Bump com.microsoft.sqlserver:mssql-jdbc from 11.2.3.jre17 to 13.2.1.jre11

[dependabot]

Bumps com.microsoft.sqlserver:mssql-jdbc from 11.2.3.jre17 to 13.2.1.jre11.

Release notes

Sourced from com.microsoft.sqlserver:mssql-jdbc's releases.

[12.10.2] Hotfix & Stable Release

Fixed issues

• Address a hostname validation vulnerability by securely parsing certificate common names. microsoft/mssql-jdbc#2803 What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.

[12.2.1] Hotfix & Stable Release

Fixed issues

• Address a hostname validation vulnerability by securely parsing certificate common names. #2798 What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.

[11.2.4] Hotfix & Stable Release

Fixed issues

• Address a hostname validation vulnerability by securely parsing certificate common names. #2800 What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.

[12.4.3] Hotfix & Stable Release

Fixed issues

• Address a hostname validation vulnerability by securely parsing certificate common names. microsoft/mssql-jdbc#2806 What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.

[12.6.5] Hotfix & Stable Release

Fixed issues

• Address a hostname validation vulnerability by securely parsing certificate common names. microsoft/mssql-jdbc#2805 What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.

[12.8.2] Hotfix & Stable Release

Fixed issues

• Address a hostname validation vulnerability by securely parsing certificate common names. microsoft/mssql-jdbc#2804 What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.

[13.2.0] Stable Release

Breaking change

• This release introduces support for native vector types over the previous 12.x GA release. This feature is a breaking change. Previous driver versions receive vector data types from the server as JSON strings. Version 13.2 recognizes the new SQL vector type natively, exposing it to applications as a vector type, by default. To maintain the previous behavior of vector types exposed as JSON strings, set the connection option vectorTypeSupport to off.

Changed

• Use sys.all_objects for accurate function and procedure filtering #2705 What changed: Differentiated stored procedures and functions using sys.all_objects instead of sp_stored_procedures. Who benefits: Developers using getProcedures() and getFunctions() in JDBC. Impact: Ensures correct metadata retrieval, preventing confusion from mixed results.

Fixed issues

... (truncated)

Commits

• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
com.microsoft.sqlserver:mssql-jdbc	[>= 12.3.a, < 12.4]

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud