dongjoon-hyun opened a new pull request, #55713:
URL: https://github.com/apache/spark/pull/55713

   ### What changes were proposed in this pull request?
   
   This PR aims to upgrade `PostgreSQL` JDBC driver to `42.7.11`.
   
   - https://github.com/apache/spark/security/dependabot/186
   
   ### Why are the changes needed?
   
   To maintain `PostgreSQL` JDBC driver test coverage up-to-date.
   - https://jdbc.postgresql.org/changelogs/2026-04-28-42/ (42.7.11)
   
   Notable changes since `42.7.10`:
   - Security: Limit SCRAM PBKDF2 iterations accepted from the server (new 
`scramMaxIterations` property capped at 100,000) to mitigate DoS by malicious 
servers.
   - Feature: Support for `require_auth` connection property (libpq-aligned 
authentication requirement validation).
   - Fixes: extended-protocol `Sync` handling, cursor-based fetching when SQL 
initiates transactions, SSL fallback/retry across `sslMode` values, connect 
timeout honored during retries, JSONB returned as `PGObject` instead of 
`String`, thread safety on concurrent connection close, unsigned 
`LogSequenceNumber` comparison, `COPY` lock release on I/O error.
   
   ### Does this PR introduce _any_ user-facing change?
   
   No, this is a test dependency.
   
   ### How was this patch tested?
   
   Pass the CIs.
   
   ### Was this patch authored or co-authored using generative AI tooling?
   
   Generated-by: `Claude Opus 4.7 (1M context)`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to