Skip to content

Bump com.zaxxer:HikariCP from 4.0.3 to 6.3.2 #1020

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 24, 2025

Bumps com.zaxxer:HikariCP from 4.0.3 to 6.3.2.

Changelog

Sourced from com.zaxxer:HikariCP's changelog.

HikariCP Changes

Changes in 7.0.0

  • merged #2340 NoSuchMethodException error that is thrown when setting a metric registry, fixes to UtilityElf reflection code to use the correct method signature.

  • fixed #1294 add support for HikariCredentialsProvider class

Changes in 6.3.2

  • fixed #2342 restore module-info.class to jar file, which was lost in 6.3.1

  • fixed #2256 add support for legacy override of getUsername()/getPassword() of HikariDataSource. See project page for documentation of system property com.zaxxer.hikari.legacy.supportUserPassDataSourceOverride.

  • fixed #2323 right or wrong (wrt driver behavior) return to previous Connection.get/setSchema behavior

  • fixed #2288 upgrade dependencies and fix build warnings

Changes in 6.3.1

  • fixed #2315 source jar contains also binary .class files and missing some .java files

  • fixed #2307 remove improper hardcoded timout, use validationTimeout

  • fixed #2305 keep properties key and values as is rather than forcing stringification. Also fixes #2286 and #2304

  • upgraded various maven plugin dependencies to latest versions

Changes in 6.3.0

  • increase keepaliveTime variance from 10% to 20%

  • merged #2266 support duration values for configuration from properties, such as 10ms, 20s, 30m, 40h or 50d

  • merged #2284 align logs from HikariPool.logPoolState()

  • merged #2285 set default value for maxIdle in HikariConfig constructor (no functional change)

  • merged #2294 Allow setting String[] and int[] properties (useful for pgjdbc HA configuration)

  • merged #2300 catch java.lang.Error instead of java.lang.Exception under certain conditions

Changes in 6.2.1

  • change default keepaliveTime to 2 minutes

  • fix commons-compress dependency, make test scope

... (truncated)

Commits
  • 2812f8f [maven-release-plugin] prepare release HikariCP-6.3.2
  • 25cfcb1 fixes #2342 restore module-info.class to jar file
  • 7cd59f2 fixes #2256 add support for legacy override of getUsername()/getPassword() of...
  • 60c4aa0 fixes #2323 right or wrong (wrt driver behavior) return to previous Connectio...
  • afbb9dd fixes #2288 upgrade dependencies and fix build warnings
  • 066743d [maven-release-plugin] prepare for next development iteration
  • 9bffe3f [maven-release-plugin] prepare release HikariCP-6.3.1
  • f11423c fix nexusURL
  • e56fa46 Update CHANGES file
  • f738486 Keep properties keys and values as it is (#2305)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
com.zaxxer:HikariCP [>= 5.a, < 6]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) from 4.0.3 to 6.3.2.
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-4.0.3...HikariCP-6.3.2)

---
updated-dependencies:
- dependency-name: com.zaxxer:HikariCP
  dependency-version: 6.3.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 24, 2025
@chrjohn chrjohn closed this Jul 24, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 24, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/maven/com.zaxxer-HikariCP-6.3.2 branch July 24, 2025 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant