Skip to content

Bump PostgreSQL driver to 42.7.11#6091

Merged
nscuro merged 1 commit into
DependencyTrack:masterfrom
nscuro:bump-postgres
May 4, 2026
Merged

Bump PostgreSQL driver to 42.7.11#6091
nscuro merged 1 commit into
DependencyTrack:masterfrom
nscuro:bump-postgres

Conversation

@nscuro
Copy link
Copy Markdown
Member

@nscuro nscuro commented May 4, 2026

Description

Bumps PostgreSQL driver to 42.7.11.

Addressed Issue

Resolves CVE-2026-42198

Additional Details

N/A

Checklist

  • I have read and understand the contributing guidelines
  • This PR fixes a defect, and I have provided tests to verify that the fix is effective
  • This PR implements an enhancement, and I have provided tests to verify that it works as intended
  • This PR introduces changes to the database model, and I have added corresponding update logic
  • This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

Resolves CVE-2026-42198

Signed-off-by: nscuro <nscuro@protonmail.com>
Copilot AI review requested due to automatic review settings May 4, 2026 14:50
@nscuro nscuro added dependencies Pull requests that update a dependency file backport/4.14.2 PRs to be backported to v4.14.2 labels May 4, 2026
@owasp-dt-bot
Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codacy-production
Copy link
Copy Markdown

codacy-production Bot commented May 4, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

🟢 Coverage ∅ diff coverage · +0.00% coverage variation

Metric Results
Coverage variation +0.00% coverage variation (-1.00%)
Diff coverage diff coverage (70.00%)

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (03bae1e) 24824 20125 81.07%
Head commit (32f4684) 24824 (+0) 20125 (+0) 81.07% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#6091) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Maven-managed PostgreSQL JDBC driver version in Dependency-Track’s root build configuration to pick up the security fix referenced in the PR description.

Changes:

  • Bumps org.postgresql:postgresql from 42.7.10 to 42.7.11.
  • Keeps the change isolated to the shared version property in pom.xml.
  • Applies the updated driver version wherever the PostgreSQL JDBC dependency is resolved from that property.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@nscuro nscuro merged commit a75c4f8 into DependencyTrack:master May 4, 2026
15 checks passed
@nscuro nscuro deleted the bump-postgres branch May 4, 2026 15:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/4.14.2 PRs to be backported to v4.14.2 dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants