Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 30, 2025

Bumps com.zaxxer:HikariCP from 5.1.0 to 6.3.0.

Changelog

Sourced from com.zaxxer:HikariCP's changelog.

HikariCP Changes

Changes in 6.3.0

  • increase keepaliveTime variance from 10% to 20%

  • merged #2266 support duration values for configuration from properties, such as 10ms, 20s, 30m, 40h or 50d

  • merged #2284 align logs from HikariPool.logPoolState()

  • merged #2285 set default value for maxIdle in HikariConfig constructor (no functional change)

  • merged #2294 Allow setting String[] and int[] properties (useful for pgjdbc HA configuration)

  • merged #2300 catch java.lang.Error instead of java.lang.Exception under certain conditions

Changes in 6.2.1

  • change default keepaliveTime to 2 minutes

  • fix commons-compress dependency, make test scope

Changes in 6.2.0

  • merged #2238 handle SQLTimeoutException without eviction. Users looking to preserve previous behavior should provide an implementation of com.zaxxer.hikari.SQLExceptionOverride to the pool configuration.

  • added new enum value, Override.MUST_EVICT, available to implementations of com.zaxxer.hikari.SQLExceptionOverride

  • enhanced debug logging in circumstances where the pool falls to zero size and new connections to the database continue to fail.

  • update test dependencies that were flagged as having vulnerabilities

Changes in 6.1.0

  • fixed #1960 allow SQLExceptionOverride to adjudicate all exceptions for eviction

  • merged #1962 dropwizard 5 metrics are now supported via the setMetricRegistry() method in HikariConfig and in HikariDataSource

  • merged #2244 improve JavassistProxyFactory

  • merged #2243 fix inconsistency between isWrapperFor and unwrap

  • merged #1827 support loading properties file in unnamed resources module

  • merged #1842 don't clear isCommitStateDirty flag in setReadOnly

  • change default maxLifetime variance from 2.5% to 25% to further avoid mass connection die-off dips

... (truncated)

Commits
  • ef165cf [maven-release-plugin] prepare release HikariCP-6.3.0
  • 00456a1 Update changelog and next release version.
  • d6f0ccc Allow setting String[] and int[] properties (#2291)
  • 0bff26e Align HikariPool.logPoolState (#2284)
  • bbd698e Setting default value for maxIdle in HikariConfig constructor (#2285)
  • 8257a99 Although rare, JDBC drivers can and do throw java.lang.Error instead of java....
  • 8de2eb8 Drop Support section in README and reorganize its content (#2301)
  • a28b6ec Add license headers (#2271)
  • 9fa66d1 minor code cleanup
  • 1164493 Update README.md
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 30, 2025
@github-actions github-actions bot enabled auto-merge (squash) April 30, 2025 03:29
Bumps [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) from 5.1.0 to 6.3.0.
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-5.1.0...HikariCP-6.3.0)

---
updated-dependencies:
- dependency-name: com.zaxxer:HikariCP
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/com.zaxxer-HikariCP-6.3.0 branch from bb094ca to e1a0253 Compare April 30, 2025 07:17
@github-actions github-actions bot merged commit 805d260 into master Apr 30, 2025
6 checks passed
@github-actions github-actions bot deleted the dependabot/maven/com.zaxxer-HikariCP-6.3.0 branch April 30, 2025 07:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant