Skip to content

Update dependency org.postgresql:postgresql to v42.7.7#15

Merged
OneLiteFeather merged 1 commit into
developfrom
renovate/postgresql
Aug 17, 2025
Merged

Update dependency org.postgresql:postgresql to v42.7.7#15
OneLiteFeather merged 1 commit into
developfrom
renovate/postgresql

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jul 1, 2025

This PR contains the following updates:

Package Change Age Confidence
org.postgresql:postgresql (source) 42.7.6 -> 42.7.7 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.7

Security
  • security: Client Allows Fallback to Insecure Authentication Despite channelBinding=require configuration.
    Fix channel binding required handling to reject non-SASL authentication
    Previously, when channel binding was set to "require", the driver would silently ignore this
    requirement for non-SASL authentication methods. This could lead to a false sense of security
    when channel binding was explicitly requested but not actually enforced. The fix ensures that when
    channel binding is set to "require", the driver will reject connections that use
    non-SASL authentication methods or when SASL authentication has not completed properly.
    See the Security Advisory for more detail. Reported by George MacKerron
    The following CVE-2025-49146 has been issued
Added
  • test: Added ChannelBindingRequiredTest to verify proper behavior of channel binding settings

Configuration

📅 Schedule: Branch creation - "on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the Renovate label Jul 1, 2025
@renovate renovate Bot force-pushed the renovate/postgresql branch from 13dd92f to 557cc67 Compare August 10, 2025 13:59
@OneLiteFeather OneLiteFeather merged commit e5e7252 into develop Aug 17, 2025
6 checks passed
@renovate renovate Bot deleted the renovate/postgresql branch August 17, 2025 16:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant