public inbox for [email protected]  

help / color / mirror / Atom feed

From: Rob Bygrave <[email protected]>
To: Sehrope Sarkuni <[email protected]>
Cc: Suren Sethumadhavan <[email protected]>
Cc: [email protected] <[email protected]>
Cc: List <[email protected]>
Subject: Re: JDBC driver has EOL'd component
Date: Mon, 16 Oct 2023 10:57:18 +1300
Message-ID: <CAC=ts-GOpLXe8ViM521C+s++BJ0vB+PBMZbvEaqL8PBm5ORsaw@mail.gmail.com> (raw)
In-Reply-To: <CAH7T-apn6BSz_CGWbEbqVqzvTVpyuT-QiuL7DehY7zHxrrdTFQ@mail.gmail.com>
References: <BN0PR20MB38460DCE225F3F9D49C5C1D3EDD2A@BN0PR20MB3846.namprd20.prod.outlook.com>
	<CAH7T-apn6BSz_CGWbEbqVqzvTVpyuT-QiuL7DehY7zHxrrdTFQ@mail.gmail.com>

*> override the checker-qual dependency.*

Noting that the checker-qual dependency is not actually needed [as a
transitive dependency] and instead can be *excluded* altogether (e.g. via
maven exclusions) rather than updated.

Cheers, Rob.

On Sun, 15 Oct 2023 at 05:11, Sehrope Sarkuni <[email protected]> wrote:

> On Fri, Oct 13, 2023 at 6:48 PM Suren Sethumadhavan <
> [email protected]> wrote:
>
>> Looks like JDBC drivers are shipping with an EOL’s version of Checker
>> Qual (v 3.5.0).
>>
>>
>>    1. Can you please confirm this?
>>    2. If confirmed, when can we expect a version with newer versions of
>>    this component?
>>
>>
> This is not a security issue and should be directed to the general pgjdbc
> mailing list (cc'ed).
>
> The pgjdbc driver does not ship with any embedded dependencies. The driver
> dependencies are part of the the Maven pom and the latest version of the
> driver has a checker-qual dependency of 3.31.0:
> https://repo1.maven.org/maven2/org/postgresql/postgresql/42.6.0/postgresql-42.6.0.pom
>
> While we periodically update the minimum dependency versions for the
> driver's internal dependencies as we leverage new features, there is no
> specific schedule for it. In the interim, if you want to use a newer
> version of that dependency, you'll need to update your local pom.xml or
> gradle config to override the checker-qual dependency.
>
> Regards,
> -- Sehrope Sarkuni
> Founder & CEO | JackDB, Inc. | https://www.jackdb.com/
>
>

view thread (2+ messages)

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: JDBC driver has EOL'd component
  In-Reply-To: <CAC=ts-GOpLXe8ViM521C+s++BJ0vB+PBMZbvEaqL8PBm5ORsaw@mail.gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox