational @vlsi (#4244)

fix(build): restore JaCoCo XML report so Codecov receives coverage @vlsi (#4240)

test(replication): shrink big-transaction inserts to avoid CI timeouts @vlsi (#4243)

update maintainers @davecramer (#4222)

test: add hermetic test for localSocketAddress @vlsi (#4224)

docs(translation): clean up leftover German header in ja.po @vlsi (#4206)

Update ja.po @davecramer (#2004)

test: add PostgreSQL 18 to the CI test matrix @vlsi (#4198)

test: silence expected SSPI warning stack trace in SSPIClientWaffleTest @vlsi (#4197)

fix(ssl): build PKIX trust anchors without a KeyStore so FIPS-mode JVMs can load sslrootcert @vlsi (#4193)

test: fix flaky sentLocationEqualToLastReceiveLSN replication test @vlsi (#4175)

build: promote MethodCanBeStatic to error level @vlsi (#4172)

Fix PGInterval.setSeconds to reject out of range and NaN values @sehrope (#4194)

Replace connectThreadFactory with connectExecutor @sehrope (#4165)

Fix deleting temp file when spooling large stream to disk in StreamWrapper @sehrope (#4190)

chore: Add top level /scratch to gitignore @sehrope (#4164)

refactor: favour composition over inheritance for Driver.ConnectTask @vlsi (#4160)

Fix NumberParser.getFastLong(...) handling of overlong values @sehrope (#4163)

build: produce a multi-release jar from reduced-pom.xml on Java 11+ @vlsi (#4157)

Add connectThreadFactory and refactor Driver to use FutureTask for loginTimeout connection attempts @sehrope (#4120)

test: verify custom properties reach socket factory @vlsi (#4125)

test: fix LazyCleanerTest timeouts for the lingering Java 8 cleanup thread @vlsi (#4122)

test: stabilise StatementTest.fastCloses on Windows @vlsi (#4121)

fix: append default non-proxy hosts when socksNonProxyHosts is set @davecramer (#4045)

test: budget terminating Sync in BatchDeadlockTest small-RETURNING branch @vlsi (#4116)

test: make message assertions locale-independent @vlsi (#4113)

build: drop xgettext default keywords; regenerate translations @vlsi (#4100)

ci: opt-in scheduled workflows via ENABLE_SCHEDULED_JOBS repo variable @vlsi (#4085)

Avoid direct java.lang.management dependency in maxResultBuffer parser @mblakley-casana (#4069)

fix: restore pre-describe for generated-key batches @bilalshehata (#4014)

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.13] (2026-07-06)

Added

feat: invalidate the prepared-statement cache when the server reports a search_path change via GUC_REPORT (PostgreSQL 18+), so cached plans are no longer used against the wrong schema [PR #4259](pgjdbc/pgjdbc#4259)

feat: reWriteBatchedInserts now merges up to 32768 rows into one multi-values INSERT (bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The new reWriteBatchedInsertsSize connection property lowers that cap when set; the default of 0 uses that maximum. [PR #4207](pgjdbc/pgjdbc#4207)

feat: invalidate the prepared-statement cache after CREATE/DROP/ALTER so callers no longer trip on "cached plan must not change result type" without opting into autosave=ALWAYS. Controlled by the new flushCacheOnDdl connection property (default true); set to false for the prior behaviour. [PR #4067](pgjdbc/pgjdbc#4067)

feat: add connectExecutor connection property to customize the Executor used to run the worker task that performs the connection attempt when loginTimeout is in effect. The value is the fully qualified name of a class implementing java.util.concurrent.Executor. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named "PostgreSQL JDBC driver connection thread". The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it. [PR #4165](pgjdbc/pgjdbc#4165)

feat: add classLoaderStrategy connection property to control which classloaders the driver searches when loading a class named by a connection property, for example socketFactory. The default driver-first now falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Set driver to keep the previous driver-classloader-only behaviour, or context-first to prefer the thread context classloader [Issue #2112](pgjdbc/pgjdbc#2112) [PR #4167](pgjdbc/pgjdbc#4167)

feat: add OID constants for geometric arrays, RECORD, and refcursor [PR #4220](pgjdbc/pgjdbc#4220)

feat: LargeObject BlobInputStream now skips by seeking instead of reading, and the driver exposes the server version so it can select the 64-bit large-object API where available [PR #4204](pgjdbc/pgjdbc#4204)

Changed

refactor: the worker that runs the connection attempt under loginTimeout is now a FutureTask (ConnectTask) instead of the hand-rolled ConnectThread. When the caller hits the timeout, the task is now cancelled with cancel(true), which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, so loginTimeout can stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out. [PR #4120](pgjdbc/pgjdbc#4120)

chore: PGXAConnection.ConnectionHandler now rejects setAutoCommit(false) and setSavepoint(...) during an active XA branch, in addition to the long-rejected setAutoCommit(true) / commit() / rollback(). The setSavepoint rejection was already meant to be in place but the guard misspelled the method name as setSavePoint, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4. [PR #4114](pgjdbc/pgjdbc#4114)

chore: commitPrepared / rollback-of-prepared now return XAER_RMFAIL instead of XAER_RMERR when the underlying connection is left in a non-idle TransactionState. Transaction managers (Geronimo, Narayana, Atomikos) treat XAER_RMFAIL as retryable on a fresh XAResource; the prepared transaction is no longer abandoned. [PR #4114](pgjdbc/pgjdbc#4114)

refactor: derive getPrimaryKeys from pg_constraint.conkey [PR #4202](pgjdbc/pgjdbc#4202)

Fixed

fix: the published GitHub release now ships the released postgresql-<version>.jar and its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar [Issue #3812](pgjdbc/pgjdbc#3812) [PR #3814](pgjdbc/pgjdbc#3814)

fix: simplify the Statement#cancel state machine by dropping the redundant CANCELLED state. killTimerTask now waits for the state to return to IDLE directly, which removes a spin-forever case when more than one thread observes the cancel completing [PR #1827](pgjdbc/pgjdbc#1827).

perf: defer simple-query flushes until the driver reads the response, allowing BEGIN and the following query to share a network flush [Issue #3894](pgjdbc/pgjdbc#3894) [PR #4196](pgjdbc/pgjdbc#4196)

fix: reWriteBatchedInserts no longer throws IllegalArgumentException when batching a parameterless INSERT (for example INSERT INTO t VALUES (1, 2)) of 256 rows or more [PR #4207](pgjdbc/pgjdbc#4207)

fix: a comment before CALL in a CallableStatement no longer hides the native call, so OUT parameter registration works for /* comment */ call proc(?, ?) and similar. Parser.modifyJdbcCall now skips leading whitespace and SQL comments (both -- and /* */) before the call, tolerates a trailing comment after a { ... } escape, and no longer adds a spurious comma when moving an OUT parameter into a call whose arguments are only a comment [Issue #2538](pgjdbc/pgjdbc#2538) [PR #4209](pgjdbc/pgjdbc#4209)

fix: PreparedStatement.toString() no longer throws for a bytea value supplied as text via PGobject. Hex-format values (\x...) are validated and rendered as a bytea literal, and escape-format values are quoted and cast like any other literal [Issue #3757](pgjdbc/pgjdbc#3757) [PR #4201](pgjdbc/pgjdbc#4201)

fix: the driver no longer nulls the contextClassLoader of shared ForkJoinPool.commonPool() worker threads, which previously left unrelated tasks on those threads running with a null classloader [Issue #4155](pgjdbc/pgjdbc#4155) [PR #4156](pgjdbc/pgjdbc#4156)

fix: PgResultSet#getCharacterStream wraps String in a StringReader [PR #4063](pgjdbc/pgjdbc#4063)

fix: PGXAConnection no longer saves and restores the underlying connection's JDBC autoCommit flag. All XA-protocol SQL (BEGIN, PREPARE TRANSACTION, COMMIT, ROLLBACK, COMMIT PREPARED, ROLLBACK PREPARED, the recover() SELECT) is sent through QUERY_SUPPRESS_BEGIN, so the caller's autoCommit value is invariant across every XAResource call. Fixes the "2nd phase commit must be issued using an idle connection" failure during recovery on managed datasources that pool connections with autoCommit=false (TomEE, WildFly, WebSphere Liberty) [PR #4114](pgjdbc/pgjdbc#4114)

fix: PGXAConnection.prepare() now mutates XA state only after PREPARE TRANSACTION succeeds. A failed PREPARE previously left the driver thinking the branch was already prepared, so the follow-up rollback(xid) tried ROLLBACK PREPARED against a non-existent gid and returned XAER_RMERR. Transaction managers (Narayana) escalated this to HeuristicMixedException. With the fix, rollback(xid) takes the active-branch path and issues a plain ROLLBACK, which the server accepts cleanly. Fixes [Issue #3153](pgjdbc/pgjdbc#3153), [Issue #3123](pgjdbc/pgjdbc#3123). [PR #4114](pgjdbc/pgjdbc#4114)

fix: an updatable result set over an unqualified table name is now classified using only the table visible through search_path. When two schemas held a table with the same name and the same primary or unique index name but a different set of key columns, the driver took the union of both schemas' columns, so the result set could be wrongly rejected as not updatable [PR #4214](pgjdbc/pgjdbc#4214). Supersedes [PR #3400](pgjdbc/pgjdbc#3400).

fix: LargeObject.close() now flushes a buffered output stream before marking the object closed, so closing a large object without an explicit flush() no longer drops buffered writes. The flush runs while the object is still open (it calls back into LargeObject.write()), and lo_close always runs afterward; a failure from lo_close no longer masks an earlier flush error, and the transaction is not committed when the flush failed [Issue #4247](pgjdbc/pgjdbc#4247) [PR #4248](pgjdbc/pgjdbc#4248).

fix: reject empty timestamp, timestamptz, and date text with a clear SQLException (SQLState 22007) instead of an ArrayIndexOutOfBoundsException [PR #4278](pgjdbc/pgjdbc#4278)

fix: return null CHAR_OCTET_LENGTH for non-character columns [PR #4231](pgjdbc/pgjdbc#4231)

fix: honor scale in ResultSet.getBigDecimal(int, int) [PR #4211](pgjdbc/pgjdbc#4211)

fix: support java.time values in an updatable ResultSet updateRow() / insertRow() [PR #3848](pgjdbc/pgjdbc#3848)

fix: improve batching when the RETURNING clause contains varchar or numeric types [PR #4014](pgjdbc/pgjdbc#4014)

fix: correct estimatedReceiveBufferBytes accounting after a forced Sync [PR #4014](pgjdbc/pgjdbc#4014)

fix: avoid creating a transient ResultSet for describe-statement purposes, and restore the pre-describe path for generated-key batches [PR #4014](pgjdbc/pgjdbc#4014)

fix: add an explicit failure message when a multi-statement command executes in a batch [PR #4014](pgjdbc/pgjdbc#4014)

fix: detect search_path changes case-insensitively [PR #4216](pgjdbc/pgjdbc#4216)

fix: auto-detect the SSL key format instead of relying on the .key extension [PR #3946](pgjdbc/pgjdbc#3946)

fix: build PKIX trust anchors without a KeyStore so FIPS JVMs work [PR #4193](pgjdbc/pgjdbc#4193)

fix: use gssResponseTimeout rather than sslResponseTimeout for GSS connections [PR #4076](pgjdbc/pgjdbc#4076)

fix: skip the autosave savepoint for SET LOCAL / SET SESSION TRANSACTION [PR #4203](pgjdbc/pgjdbc#4203)

fix: do not throw AssertionError from BatchResultHandler on a closed connection [PR #4187](pgjdbc/pgjdbc#4187)

fix: reject SQL_TSI_FRAC_SECOND with an explicit, explained error [PR #4229](pgjdbc/pgjdbc#4229)

fix: reject a null URL in Driver.acceptsURL with a clear NullPointerException [PR #4205](pgjdbc/pgjdbc#4205)

fix: reject overlong inputs in NumberParser.getFastLong instead of silently wrapping [PR #4163](pgjdbc/pgjdbc#4163)

fix: reject out-of-range and NaN values in PGInterval.setSeconds [PR #4194](pgjdbc/pgjdbc#4194)

fix: close the socket when PgConnection setup fails after connect [PR #4161](pgjdbc/pgjdbc#4161)

fix: keep the LazyCleanerImpl cleanup task alive across a transient empty queue [PR #4038](pgjdbc/pgjdbc#4038)

... (truncated)

Commits

3297557 docs: add 42.7.13 release changelog (#4270)
d93d370 style: apply Autostyle to docs/ and .github/
2e05ff9 build: check docs/ and .github/ formatting with Autostyle
b4a6087 Adjust EditorConfig für Makefiles
725cebb fix(jdbc): reject empty timestamp/timestamptz text with a clear error
23a1b0d fix(scram): fail closed on channel-binding downgrade (no scram bump)
0b4077a Bump pgjdbc version from 42.7.12 to 42.7.13 (#4269)
394800a fix: flush LargeObject output stream before marking closed (#4248)
83780f1 Maintain consistency with the use of the word maintainer vs comitter (#4234)
d42cad5 fix(jdbc): classify updatable result set by search_path visibility
Additional commits viewable in compare view

Updates com.microsoft.playwright:playwright from 1.60.0 to 1.62.0

Release notes

Sourced from com.microsoft.playwright:playwright's releases.

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:
BrowserContext context = browser.newContext();
// Seed a passkey your backend provisioned for a test user.
context.credentials().create("example.com", new Credentials.CreateOptions()
.setId(credentialId)
.setUserHandle(userHandle)
.setPrivateKey(privateKey)
.setPublicKey(publicKey));
context.credentials().install();
Page page = context.newPage();
page.navigate("https://example.com/login");
// The page's navigator.credentials.get() is answered with the seeded passkey.
You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
page.localStorage().setItem("token", "abc");
String token = page.localStorage().getItem("token");
List<NameValue> items = page.sessionStorage().items();
New APIs

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.

New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.

The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

🛠️ Other improvements

Playwright now supports Ubuntu 26.04.

HAR and trace recordings now include WebSocket requests.

Browser Versions

Chromium 149.0.7827.55

Mozilla Firefox 151.0

WebKit 26.5

This version was also tested against the following stable channels:

Google Chrome 149

... (truncated)

Commits

ce430e3 chore(release): mark 1.62.0 (#1958)
d76dc9c chore(driver): cherry-pick 1.62.1 roll (#1961)
7de72a6 chore(driver): roll to 1.62.0 (#1954)
24a70ef chore: roll to 1.62.0-alpha-2026-07-22 (#1951)
32cf6cd chore(deps): bump the actions group with 2 updates (#1945)
e5135db chore: Upgrade EsrpRelease task version to 11 (#1943)
6234e06 feat(docker): pre-extract the driver in images to avoid /tmp unpacking (#1938)
20e4edd chore: roll driver to 1.61.1 (#1941)
d2d29d4 feat(driver): bundle playwright-core in driver, keep only Node.js in driver-b...
43d2601 fix(fetch): serialize LocalDate in post data (#1934)
Additional commits viewable in compare view

Updates gradle-wrapper from 9.5.1 to 9.6.1

Release notes

Sourced from gradle-wrapper's releases.

9.6.1

The Gradle team is excited to announce Gradle 9.6.1.

Here are the highlights of this release:

Improved Configuration Cache hit rates

Additional CLI rendering options

Important project hierarchy lookup deprecations

Read the Release Notes

We would like to thank ...
Description has been truncated

Bumps the all-gradle group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `3.0.3` | `3.1.0` | | [tools.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `3.1.4` | `3.2.1` | | [io.rest-assured:rest-assured](https://github.com/rest-assured/rest-assured) | `6.0.0` | `6.0.1` | | [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.2` | | [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.22.0` | `1.22.1` | | [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.11` | `42.7.13` | | [com.microsoft.playwright:playwright](https://github.com/microsoft/playwright-java) | `1.60.0` | `1.62.0` | | [gradle-wrapper](https://github.com/gradle/gradle) | `9.5.1` | `9.6.1` | Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 3.0.3 to 3.1.0 - [Release notes](https://github.com/springdoc/springdoc-openapi/releases) - [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md) - [Commits](springdoc/springdoc-openapi@v3.0.3...v3.1.0) Updates `tools.jackson.module:jackson-module-kotlin` from 3.1.4 to 3.2.1 - [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-3.1.4...jackson-module-kotlin-3.2.1) Updates `io.rest-assured:rest-assured` from 6.0.0 to 6.0.1 - [Changelog](https://github.com/rest-assured/rest-assured/blob/master/changelog.txt) - [Commits](rest-assured/rest-assured@rest-assured-6.0.0...rest-assured-6.0.1) Updates `org.junit.jupiter:junit-jupiter` from 6.1.0 to 6.1.2 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.1.0...r6.1.2) Updates `commons-codec:commons-codec` from 1.22.0 to 1.22.1 - [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-codec@rel/commons-codec-1.22.0...rel/commons-codec-1.22.1) Updates `org.postgresql:postgresql` from 42.7.11 to 42.7.13 - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.7.11...REL42.7.13) Updates `com.microsoft.playwright:playwright` from 1.60.0 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright-java/releases) - [Commits](microsoft/playwright-java@v1.60.0...v1.62.0) Updates `gradle-wrapper` from 9.5.1 to 9.6.1 - [Release notes](https://github.com/gradle/gradle/releases) - [Commits](gradle/gradle@v9.5.1...v9.6.1) --- updated-dependencies: - dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-gradle - dependency-name: tools.jackson.module:jackson-module-kotlin dependency-version: 3.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-gradle - dependency-name: io.rest-assured:rest-assured dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-gradle - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 6.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-gradle - dependency-name: commons-codec:commons-codec dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-gradle - dependency-name: org.postgresql:postgresql dependency-version: 42.7.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-gradle - dependency-name: com.microsoft.playwright:playwright dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-gradle - dependency-name: gradle-wrapper dependency-version: 9.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-gradle ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 12, 2026

Navigation Menu

build(deps): bump the all-gradle group across 1 directory with 8 updates - #757

build(deps): bump the all-gradle group across 1 directory with 8 updates#757
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/all-gradle-44386ae4b8

dependabot Bot commented on behalf of github Aug 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 12, 2026

springdoc-openapi v3,1,0 released!

What's Changed

Added

Fixed

[3.1.0] - 2026-07-31

Added

Changed

Fixed

Changelog 6.0.1 (2026-07-10)

Changelog 5.5.7 (2026-01-16)

Apache Commons Codec 1.22.1 Release Notes

Fixed Bugs

Changes

v42.7.13

Changes

[42.7.13] (2026-07-06)

Added

Changed

Fixed

v1.61.0

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

🛠️ Other improvements

Browser Versions

9.6.1

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants