public inbox for [email protected]
help / color / mirror / Atom feedRe: JDBC driver has EOL'd component
2+ messages / 2 participants
[nested] [flat]
* Re: JDBC driver has EOL'd component
@ 2023-10-14 14:51 Sehrope Sarkuni <[email protected]>
0 siblings, 1 reply; 2+ messages in thread
From: Sehrope Sarkuni @ 2023-10-14 14:51 UTC (permalink / raw)
To: Suren Sethumadhavan <[email protected]>; +Cc: [email protected] <[email protected]>; pgsql-jdbc
On Fri, Oct 13, 2023 at 6:48 PM Suren Sethumadhavan <
[email protected]> wrote:
> Looks like JDBC drivers are shipping with an EOL’s version of Checker Qual
> (v 3.5.0).
>
>
> 1. Can you please confirm this?
> 2. If confirmed, when can we expect a version with newer versions of
> this component?
>
>
This is not a security issue and should be directed to the general pgjdbc
mailing list (cc'ed).
The pgjdbc driver does not ship with any embedded dependencies. The driver
dependencies are part of the the Maven pom and the latest version of the
driver has a checker-qual dependency of 3.31.0:
https://repo1.maven.org/maven2/org/postgresql/postgresql/42.6.0/postgresql-42.6.0.pom
While we periodically update the minimum dependency versions for the
driver's internal dependencies as we leverage new features, there is no
specific schedule for it. In the interim, if you want to use a newer
version of that dependency, you'll need to update your local pom.xml or
gradle config to override the checker-qual dependency.
Regards,
-- Sehrope Sarkuni
Founder & CEO | JackDB, Inc. | https://www.jackdb.com/
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: JDBC driver has EOL'd component
@ 2023-10-15 21:57 Rob Bygrave <[email protected]>
parent: Sehrope Sarkuni <[email protected]>
0 siblings, 0 replies; 2+ messages in thread
From: Rob Bygrave @ 2023-10-15 21:57 UTC (permalink / raw)
To: Sehrope Sarkuni <[email protected]>; +Cc: Suren Sethumadhavan <[email protected]>; [email protected] <[email protected]>; pgsql-jdbc
*> override the checker-qual dependency.*
Noting that the checker-qual dependency is not actually needed [as a
transitive dependency] and instead can be *excluded* altogether (e.g. via
maven exclusions) rather than updated.
Cheers, Rob.
On Sun, 15 Oct 2023 at 05:11, Sehrope Sarkuni <[email protected]> wrote:
> On Fri, Oct 13, 2023 at 6:48 PM Suren Sethumadhavan <
> [email protected]> wrote:
>
>> Looks like JDBC drivers are shipping with an EOL’s version of Checker
>> Qual (v 3.5.0).
>>
>>
>> 1. Can you please confirm this?
>> 2. If confirmed, when can we expect a version with newer versions of
>> this component?
>>
>>
> This is not a security issue and should be directed to the general pgjdbc
> mailing list (cc'ed).
>
> The pgjdbc driver does not ship with any embedded dependencies. The driver
> dependencies are part of the the Maven pom and the latest version of the
> driver has a checker-qual dependency of 3.31.0:
> https://repo1.maven.org/maven2/org/postgresql/postgresql/42.6.0/postgresql-42.6.0.pom
>
> While we periodically update the minimum dependency versions for the
> driver's internal dependencies as we leverage new features, there is no
> specific schedule for it. In the interim, if you want to use a newer
> version of that dependency, you'll need to update your local pom.xml or
> gradle config to override the checker-qual dependency.
>
> Regards,
> -- Sehrope Sarkuni
> Founder & CEO | JackDB, Inc. | https://www.jackdb.com/
>
>
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2023-10-15 21:57 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2023-10-14 14:51 Re: JDBC driver has EOL'd component Sehrope Sarkuni <[email protected]>
2023-10-15 21:57 ` Rob Bygrave <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox