Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 23, 2022

Bumps mssql-jdbc from 10.2.0.jre17 to 11.1.2.jre17-preview.

Release notes

Sourced from mssql-jdbc's releases.

[10.2.1] HotFix & Stable Release

Fixed issues

  • Refactored Idle Connection Resiliency timeout to use existing SharedTimer 1794
  • Fixed Managed Identity retry interval to exponential backoff properly 1770
  • Removed extra call to executeCommand() within connectionCommand() 1754

[11.1.1] Preview Release

Added

  • Added support for Java 18 1802
  • Added support for bulk insert of null GUID values 1778
  • Added ALPN for TDS 8.0 connections 1795

Changed

  • Updated dependency versions of azure-keyvault and azure-identity 1798
  • Refactored Idle Connection Resiliency timeout to use existing SharedTimer 1794

Fixed issues

  • Fixed regression with Always Encrypted with secure enclaves 1805

[11.1.0] Preview Release

Added

  • Added new connection string property prepareMethod to toggle use of sp_prepare 1719
  • Added new encrypt options for TDS 8.0 support 1757
  • Added Configurable IPv6 Support 1766
  • Added serverCertificate connection property for encrypt=strict 1773
  • Added option for NONE attestation protocol 1779

Changed

  • Added encrypt utility to obfuscate password strings in memory 1780
  • Simplified traceID creation in DataSource and PooledConnection 1747
  • Refactored SQLServerColumnEncryptionAzureKeyVaultProvider usage in SQLServerConnection 1774

Fixed issues

  • Removed extra call to executeCommand() within connectionCommand() 1754
  • Fixed warnings for Implicit narrowing conversion in compound assignment 1758
  • Added check for MSAL library when attempting ActiveDirectoryServicePrincipal authentication 1759
  • Fixed Managed Identity retry interval to exponential backoff properly 1770

[10.2.0] Stable Release

Added

  • Support for datetimeoffset with sql_variant 1673
  • Canonical host name resolution when realm is provided in connection string 1730

Changed

  • Changed certificate validation behavior to validate when encryption is negotiated from either the client or the server side, not just the client side 1731
  • Enclave Provider to use non blocking /dev/urandom 1734
  • Updated Azure library dependency versions to address vulnerability issues 1733
  • Updated Bouncy Castle dependency version 1735

Fixed

  • Fixed issues detected by SonarQube 1739
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 23, 2022
@dependabot dependabot bot force-pushed the dependabot/maven/com.microsoft.sqlserver-mssql-jdbc-11.1.2.jre17-preview branch 2 times, most recently from a4d7870 to 004aa1f Compare July 8, 2022 17:30
Bumps [mssql-jdbc](https://github.com/Microsoft/mssql-jdbc) from 10.2.0.jre17 to 11.1.2.jre17-preview.
- [Release notes](https://github.com/Microsoft/mssql-jdbc/releases)
- [Changelog](https://github.com/microsoft/mssql-jdbc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/mssql-jdbc/commits)

---
updated-dependencies:
- dependency-name: com.microsoft.sqlserver:mssql-jdbc
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/com.microsoft.sqlserver-mssql-jdbc-11.1.2.jre17-preview branch from 004aa1f to e06b752 Compare July 8, 2022 19:04
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 9, 2022

A newer version of com.microsoft.sqlserver:mssql-jdbc exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@bpkroth
Copy link
Collaborator

bpkroth commented Mar 21, 2023

Superseded by #231

@bpkroth bpkroth closed this Mar 21, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 21, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/maven/com.microsoft.sqlserver-mssql-jdbc-11.1.2.jre17-preview branch March 21, 2023 17:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants