fix(deps): bump the sbt-patch group across 1 directory with 3 updates by dependabot[bot] · Pull Request #54 · kunwp1/texera

dependabot · 2026-08-02T20:45:16Z

Bumps the sbt-patch group with 3 updates in the / directory: org.postgresql:postgresql, io.github.classgraph:classgraph and com.softwaremill.sttp.client4:core_2.13.

Updates org.postgresql:postgresql from 42.7.4 to 42.7.13

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.13

Changes

docs: add 42.7.13 release changelog @davecramer (#4270)

Adjust EditorConfig für Makefile @BaumiCoder (#4279)

fix(scram): fail closed on channel-binding downgrade (no scram bump) @vlsi (#4272)

Bump pgjdbc version from 42.7.12 to 42.7.13 @davecramer (#4269)

chore: remove test-anorm-sbt module and its disabled CI wiring @vlsi (#4261)

refactor(test-gss): convert to Java/JUnit 5 submodule of the main build @vlsi (#4166)

ci: derive PG test versions from a Renovate-managed maxPgVersion @vlsi (#4218)

feat(insert): cap reWriteBatchedInserts by the protocol limit, not 128 @vlsi (#4207)

refactor(metadata): derive getPrimaryKeys from pg_constraint.conkey @vlsi (#4202)

fix(protocol): defer flushes until response processing @vlsi (#4196)

fix(build): resolve the Temurin 8 test toolchain by vendor @vlsi (#4257)

build: include multi-release source sets in the JaCoCo coverage report @vlsi (#4256)

fix(ci): read java_vendor before overwriting java_distribution @vlsi (#4255)

ci: generate the whole matrix in one batch, coverage job included @vlsi (#4253)

ci: pass CODECOV_TOKEN so protected-branch coverage uploads succeed @vlsi (#4254)

ci: collect coverage on one pinned job @vlsi (#4245)

ci: apply -DqueryTimeout from the matrix query_timeout axis @vlsi (#4246)

ci: make Codecov project and patch statuses informational @vlsi (#4244)

fix(build): restore JaCoCo XML report so Codecov receives coverage @vlsi (#4240)

test(replication): shrink big-transaction inserts to avoid CI timeouts @vlsi (#4243)

update maintainers @davecramer (#4222)

test: add hermetic test for localSocketAddress @vlsi (#4224)

docs(translation): clean up leftover German header in ja.po @vlsi (#4206)

Update ja.po @davecramer (#2004)

test: add PostgreSQL 18 to the CI test matrix @vlsi (#4198)

test: silence expected SSPI warning stack trace in SSPIClientWaffleTest @vlsi (#4197)

fix(ssl): build PKIX trust anchors without a KeyStore so FIPS-mode JVMs can load sslrootcert @vlsi (#4193)

test: fix flaky sentLocationEqualToLastReceiveLSN replication test @vlsi (#4175)

build: promote MethodCanBeStatic to error level @vlsi (#4172)

Fix PGInterval.setSeconds to reject out of range and NaN values @sehrope (#4194)

Replace connectThreadFactory with connectExecutor @sehrope (#4165)

Fix deleting temp file when spooling large stream to disk in StreamWrapper @sehrope (#4190)

chore: Add top level /scratch to gitignore @sehrope (#4164)

refactor: favour composition over inheritance for Driver.ConnectTask @vlsi (#4160)

Fix NumberParser.getFastLong(...) handling of overlong values @sehrope (#4163)

build: produce a multi-release jar from reduced-pom.xml on Java 11+ @vlsi (#4157)

Add connectThreadFactory and refactor Driver to use FutureTask for loginTimeout connection attempts @sehrope (#4120)

test: verify custom properties reach socket factory @vlsi (#4125)

test: fix LazyCleanerTest timeouts for the lingering Java 8 cleanup thread @vlsi (#4122)

test: stabilise StatementTest.fastCloses on Windows @vlsi (#4121)

fix: append default non-proxy hosts when socksNonProxyHosts is set @davecramer (#4045)

test: budget terminating Sync in BatchDeadlockTest small-RETURNING branch @vlsi (#4116)

test: make message assertions locale-independent @vlsi (#4113)

build: drop xgettext default keywords; regenerate translations @vlsi (#4100)

ci: opt-in scheduled workflows via ENABLE_SCHEDULED_JOBS repo variable @vlsi (#4085)

Avoid direct java.lang.management dependency in maxResultBuffer parser @mblakley-casana (#4069)

fix: restore pre-describe for generated-key batches @bilalshehata (#4014)

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.13] (2026-07-06)

Added

feat: invalidate the prepared-statement cache when the server reports a search_path change via GUC_REPORT (PostgreSQL 18+), so cached plans are no longer used against the wrong schema [PR #4259](pgjdbc/pgjdbc#4259)

feat: reWriteBatchedInserts now merges up to 32768 rows into one multi-values INSERT (bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The new reWriteBatchedInsertsSize connection property lowers that cap when set; the default of 0 uses that maximum. [PR #4207](pgjdbc/pgjdbc#4207)

feat: invalidate the prepared-statement cache after CREATE/DROP/ALTER so callers no longer trip on "cached plan must not change result type" without opting into autosave=ALWAYS. Controlled by the new flushCacheOnDdl connection property (default true); set to false for the prior behaviour. [PR #4067](pgjdbc/pgjdbc#4067)

feat: add connectExecutor connection property to customize the Executor used to run the worker task that performs the connection attempt when loginTimeout is in effect. The value is the fully qualified name of a class implementing java.util.concurrent.Executor. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named "PostgreSQL JDBC driver connection thread". The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it. [PR #4165](pgjdbc/pgjdbc#4165)

feat: add classLoaderStrategy connection property to control which classloaders the driver searches when loading a class named by a connection property, for example socketFactory. The default driver-first now falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Set driver to keep the previous driver-classloader-only behaviour, or context-first to prefer the thread context classloader [Issue #2112](pgjdbc/pgjdbc#2112) [PR #4167](pgjdbc/pgjdbc#4167)

feat: add OID constants for geometric arrays, RECORD, and refcursor [PR #4220](pgjdbc/pgjdbc#4220)

feat: LargeObject BlobInputStream now skips by seeking instead of reading, and the driver exposes the server version so it can select the 64-bit large-object API where available [PR #4204](pgjdbc/pgjdbc#4204)

Changed

refactor: the worker that runs the connection attempt under loginTimeout is now a FutureTask (ConnectTask) instead of the hand-rolled ConnectThread. When the caller hits the timeout, the task is now cancelled with cancel(true), which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, so loginTimeout can stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out. [PR #4120](pgjdbc/pgjdbc#4120)

chore: PGXAConnection.ConnectionHandler now rejects setAutoCommit(false) and setSavepoint(...) during an active XA branch, in addition to the long-rejected setAutoCommit(true) / commit() / rollback(). The setSavepoint rejection was already meant to be in place but the guard misspelled the method name as setSavePoint, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4. [PR #4114](pgjdbc/pgjdbc#4114)

chore: commitPrepared / rollback-of-prepared now return XAER_RMFAIL instead of XAER_RMERR when the underlying connection is left in a non-idle TransactionState. Transaction managers (Geronimo, Narayana, Atomikos) treat XAER_RMFAIL as retryable on a fresh XAResource; the prepared transaction is no longer abandoned. [PR #4114](pgjdbc/pgjdbc#4114)

refactor: derive getPrimaryKeys from pg_constraint.conkey [PR #4202](pgjdbc/pgjdbc#4202)

Fixed

fix: the published GitHub release now ships the released postgresql-<version>.jar and its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar [Issue #3812](pgjdbc/pgjdbc#3812) [PR #3814](pgjdbc/pgjdbc#3814)

fix: simplify the Statement#cancel state machine by dropping the redundant CANCELLED state. killTimerTask now waits for the state to return to IDLE directly, which removes a spin-forever case when more than one thread observes the cancel completing [PR #1827](pgjdbc/pgjdbc#1827).

perf: defer simple-query flushes until the driver reads the response, allowing BEGIN and the following query to share a network flush [Issue #3894](pgjdbc/pgjdbc#3894) [PR #4196](pgjdbc/pgjdbc#4196)

fix: reWriteBatchedInserts no longer throws IllegalArgumentException when batching a parameterless INSERT (for example INSERT INTO t VALUES (1, 2)) of 256 rows or more [PR #4207](pgjdbc/pgjdbc#4207)

fix: a comment before CALL in a CallableStatement no longer hides the native call, so OUT parameter registration works for /* comment */ call proc(?, ?) and similar. Parser.modifyJdbcCall now skips leading whitespace and SQL comments (both -- and /* */) before the call, tolerates a trailing comment after a { ... } escape, and no longer adds a spurious comma when moving an OUT parameter into a call whose arguments are only a comment [Issue #2538](pgjdbc/pgjdbc#2538) [PR #4209](pgjdbc/pgjdbc#4209)

fix: PreparedStatement.toString() no longer throws for a bytea value supplied as text via PGobject. Hex-format values (\x...) are validated and rendered as a bytea literal, and escape-format values are quoted and cast like any other literal [Issue #3757](pgjdbc/pgjdbc#3757) [PR #4201](pgjdbc/pgjdbc#4201)

fix: the driver no longer nulls the contextClassLoader of shared ForkJoinPool.commonPool() worker threads, which previously left unrelated tasks on those threads running with a null classloader [Issue #4155](pgjdbc/pgjdbc#4155) [PR #4156](pgjdbc/pgjdbc#4156)

fix: PgResultSet#getCharacterStream wraps String in a StringReader [PR #4063](pgjdbc/pgjdbc#4063)

fix: PGXAConnection no longer saves and restores the underlying connection's JDBC autoCommit flag. All XA-protocol SQL (BEGIN, PREPARE TRANSACTION, COMMIT, ROLLBACK, COMMIT PREPARED, ROLLBACK PREPARED, the recover() SELECT) is sent through QUERY_SUPPRESS_BEGIN, so the caller's autoCommit value is invariant across every XAResource call. Fixes the "2nd phase commit must be issued using an idle connection" failure during recovery on managed datasources that pool connections with autoCommit=false (TomEE, WildFly, WebSphere Liberty) [PR #4114](pgjdbc/pgjdbc#4114)

fix: PGXAConnection.prepare() now mutates XA state only after PREPARE TRANSACTION succeeds. A failed PREPARE previously left the driver thinking the branch was already prepared, so the follow-up rollback(xid) tried ROLLBACK PREPARED against a non-existent gid and returned XAER_RMERR. Transaction managers (Narayana) escalated this to HeuristicMixedException. With the fix, rollback(xid) takes the active-branch path and issues a plain ROLLBACK, which the server accepts cleanly. Fixes [Issue #3153](pgjdbc/pgjdbc#3153), [Issue #3123](pgjdbc/pgjdbc#3123). [PR #4114](pgjdbc/pgjdbc#4114)

fix: an updatable result set over an unqualified table name is now classified using only the table visible through search_path. When two schemas held a table with the same name and the same primary or unique index name but a different set of key columns, the driver took the union of both schemas' columns, so the result set could be wrongly rejected as not updatable [PR #4214](pgjdbc/pgjdbc#4214). Supersedes [PR #3400](pgjdbc/pgjdbc#3400).

fix: LargeObject.close() now flushes a buffered output stream before marking the object closed, so closing a large object without an explicit flush() no longer drops buffered writes. The flush runs while the object is still open (it calls back into LargeObject.write()), and lo_close always runs afterward; a failure from lo_close no longer masks an earlier flush error, and the transaction is not committed when the flush failed [Issue #4247](pgjdbc/pgjdbc#4247) [PR #4248](pgjdbc/pgjdbc#4248).

fix: reject empty timestamp, timestamptz, and date text with a clear SQLException (SQLState 22007) instead of an ArrayIndexOutOfBoundsException [PR #4278](pgjdbc/pgjdbc#4278)

fix: return null CHAR_OCTET_LENGTH for non-character columns [PR #4231](pgjdbc/pgjdbc#4231)

fix: honor scale in ResultSet.getBigDecimal(int, int) [PR #4211](pgjdbc/pgjdbc#4211)

fix: support java.time values in an updatable ResultSet updateRow() / insertRow() [PR #3848](pgjdbc/pgjdbc#3848)

fix: improve batching when the RETURNING clause contains varchar or numeric types [PR #4014](pgjdbc/pgjdbc#4014)

fix: correct estimatedReceiveBufferBytes accounting after a forced Sync [PR #4014](pgjdbc/pgjdbc#4014)

fix: avoid creating a transient ResultSet for describe-statement purposes, and restore the pre-describe path for generated-key batches [PR #4014](pgjdbc/pgjdbc#4014)

fix: add an explicit failure message when a multi-statement command executes in a batch [PR #4014](pgjdbc/pgjdbc#4014)

fix: detect search_path changes case-insensitively [PR #4216](pgjdbc/pgjdbc#4216)

fix: auto-detect the SSL key format instead of relying on the .key extension [PR #3946](pgjdbc/pgjdbc#3946)

fix: build PKIX trust anchors without a KeyStore so FIPS JVMs work [PR #4193](pgjdbc/pgjdbc#4193)

fix: use gssResponseTimeout rather than sslResponseTimeout for GSS connections [PR #4076](pgjdbc/pgjdbc#4076)

fix: skip the autosave savepoint for SET LOCAL / SET SESSION TRANSACTION [PR #4203](pgjdbc/pgjdbc#4203)

fix: do not throw AssertionError from BatchResultHandler on a closed connection [PR #4187](pgjdbc/pgjdbc#4187)

fix: reject SQL_TSI_FRAC_SECOND with an explicit, explained error [PR #4229](pgjdbc/pgjdbc#4229)

fix: reject a null URL in Driver.acceptsURL with a clear NullPointerException [PR #4205](pgjdbc/pgjdbc#4205)

fix: reject overlong inputs in NumberParser.getFastLong instead of silently wrapping [PR #4163](pgjdbc/pgjdbc#4163)

fix: reject out-of-range and NaN values in PGInterval.setSeconds [PR #4194](pgjdbc/pgjdbc#4194)

fix: close the socket when PgConnection setup fails after connect [PR #4161](pgjdbc/pgjdbc#4161)

fix: keep the LazyCleanerImpl cleanup task alive across a transient empty queue [PR #4038](pgjdbc/pgjdbc#4038)

... (truncated)

Commits

3297557 docs: add 42.7.13 release changelog (#4270)
d93d370 style: apply Autostyle to docs/ and .github/
2e05ff9 build: check docs/ and .github/ formatting with Autostyle
b4a6087 Adjust EditorConfig für Makefiles
725cebb fix(jdbc): reject empty timestamp/timestamptz text with a clear error
23a1b0d fix(scram): fail closed on channel-binding downgrade (no scram bump)
0b4077a Bump pgjdbc version from 42.7.12 to 42.7.13 (#4269)
394800a fix: flush LargeObject output stream before marking closed (#4248)
83780f1 Maintain consistency with the use of the word maintainer vs comitter (#4234)
d42cad5 fix(jdbc): classify updatable result set by search_path visibility
Additional commits viewable in compare view

Updates io.github.classgraph:classgraph from 4.8.184 to 4.8.186

Release notes

Sourced from io.github.classgraph:classgraph's releases.

classgraph-4.8.186

A large bugfix release, focused on classpath and classloader edge cases, plus three additions to the API.

New API

TypeSignature#resolveTypeVariables(ClassInfo contextClass) (#735, thanks to @vlsi) — substitutes type variables in a type signature with the concrete type arguments bound by a given subclass, so a method returning T in Generic<T> resolves to String when viewed through class Impl implements Generic<String>. Bindings are composed through intermediate classes, including where a subclass reorders or renames type parameters. contextClass must be supplied rather than inferred, because MethodInfo/FieldInfo objects are shared by every class that inherits them, so they cannot know which subclass you are viewing them through. Known limitation: a type variable that an inner class inherits from its enclosing class is not resolved, since the classfile records it as declared by the inner class.

ClassInfo#getSubinterfaces() and ScanResult#getSubinterfaces(Class|String) (#924, thanks to @iaik-jheher) — get only the subinterfaces of an interface. Previously getClassesImplementing() was the only option, and it returns both subinterfaces and implementing classes; that behaviour is unchanged, and is now documented.

ClassInfo#getMethodInfoWithAnnotation(...) / getFieldInfoWithAnnotation(...) (#914, thanks to @He-Pin), plus the getDeclared… and Class-typed variants — get the methods or fields of a class carrying a given annotation. Meta-annotations are matched. Constructors are excluded, matching getMethodInfo(); use getMethodAndConstructorInfo() to find annotated constructors.

Behaviour changes

Glob accepts are now recursive, ** is supported, and multiple globs may be given (#643, thanks to @etbasim; #870, thanks to @SpaskeS). A mid-package glob wildcard previously matched nothing at all. Note that a wildcard must match at least one package segment, so acceptPackages("com.foo.*") matches the sub-packages of com.foo but not com.foo itself — that rule was always in force, but is now documented.

A glob reject is now applied to sub-packages (#884, thanks to @palexdev). rejectPackages("java.awt.*") previously had no effect, because glob rejects were silently ignored when testing a package for rejection.

ClassInfo#getModifiers() no longer reports ACC_SUPER (#791, thanks to @JAelwynTyler), which is a classfile flag with no source-level meaning. Nested-class access levels are also no longer OR-ed with the classfile access_flags.

Bug fixes — classpath and classloaders

Classpath element ordering was nondeterministic, and the classloader recorded for an element could come from whichever work unit won a race, producing intermittently wrong ClassInfo classloaders and loadClass() failures (#810).

Classpath elements are now found by probing ClassLoader#getResources() as a last resort, so scanning works against classloaders that expose no way to enumerate their classpath (#892). As a side effect this also fixes scanning inside the GraalVM native-image builder (#867, thanks to @cmeiklejohn) — overrideClasspath() is no longer needed there.

Webapps deployed to Tomcat as non-exploded WAR files are now scanned correctly (#925, thanks to @clequin-tibco).

Not every '!' in a path is a nested-jar separator, and a trailing separator on an inner jar is now stripped (#903, thanks to @hoshie82). A doubly-nested path such as jar:jar:file:<war>!/WEB-INF/lib/c.jar!/ previously returned zero resources.

Fixed jrt:/jar: scheme handling and JRE symlink canonicalization — among other things, a malformed "jar:jar:file:…" input previously caused an infinite loop.

All JRE lib/ext jars are scanned when enableSystemJarsAndModules() is used (#813, thanks to @GaoHaobo-1843), and jrt-fs.jar is no longer misclassified as a JRE lib jar.

An application directory containing a bundled JRE is no longer mistaken for a JDK root (#816, thanks to @emaayan).

A package named classes is no longer treated as a package root (#929, thanks to @mcnew).

Bug fixes — resources, modules and lifecycle

The same file is no longer returned twice when reachable two ways; resources are compared by file identity rather than by URI string, and directories are canonicalized with Path#toRealPath() on Windows (#704, thanks to @michael-simons).

A module whose ModuleReader#list() returns null is treated as empty rather than throwing, and the offending module is now named in the error message (#887, thanks to @DDDDDragon).

removeTemporaryFilesAfterScan() no longer closes the ScanResult's own resources (#916, thanks to @protocol7).

Fixed an NPE when using an annotation after its ScanResult was closed (#930, thanks to @Skater901).

Fixed a data race in ModuleReaderProxy lazy initialization (#913, thanks to @cushon).

Fixed a ThreadGroup leak in SimpleThreadFactory (#931, thanks to @iaco86).

Build

The build now fails fast with a clear message on an unsupported build JDK.

classgraph-4.8.185

Fixed #897 (thanks to @cpovirk) / equivalently, #926 (thanks to @sebthom):

TYPE_USE annotations were misplaced on constructor parameters

crash on unmatchable field type annotations

Fixed #920 (thanks to @chubert-ch)

getMethodInfo() returned superclass constructors

Commits

527c461 [maven-release-plugin] prepare release classgraph-4.8.186
c55d038 Add TypeSignature#resolveTypeVariables(ClassInfo) (#735)
a96d4f4 Strip the trailing nested jar separator of an inner jar (#903)
ace3360 Don't assert the collapsing of "jrt://" in FastPathResolverTest
c6ab156 Fix jrt:/jar: scheme handling and JRE symlink canonicalization
fe3f715 Don't leave the probed jar open in Issue892Test
33300ff Find classpath elements by probing getResources() as a last resort (#892)
6f95160 Test the classpath element reference precedence rule deterministically (#810)
060b79d Take the classloader from the winning classpath element reference
c6d799f Add ClassInfo#getSubinterfaces() and ScanResult#getSubinterfaces() (#924)
Additional commits viewable in compare view

Updates com.softwaremill.sttp.client4:core_2.13 from 4.0.25 to 4.0.26

Release notes

Sourced from com.softwaremill.sttp.client4:core_2.13's releases.

v4.0.26

What's Changed

Fix digest auth failing with MD5-sess algorithm (#2933) (#2934) @Katrix

Fix #1465: No way to send continuous WebSocketFrame with Fs2 stream pipes (#2935) @dabrowski-adam

Add llms.txt docs (#2925) @flsh86

Dependency updates

Update http4s-client, http4s-ember-client to 0.23.36 (#2938) @softwaremill-ci

Update http4s-client, http4s-ember-client to 0.23.35 (#2937) @softwaremill-ci

Update jsoniter-scala-core, ... to 2.38.17 (#2936) @softwaremill-ci

Update jedis to 7.5.3 (#2932) @softwaremill-ci

Update circe-core, circe-generic, ... to 0.14.16 (#2928) @softwaremill-ci

Update logback-classic to 1.5.37 (#2930) @softwaremill-ci

Update logback-classic to 1.5.36 (#2929) @softwaremill-ci

Update logback-classic to 1.5.35 (#2926) @softwaremill-ci

Update sbt-softwaremill-browser-test-js, ... to 2.1.2 (#2927) @softwaremill-ci

Update sbt, scripted-plugin to 1.12.13 (#2924) @softwaremill-ci

Update sbt-scalajs, scalajs-compiler, ... to 1.22.0 (#2922) @softwaremill-ci

Update otel4s-core-metrics, ... to 1.0.1 (#2920) @softwaremill-ci

Update zio-opentelemetry to 3.1.18 (#2919) @softwaremill-ci

Update armeria to 1.40.0 (#2918) @softwaremill-ci

Update jsoniter-scala-core, ... to 2.38.15 (#2917) @softwaremill-ci

Update opentelemetry-semconv to 1.42.0 (#2916) @softwaremill-ci

Update sbt, scripted-plugin to 1.12.12 (#2913) @softwaremill-ci

Update json4s-core, json4s-native to 4.1.1 (#2911) @softwaremill-ci

Update scala3-compiler, scala3-library, ... to 3.3.8 (#2910) @softwaremill-ci

Update prometheus-metrics-core to 1.8.0 (#2909) @softwaremill-ci

Update okhttp-jvm to 5.4.0 (#2908) @softwaremill-ci

Update opentelemetry-exporter-otlp, ... to 1.63.0 (#2907) @softwaremill-ci

Update opentelemetry-api, ... to 1.63.0 (#2906) @softwaremill-ci

Update prometheus-metrics-core to 1.7.0 (#2905) @softwaremill-ci

Update armeria to 1.39.1 (#2904) @softwaremill-ci

Update logback-classic to 1.5.34 (#2903) @softwaremill-ci

Update opentelemetry-exporter-otlp, ... to 1.62.0 (#2901) @softwaremill-ci

Update client4:caching-backend, ... to 4.0.25 (#2900) @softwaremill-ci

Update jsoniter-scala-core, ... to 2.38.14 (#2899) @softwaremill-ci

Commits

871dec1 Release 4.0.26
49e203f Fix digest auth failing with MD5-sess algorithm (#2933) (#2934)
a9168df Fix #1465: No way to send continuous WebSocketFrame with Fs2 stream pipes (#2...
9390a4f Update http4s-client, http4s-ember-client to 0.23.36 (#2938)
95ad5f4 Update http4s-client, http4s-ember-client to 0.23.35 (#2937)
bb20dfc Update jsoniter-scala-core, ... to 2.38.17 (#2936)
eb1c1ca Update jedis to 7.5.3 (#2932)
53bc387 Update circe-core, circe-generic, ... to 0.14.16 (#2928)
e7e7e38 Update logback-classic to 1.5.37 (#2930)
37ebbe0 Update logback-classic to 1.5.36 (#2929)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the sbt-patch group with 3 updates in the / directory: [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc), [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) and [com.softwaremill.sttp.client4:core_2.13](https://github.com/softwaremill/sttp). Updates `org.postgresql:postgresql` from 42.7.4 to 42.7.13 - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.7.4...REL42.7.13) Updates `io.github.classgraph:classgraph` from 4.8.184 to 4.8.186 - [Release notes](https://github.com/classgraph/classgraph/releases) - [Commits](classgraph/classgraph@classgraph-4.8.184...classgraph-4.8.186) Updates `com.softwaremill.sttp.client4:core_2.13` from 4.0.25 to 4.0.26 - [Release notes](https://github.com/softwaremill/sttp/releases) - [Commits](softwaremill/sttp@v4.0.25...v4.0.26) --- updated-dependencies: - dependency-name: org.postgresql:postgresql dependency-version: 42.7.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sbt-patch - dependency-name: io.github.classgraph:classgraph dependency-version: 4.8.186 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sbt-patch - dependency-name: com.softwaremill.sttp.client4:core_2.13 dependency-version: 4.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sbt-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-02T20:45:38Z

Automated Reviewer Suggestions

Based on the git blame history of the changed files, we recommend the following reviewers:

No candidates found from git blame history.

github-actions · 2026-08-02T20:51:46Z

⚠️ Benchmark changes need a look

🟢 0 better · 🔴 6 worse · ⚪ 9 noise (<±5%) · 0 without baseline

Compared against main e029e0d benchmarked on this same runner, so the delta is largely free of cross-runner hardware noise. The "7d avg" column still reflects the gh-pages dashboard. Treat <±5% as noise unless repeated.

Dashboard · Run

	config	throughput	MB/s	latency	max Δ latest / 7d
🔴	bs=10 sw=10 sl=64	476	0.291	19,654/31,221/31,221 us	🔴 +12.8% / ⚪ within ±5%
🔴	bs=100 sw=10 sl=64	1,003	0.612	97,114/133,054/133,054 us	🔴 +11.3% / ⚪ within ±5%
⚪	bs=1000 sw=10 sl=64	1,171	0.715	856,694/878,280/878,280 us	⚪ within ±5% / ⚪ within ±5%

Baseline details

Latest main e029e0d from same runner

config	metric	PR	latest main	7d avg	Δ latest	Δ 7d
bs=10 sw=10 sl=64	throughput	476 tuples/sec	503 tuples/sec	n/a	-5.4%	n/a
bs=10 sw=10 sl=64	MB/s	0.291 MB/s	0.307 MB/s	n/a	-5.2%	n/a
bs=10 sw=10 sl=64	p50	19,654 us	19,035 us	n/a	+3.3%	n/a
bs=10 sw=10 sl=64	p95	31,221 us	27,686 us	n/a	+12.8%	n/a
bs=10 sw=10 sl=64	p99	31,221 us	27,686 us	n/a	+12.8%	n/a
bs=100 sw=10 sl=64	throughput	1,003 tuples/sec	1,036 tuples/sec	n/a	-3.2%	n/a
bs=100 sw=10 sl=64	MB/s	0.612 MB/s	0.632 MB/s	n/a	-3.2%	n/a
bs=100 sw=10 sl=64	p50	97,114 us	95,557 us	n/a	+1.6%	n/a
bs=100 sw=10 sl=64	p95	133,054 us	119,514 us	n/a	+11.3%	n/a
bs=100 sw=10 sl=64	p99	133,054 us	119,514 us	n/a	+11.3%	n/a
bs=1000 sw=10 sl=64	throughput	1,171 tuples/sec	1,189 tuples/sec	n/a	-1.5%	n/a
bs=1000 sw=10 sl=64	MB/s	0.715 MB/s	0.726 MB/s	n/a	-1.5%	n/a
bs=1000 sw=10 sl=64	p50	856,694 us	842,536 us	n/a	+1.7%	n/a
bs=1000 sw=10 sl=64	p95	878,280 us	867,829 us	n/a	+1.2%	n/a
bs=1000 sw=10 sl=64	p99	878,280 us	867,829 us	n/a	+1.2%	n/a

Raw CSV

config_idx,batch_size,schema_width,string_len,num_batches,total_ms,total_tuples,total_bytes,tuples_per_sec,mb_per_sec,lat_p50_us,lat_p95_us,lat_p99_us
0,10,10,64,20,419.93,200,128000,476,0.291,19654.00,31221.40,31221.40
1,100,10,64,20,1993.91,2000,1280000,1003,0.612,97113.55,133054.26,133054.26
2,1000,10,64,20,17081.28,20000,12800000,1171,0.715,856694.05,878280.47,878280.47

dependabot Bot added dependencies Pull requests that update a dependency file sbt Pull requests that update sbt code labels Aug 2, 2026

github-actions Bot added common platform engine labels Aug 2, 2026

Navigation Menu

fix(deps): bump the sbt-patch group across 1 directory with 3 updates - #54

fix(deps): bump the sbt-patch group across 1 directory with 3 updates#54
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/sbt/sbt-patch-d9ad5d77bb

dependabot Bot commented on behalf of github Aug 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 2, 2026

Uh oh!

github-actions Bot commented Aug 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v42.7.13

Changes

[42.7.13] (2026-07-06)

Added

Changed

Fixed

classgraph-4.8.186

New API

Behaviour changes

Bug fixes — classpath and classloaders

Bug fixes — resources, modules and lifecycle

Build

classgraph-4.8.185

v4.0.26

What's Changed

Dependency updates

Uh oh!

github-actions Bot commented Aug 2, 2026

Automated Reviewer Suggestions

Uh oh!

github-actions Bot commented Aug 2, 2026

⚠️ Benchmark changes need a look

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 2, 2026 •

edited

Loading