Bump postgresql from 42.1.4 to 42.2.16

[dependabot-preview]

Bumps postgresql from 42.1.4 to 42.2.16.

Changelog

Sourced from postgresql's changelog.

[42.2.16] (2020-08-20)

Fixed

• • Arrays sent in binary format are now sent as 1 based. This was a regression for multi-dimensional arrays as well as text/varchar, oid and bytea arrays. Since 42.2.0 single dimensional arrays were stored 0 based. They are now sent 1 based which is the SQL standard, and the default for Postgres when sent as strings such as '{1,2,3}'. Fixes issue 1860 in PR 1863.

[42.2.15] (2020-08-14)

Changed

• Rename source distribution archive to postgresql-$version-jdbc-src.tar.gz, and add top-level archive folder ba017507
• Add the ability to connect with a GSSAPI encrypted connection. As of PostgreSQL version 12 GSSAPI encrypted connections are possible. Now the driver will attempt to connect to the server with a GSSAPI encrypted connection. If that fails then attempt an SSL connection, finally falling back to a plain text connection. All of this is controlled using both the gssEncMode and sslMode parameters which, in concert with pg_hba.conf, determine if a particular mode is allowed and or required. PR 1821 ad921b9e
• Source release archive shades dependencies (scram) by default. It affects only postgresql-version-src.tar.gz release artifact f0301eb9
• Refactor decoding arrays PR 1194

Added

• Verify nullness with CheckerFramework 6e524ae5

Fixed

• Avoid preparedStatement leak when using updateable ResultSet via insert/update/refreshRow PR 1815 9a0d2b18
• Change order of checks for oid vs primary keys. OID's have been deprecated. PR 1613
• Close certificate file stream. PR 1837
• Make sure socketTimeout is enforced PR 1831
• Assume PKCS-8 SSL key format by default PR 1819
• Preserve unquoted unicode whitespace in array literals PR 1266

[42.2.14] (2020-06-10)

Changed

• Reverted com.github.waffle:waffle-jna, org.osgi:org.osgi.core, org.osgi:org.osgi.enterprise dependencies to optional=true in Maven PR 1797.

[42.2.13] (2020-06-04)

Notable Changes

• Security: The primary reason to release this version and to continue the 42.2.x branch is for CVE-2020-13692. Reported by David Dworken, this is an XXE and more information can be found here. Sehrope Sarkuni reworked the XML parsing to provide a solution in commit 14b62aca4.
• The build system has been changed to Gradle thanks to Vladimir PR 1627.
• Regression: com.github.waffle:waffle-jna, org.osgi:org.osgi.core, org.osgi:org.osgi.enterprise dependencies are listed as non-optional issue 1975.

Changed

Added

• jre-6 was added back to allow us to release fixes for all artifacts in the 42.2.x branch PR 1787

Fixed

• I/O error ru translation PR 1756
• Issue 1771 PgDatabaseMetaData.getFunctions() returns

Commits

• 5e4bbc8 chore: comment-out type "this" type annotations for jre6 and jre7
• bc03d27 Release notes for 42.2.16 (#1866)
• 0cdb5e5 chore: delegate Gradle execution to gradle-cache-action
• e8923c7 fix: preserve unquoted unicode whitespace in array literals (#1266)
• 9962307 Fix header on existing Parameter Status doc page, and include entry in the in...
• aa4cb6d fix: Remove unused .ratignore (#1857)
• ffd428f move fix to correct place and remove duplicate (#1859)
• 0c162bc docs: add release notes for 42.2.15 (#1858)
• a0babeb Binary array index (#1863)
• 3802b45 chore: enable local build cache, and use burrunan/gradle-cache-action@v1 for ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #663.