Bump org.postgresql:postgresql from 42.2.14 to 42.3.4 in /dummy

[github-actions]

Bumps org.postgresql:postgresql from 42.2.14 to 42.3.4.

Changelog

Sourced from org.postgresql:postgresql's changelog.

Changelog

Notable changes since version 42.0.0, read the complete History of Changes.

The format is based on Keep a Changelog.

[Unreleased]

Changed

Added

Fixed

[42.3.4] (2022-04-01 14:16:28 -0400)

Changed

• fix: change name of build cache PR 2471
• feat: add support for ResultSet#getObject(OffsetTime.class) and PreparedStatement#setObject(OffsetTime.class) PR 2467
• fix: Use non-synchronized getTimeZone in TimestampUtils PR 2451
• docs: Fix CHANGELOG.md misformatted markdown headings PR 2461
• docs: remove loggerLevel and loggerFile from docs and issues PR 2489
• feat: use direct wire format -> LocalDate conversion without resorting to java.util.Date, java.util.Calendar, and default timezones PR 2464 fixes Issue #2221

Added

Fixed

• docs: Update testing documentation PR 2446
• fix: Throw an exception if the driver cannot parse the URL instead of returning NULL fixes Issue PR 2421 (#2441)
• fix: Use PGProperty instead of the property names directly PR 2444
• docs: update changelog, missing links at bottom and formatting PR 2460
• fix: Remove isDeprecated from PGProperty. It was originally intended to help produce automated docs. Fixes Issue #2479 PR 2480
• fix: change PGInterval parseISO8601Format to support fractional second PR 2457
• fix: GSS login to use TGT from keytab fixes Issue #2469 PR 2470
• fix: More test and fix for issues discovered by [PR #2476](pgjdbc/pgjdbc#2476) [PR #2488](pgjdbc/pgjdbc#2488)

[42.3.3] (2022-02-15 11:32:24 -0500)

Changed

• fix: Removed loggerFile and loggerLevel configuration. While the properties still exist. They can no longer be used to configure the driver logging. Instead use java.util.logging configuration mechanisms such as logging.properties.

Added

Fixed

[42.3.2] (2022-02-01 07:35:41 -0500)

Security

• CVE-2022-21724 pgjdbc instantiates plugin instances based on class names provided via authenticationPluginClassName, sslhostnameverifier, socketFactory, sslfactory, sslpasswordcallback connection properties. However, the driver did not verify if the class implements the expected interface before instantiating the class. This would allow a malicious class to be instantiated that could execute arbitrary code from the JVM. Fixed in commit

... (truncated)

Commits

• b4a9346 Add PR 2546 (#2492)
• d72cbac Releasenotes42.3.4 (#2482)
• 97d9106 More test and fix for issues discovered by #2476 (#2488)
• 09c2c37 remove loggerLevel and loggerFile from docs and issues (#2489)
• aa1f586 Remove isDeprecated from PGProperty. It was originally intended to help produ...
• 3d14ea4 feat: add support for ResultSet#getObject(OffsetTime.class) and PreparedState...
• 1f9bba8 change name of build cache (#2471)
• c979ee5 Fix GSS login to use TGT from keytab
• 4ba6631 added post for 42.2.25 (#2466)
• c02aa77 feat: use direct wire format -> LocalDate conversion without resorting to jav...
• Additional commits viewable in compare view