dependabot[bot] opened a new pull request, #4800: URL: https://github.com/apache/arrow-adbc/pull/4800
Bumps [com.microsoft.sqlserver:mssql-jdbc](https://github.com/Microsoft/mssql-jdbc) from 13.4.0.jre11 to 13.6.0.jre11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Microsoft/mssql-jdbc/releases";>com.microsoft.sqlserver:mssql-jdbc's releases</a>.</em></p> <blockquote> <h2>[13.6.0] Stable Release</h2> <h3>Added</h3> <ul> <li> <p><strong>Add FLOAT16 Vector Version Negotiation to the TVP Write Path</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/2997";>#2997</a></p> <ul> <li><strong>What was added</strong>: Negotiated vector-version validation before writing VECTOR column metadata for table-valued parameters.</li> <li><strong>Who benefits</strong>: Applications sending vector columns through table-valued parameters.</li> <li><strong>Impact</strong>: Rejects all vectors on version 0 and FLOAT16 vectors on version 1 before data is written to the wire, with a clear driver error.</li> </ul> </li> <li> <p><strong>Port Legacy FX Non-AE Test Scenarios to JUnit</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/3008";>#3008</a></p> <ul> <li><strong>What was added</strong>: Forty-eight <code>legacyFx</code>-tagged JUnit tests covering previously unported non-Always-Encrypted functional scenarios.</li> <li><strong>Who benefits</strong>: Contributors and CI validation pipelines.</li> <li><strong>Impact</strong>: Improves regression coverage while advancing retirement of the legacy FX test suite.</li> </ul> </li> <li> <p><strong>Add Cross-Driver Connection String Aliases for Unification</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/3011";>#3011</a></p> <ul> <li><strong>What was added</strong>: Case-insensitive aliases for <code>uid</code>, <code>trusted_connection</code>, <code>app</code>, <code>connectTimeout</code>, <code>columnEncryption</code>, and <code>quotedId</code>, mapped to their canonical JDBC properties.</li> <li><strong>Who benefits</strong>: Applications sharing connection-string configuration across Microsoft data drivers.</li> <li><strong>Impact</strong>: Improves portability while preserving all existing JDBC property names and aliases.</li> </ul> </li> <li> <p><strong>Add getCurrentApplicationName to PerformanceLogCallback</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/3018";>#3018</a></p> <ul> <li><strong>What was added</strong>: A default <code>getCurrentApplicationName()</code> method that exposes the publishing connection's <code>applicationName</code> to performance callbacks.</li> <li><strong>Who benefits</strong>: Applications using connection pools and performance-event correlation.</li> <li><strong>Impact</strong>: Allows events to be associated with a pool or application without breaking existing callback implementations.</li> </ul> </li> </ul> <h3>Changed</h3> <ul> <li> <p><strong>Optimize MONEY, DECIMAL, and String Processing in the ResultSet Read Path</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/2991";>#2991</a></p> <ul> <li><strong>What was changed</strong>: Removed intermediate allocations from <code>MONEY</code>/<code>SMALLMONEY</code> decoding, common <code>BigDecimal</code> encoding, short synchronous string reads, and NBCROW initialization.</li> <li><strong>Who benefits</strong>: Applications reading high-volume or wide result sets.</li> <li><strong>Impact</strong>: Reduces garbage-collection pressure and improves throughput while preserving decoded values and existing fallback behavior.</li> </ul> </li> <li> <p><strong>Validate Reflective Class Names for Connection Properties</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/3004";>#3004</a></p> <ul> <li><strong>What was changed</strong>: Added Java binary class-name validation before reflectively loading classes specified by properties such as <code>socketFactoryClass</code> and <code>accessTokenCallbackClass</code>.</li> <li><strong>Who benefits</strong>: Applications configuring custom callback, socket-factory, or related reflective classes.</li> <li><strong>Impact</strong>: Malformed class names now fail early with a dedicated driver error instead of producing confusing reflective-loading failures.</li> </ul> </li> <li> <p><strong>Update Vector Tests for Server-Side FLOAT16/FLOAT32 Conversion</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/3005";>#3005</a></p> <ul> <li><strong>What was changed</strong>: Updated and expanded vector tests for implicit and explicit conversion between FLOAT16 and FLOAT32 vector subtypes.</li> <li><strong>Who benefits</strong>: Contributors validating vector interoperability against servers supporting vector version 2.</li> <li><strong>Impact</strong>: Covers assignments, casts, conversions, bulk copy, routines, precision loss, nulls, and dimension mismatch behavior.</li> </ul> </li> <li> <p><strong>Adjust License File to Enable GitHub Detection</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/3010";>#3010</a></p> <ul> <li><strong>What was changed</strong>: Normalized the MIT license text formatting.</li> <li><strong>Who benefits</strong>: Repository users and automated tooling.</li> <li><strong>Impact</strong>: Enables GitHub to detect and display the repository license; there is no runtime impact.</li> </ul> </li> <li> <p><strong>Suppress CodeQL False Positive for Protocol-Mandated MD5</strong> <a href="https://redirect.github.com/microsoft/mssql-jdbc/pull/3014";>#3014</a></p> <ul> <li><strong>What was changed</strong>: Documented and suppressed the CodeQL <code>SM05136</code> finding for MD5 used by NTLM channel binding as required by MS-NLMP.</li> <li><strong>Who benefits</strong>: Contributors and security-scanning pipelines.</li> <li><strong>Impact</strong>: Reduces false-positive security findings without changing authentication behavior.</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/Microsoft/mssql-jdbc/commits";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
