Bump the dependencies group with 2 updates #2516

dependabot · 2025-02-03T19:47:35Z

Bumps the dependencies group with 2 updates: com.microsoft.sqlserver:mssql-jdbc and com.google.code.gson:gson.

Updates com.microsoft.sqlserver:mssql-jdbc from 12.8.1.jre8 to 12.9.0.jre8-preview

Release notes

Sourced from com.microsoft.sqlserver:mssql-jdbc's releases.

[12.8.1] Hotfix & Stable Release

Changed

Changed MSAL logging from FINER to FINEST #2491

Fixed issues

Adjusted DESTINATION_COL_METADATA_LOCK, in SQLServerBulkCopy, so that is properly released in all cases #2492

Reverted "Execute Stored Procedures Directly" feature, as well as subsequent changes related to the feature. #2493

Changed driver behavior to allow prepared statement objects to be reused, preventing a "multiple queries are not allowed" error #2494

Commits

See full diff in compare view

Updates com.google.code.gson:gson from 2.11.0 to 2.12.1

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.11.1

The only difference between this release and 2.11.0 is that OSGi declarations in the Gson jar now specify that com.google.errorprone.annotations is an optional dependency, not a required one. If you do not use OSGi then there is no effective change.

Gson 2.12.0

What's Changed

The biggest change is that we no longer support Java 7. People who still need to run on Java 7 will need to use an earlier version of Gson.

Other changes:

Allow registering adapters for JsonElement again by @Marcono1234 in google/gson#2789

Add nesting limit for JsonReader by @Marcono1234 in google/gson#2588

Add @CheckReturnValue to our packages. by @cpovirk in google/gson#2693

Add NullSafeTypeAdapter to prevent TypeAdapter.nullSafe() from returning nested null-safe type adapters (#2729) by @lyubomyr-shaydariv in google/gson#2731

Support Properties subclasses in GsonTypes.getMapKeyAndValueTypes by @panic08 in google/gson#2758

Enforce rawType to be a Class in ParameterizedTypeImpl by @panic08 in google/gson#2759

Remove AccessController usage for enum adapter by @Marcono1234 in google/gson#2704

Fix typeArguments array not being cloned when resolving ParameterizedType with changed owner by @TBlueF in google/gson#2706

Remove duplicated declaration of required OSGi execution environment by @HannesWell in google/gson#2711

Move bnd.bnd file configuration into 'bnd' element of bnd-maven-plugin by @HannesWell in google/gson#2712

Move enum and JsonElement adapter classes to separate class files by @Marcono1234 in google/gson#2727

EnumTypeAdapter constructor optimization by @esaulpaugh in google/gson#2734

OSGi / bnd: Remove the self-Import of gson.annotations by @chrisrueger in google/gson#2735

New Contributors

@cpovirk made their first contribution in google/gson#2693

@jabagawee made their first contribution in google/gson#2701

@TBlueF made their first contribution in google/gson#2706

@HannesWell made their first contribution in google/gson#2711

@esaulpaugh made their first contribution in google/gson#2734

@chrisrueger made their first contribution in google/gson#2735

@panic08 made their first contribution in google/gson#2756

Full Changelog: google/gson@gson-parent-2.11.0...gson-parent-2.12.0

Commits

29e3d1d [maven-release-plugin] prepare release gson-parent-2.12.1
be456cf Make the import of com.google.errorprone optional (#2795)
b2e26fa Bump the github-actions group with 3 updates (#2785)
10bdd6d Simplify collection type adapters slightly. (#2791)
ab9c54f [maven-release-plugin] prepare for next development iteration
aaf7a12 [maven-release-plugin] prepare release gson-parent-2.12.0
a2b1c3c Allow registering adapters for JsonElement again (#2789)
e5dce84 Bump the maven group with 8 updates (#2784)
84e5f16 Bump the maven group with 7 updates (#2777)
9f3e577 Bump the github-actions group with 2 updates (#2778)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 2 updates: [com.microsoft.sqlserver:mssql-jdbc](https://github.com/Microsoft/mssql-jdbc) and [com.google.code.gson:gson](https://github.com/google/gson). Updates `com.microsoft.sqlserver:mssql-jdbc` from 12.8.1.jre8 to 12.9.0.jre8-preview - [Release notes](https://github.com/Microsoft/mssql-jdbc/releases) - [Changelog](https://github.com/microsoft/mssql-jdbc/blob/main/CHANGELOG.md) - [Commits](https://github.com/Microsoft/mssql-jdbc/commits) Updates `com.google.code.gson:gson` from 2.11.0 to 2.12.1 - [Release notes](https://github.com/google/gson/releases) - [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md) - [Commits](google/gson@gson-parent-2.11.0...gson-parent-2.12.1) --- updated-dependencies: - dependency-name: com.microsoft.sqlserver:mssql-jdbc dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.google.code.gson:gson dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

komamitsu · 2025-02-04T01:52:41Z

build.gradle

@@ -32,7 +32,7 @@ subprojects {
        mysqlDriverVersion = '8.4.0'
        postgresqlDriverVersion = '42.7.5'
        oracleDriverVersion = '23.6.0.24.10'
-        sqlserverDriverVersion = '12.8.1.jre8'
+        sqlserverDriverVersion = '12.9.0.jre8-preview'


Not sure whether to use the preview version...

We discussed that before and concluded we should not.
The only way to ignore a specific version for a Dependabot group update is to add this version to ignore 12.9.0.jre8-preview to the dependabot.yaml, which is a bit troublesome.
I was hoping the stable version 12.9.0.jre8 would be released quickly but since it is not the case, I will resort to update the dependabot.yaml

I see. Thanks!

dependabot · 2025-02-04T02:33:25Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Torch3333 · 2025-02-04T07:00:15Z

@dependabot reopen

Torch3333 · 2025-02-04T07:00:31Z

@dependabot ignore com.microsoft.sqlserver:mssql-jdbc patch version

dependabot · 2025-02-04T07:00:33Z

OK, I won't notify you about version 12.9.0 of com.microsoft.sqlserver:mssql-jdbc again, unless you unignore it.

Torch3333 · 2025-02-04T07:02:02Z

@dependabot show com.microsoft.sqlserver:mssql-jdbc ignore conditions

dependabot · 2025-02-04T07:02:05Z

Ignore Conditions

Dependency	Ignore Condition
com.microsoft.sqlserver:mssql-jdbc	[>= 12.9.0.a, < 12.9.1]

Torch3333 · 2025-02-04T07:07:30Z

@dependabot ignore com.microsoft.sqlserver:mssql-jdbc minor version

dependabot · 2025-02-04T07:07:32Z

OK, I won't notify you about version 12.9.x of com.microsoft.sqlserver:mssql-jdbc again, unless you unignore it.

Torch3333 · 2025-02-04T07:10:04Z

@dependabot unignore com.microsoft.sqlserver:mssql-jdbc minor version)

dependabot · 2025-02-04T07:10:07Z

OK, I will stop ignoring the com.microsoft.sqlserver:mssql-jdbc dependency.

Torch3333 · 2025-02-04T07:11:14Z

@dependabot show com.microsoft.sqlserver:mssql-jdbc ignore conditions

dependabot · 2025-02-04T07:11:16Z

No ignore conditions found for the dependency com.microsoft.sqlserver:mssql-jdbc

Torch3333 · 2025-02-04T07:11:49Z

@dependabot ignore com.microsoft.sqlserver:mssql-jdbc patch version

dependabot · 2025-02-04T07:11:51Z

OK, I won't notify you about version 12.9.0 of com.microsoft.sqlserver:mssql-jdbc again, unless you unignore it.

Torch3333 · 2025-02-04T07:14:53Z

@dependabot recreate

Torch3333 · 2025-02-04T07:15:49Z

@dependabot close

dependabot · 2025-02-04T07:15:53Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 3, 2025

dependabot bot requested review from a team, komamitsu, brfrn169, feeblefakie and Torch3333 and removed request for a team February 3, 2025 19:47

komamitsu reviewed Feb 4, 2025

View reviewed changes

Torch3333 removed request for brfrn169, feeblefakie and Torch3333 February 4, 2025 02:33

Torch3333 closed this Feb 4, 2025

dependabot bot deleted the dependabot/gradle/dependencies-75873820a0 branch February 4, 2025 02:33

brfrn169 mentioned this pull request Feb 4, 2025

[Dependabot] Ignore dependency com.microsoft.sqlserver:mssql-jdbc:12.9.0.jre8-preview #2517

Open

7 tasks

dependabot bot restored the dependabot/gradle/dependencies-75873820a0 branch February 4, 2025 07:00

dependabot bot reopened this Feb 4, 2025

dependabot bot closed this Feb 4, 2025

dependabot bot deleted the dependabot/gradle/dependencies-75873820a0 branch February 4, 2025 07:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group with 2 updates #2516

Bump the dependencies group with 2 updates #2516

dependabot bot commented on behalf of github Feb 3, 2025 •

edited

Loading

komamitsu Feb 4, 2025

Torch3333 Feb 4, 2025

komamitsu Feb 4, 2025

Torch3333 Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Bump the dependencies group with 2 updates #2516

Bump the dependencies group with 2 updates #2516

Conversation

dependabot bot commented on behalf of github Feb 3, 2025 • edited Loading

[12.8.1] Hotfix & Stable Release

Changed

Fixed issues

Gson 2.11.1

Gson 2.12.0

What's Changed

New Contributors

komamitsu Feb 4, 2025

Choose a reason for hiding this comment

Torch3333 Feb 4, 2025

Choose a reason for hiding this comment

komamitsu Feb 4, 2025

Choose a reason for hiding this comment

Torch3333 Feb 4, 2025

Choose a reason for hiding this comment

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

Torch3333 commented Feb 4, 2025

Torch3333 commented Feb 4, 2025

dependabot bot commented on behalf of github Feb 4, 2025

dependabot bot commented on behalf of github Feb 3, 2025 •

edited

Loading