Sourced from HikariCP's changelog.

HikariCP Changes

Changes in 3.3.1

• fixed 1287 set core pool size before max pool size

• fixed 1308 treat a SQLTimeoutException as an evictable offense

• do not default maxPoolSize to minIdle when only minIdle is specified

• do not log warning about idleTimeout unless minimumIdle is less than maxPoolSize (because otherwise
  it does not apply)

Changes in 3.3.0

• Revert change where Connection.isClosed() was called outside of setNetworkTimeout() block, opening
  vulnerability to unacknowledged TCP traffic.

• fixed 1186 limit number of items in the ConcurrentBag's ThreadLocal list to avoid OOM errors in some
  borrow/requite patterns.

• Merged changed to log uncaught (Throwable) exceptions during connection acquisition.

• fixed 1161 fix logging formatting anchor.

• fixed 1181, 1182 allow passing a Prometheus CollectorRegistry rather than always using the default
  registry.

• merged 1210 use orElseGet() to delay call until necessary with respect to the housekeeper thread
  factory.

• fixed 1074 capability to instantiate an object based on the String class name, usefull when you want
  to set the MetricsTackerFactory from a property.

• merged 1250 fix proxy classes generation reproducibility using a sorted LinkedHashSet

• various clean-ups pointed out by sonarcloud.io

• merged 1290 Class.newInstance() is deprecated as of Java 9. Usage should be replaced by calling
  Class.getDeclaredConstructor().newInstance().

• fixed #1305 ensure that ConcurrentBag.add() does not spin under high load, when waiting threads may never
  reach 0.

• fixes #1287 when system property blockUntilFilled is set, use multiple threads to fill the pool.

Changes in 3.2.0

• check connection closed condition before attempting to set network timeout to avoid spurios exceptions

... (truncated)

• 86cabf0 [maven-release-plugin] prepare release HikariCP-3.3.1
• 162ebef Update CHANGES
• e8e9cdd fixes #1287 set core pool size before max pool size
• 28a2afd fixed idle validation test case
• 86612b4 Do NOT default maxPoolSize to minIdle when only minIdle is specified.
• cda2605 Fixes #1308 treat a SQLTimeoutException as an evictable offense
• 80d382d Fix idle timeout test case.
• c742e86 Do not log warning about idleTimeout unless minimumIdle is less than maxPoolS...
• b183aa1 Fixes #1319 update changelog
• 8384617 Update README.md
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.