Skip to content

[SPARK-56749][BUILD] Upgrade PostgreSQL JDBC driver to 42.7.11#55713

Open
dongjoon-hyun wants to merge 1 commit intoapache:masterfrom
dongjoon-hyun:SPARK-56749
Open

[SPARK-56749][BUILD] Upgrade PostgreSQL JDBC driver to 42.7.11#55713
dongjoon-hyun wants to merge 1 commit intoapache:masterfrom
dongjoon-hyun:SPARK-56749

Conversation

@dongjoon-hyun
Copy link
Copy Markdown
Member

@dongjoon-hyun dongjoon-hyun commented May 6, 2026

What changes were proposed in this pull request?

This PR aims to upgrade the test dependency PostgreSQL JDBC driver to 42.7.11 which was released on 2026-04-28. The one-week dependency-update grace-period passed.

Why are the changes needed?

To maintain PostgreSQL JDBC driver test coverage up-to-date.

  • https://jdbc.postgresql.org/changelogs/2026-04-28-42/ (42.7.11)
    • Security: Limit SCRAM PBKDF2 iterations accepted from the server (new scramMaxIterations property capped at 100,000) to mitigate DoS by malicious servers.
    • Feature: Support for require_auth connection property (libpq-aligned authentication requirement validation).
    • Fixes: extended-protocol Sync handling, cursor-based fetching when SQL initiates transactions, SSL fallback/retry across sslMode values, connect timeout honored during retries, JSONB returned as PGObject instead of String, thread safety on concurrent connection close, unsigned LogSequenceNumber comparison, COPY lock release on I/O error.

Does this PR introduce any user-facing change?

No, this is a test dependency.

How was this patch tested?

Pass the CIs.

Was this patch authored or co-authored using generative AI tooling?

Generated-by: Claude Opus 4.7 (1M context)

@dongjoon-hyun
Copy link
Copy Markdown
Member Author

dongjoon-hyun commented May 6, 2026

cc @peter-toth . This is just a test dependency update to suppress misleading GitHub Alerts in the public repos and downstream repos too.

Copy link
Copy Markdown
Contributor

@peter-toth peter-toth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks @dongjoon-hyun!

@dongjoon-hyun
Copy link
Copy Markdown
Member Author

Thank you, @peter-toth ~

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants