Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 4, 2025

Bumps pg from 1.4.6 to 1.5.9.

Changelog

Sourced from pg's changelog.

v1.5.9 [2024-10-24] Lars Kanis lars@greiz-reinsdorf.de

  • Enable thread safety in static OpenSSL build for Windows. #595
  • Remove raising conect_timeout from 1 to 2 seconds. #590
  • Fix binary copy_data in Ractor context. #594
  • Exclude CI files and hidden files from built gem. #591 This is to simplify security inspection.
  • Update error classes to PostgreSQL-17.
  • Update Windows fat binary gem to OpenSSL-3.4.0 and PostgreSQL-17.0.

v1.5.8 [2024-09-06] Lars Kanis lars@greiz-reinsdorf.de

  • Fix host list duplication every time conn.reset is used. #586
  • Add default decoder for anonymous record types to BasicTypeRegistry #579
  • Update Windows fat binary gem to OpenSSL-3.3.2 and PostgreSQL-16.4.

v1.5.7 [2024-07-28] Lars Kanis lars@greiz-reinsdorf.de

  • Remove deprecated use of fptr->fd.#562 Direct access is disallowed since ruby-3.4.
  • Make pgconn_connect_poll close the socket prior to calling PQconnectPoll. #564 This could result in an exception while connecting when used multi threaded.
  • Fix several typos and improve spelling in documentation and code. #566
  • Add missing PG::RollbackTransaction as an option to exit conn.transaction. #560 Usage like in rails: https://api.rubyonrails.org/classes/ActiveRecord/Rollback.html
  • Don't print a warning when bigdecimal is required on ruby-3.4+ #574
  • Update Windows fat binary gem to OpenSSL-3.3.1 and PostgreSQL-16.3.

v1.5.6 [2024-03-01] Lars Kanis lars@greiz-reinsdorf.de

  • Renew address resolution (DNS) in conn.reset. #558 This is important, if DNS is used for load balancing, etc.
  • Make bigdecimal an optional dependency. #556 It's a gem in ruby-3.4+, so that users shouldn't be forced to use it.

v1.5.5 [2024-02-15] Lars Kanis lars@greiz-reinsdorf.de

  • Explicitly retype timespec fields to int64_t to fix compatibility with 32bit arches. #547
  • Fix possible buffer overflows in PG::BinaryDecoder::CopyRow on 32 bit systems. #548
  • Add binary Windows gems for Ruby 3.3.
  • Update Windows fat binary gem to OpenSSL-3.2.1 and PostgreSQL-16.2.

v1.5.4 [2023-09-01] Lars Kanis lars@greiz-reinsdorf.de

  • Fix compiling the pg extension with MSVC 2022. #535

... (truncated)

Commits
  • afe2f20 Bump VERSION to 1.5.9
  • 9f8a6c6 Add History entry for pg-1.5.9
  • 342bdbb Merge pull request #599 from larskanis/update-postgres
  • ca8e69c Remove skip on Windows since the issue is fixed
  • 70c02ea Work around missing dependency to errorcodes.h in PostgreSQL-17.0
  • 4a52437 CI: Update jobs to postgresql-1.7.0
  • d8c3753 Update to postgresql-17.0 and openssl-3.4.0 for Windows binary gems
  • 86367c6 Update error codes by rake update_error_codes
  • 94f1d7f Merge pull request #598 from larskanis/osl-threads
  • 716221a Enable thread safety in static OpenSSL build
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pg](https://github.com/ged/ruby-pg) from 1.4.6 to 1.5.9.
- [Changelog](https://github.com/ged/ruby-pg/blob/master/History.md)
- [Commits](ged/ruby-pg@v1.4.6...v1.5.9)

---
updated-dependencies:
- dependency-name: pg
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Mar 4, 2025
@dependabot dependabot bot requested review from a team as code owners March 4, 2025 14:06
@netlify
Copy link

netlify bot commented Mar 4, 2025

👷 Deploy Preview for chef-server processing.

Name Link
🔨 Latest commit d590f3a
🔍 Latest deploy log https://app.netlify.com/sites/chef-server/deploys/67c708e2d622c5000880a973

@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 4, 2025

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 29, 2025

Superseded by #4039.

@dependabot dependabot bot closed this Jul 29, 2025
@dependabot dependabot bot deleted the dependabot/bundler/src/chef-server-ctl/pg-1.5.9 branch July 29, 2025 13:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant