Conversation
PostgreSQL Extension Dependency Analysis: PR #2155
SummaryNo extensions had dependencies with MAJOR version updates. Full Analysis ResultsPostgreSQL 15 Extension DependenciesExtension: pg_cron
Raw Dependency TreeExtension: pg_repack
Raw Dependency TreeExtension: postgis
Raw Dependency TreeExtension: wrappers
Raw Dependency TreePostgreSQL 17 Extension DependenciesExtension: pg_cron
Raw Dependency TreeExtension: pg_repack
Raw Dependency TreeExtension: postgis
Raw Dependency Tree |
PostgreSQL Package Dependency Analysis: PR #2155
SummaryNo packages had MAJOR version updates. Full Analysis ResultsPostgreSQL 15 Dependency ChangesExtracting PostgreSQL 15 dependencies...
Runtime Closure Size
Raw Dependency ClosurePostgreSQL 17 Dependency ChangesExtracting PostgreSQL 17 dependencies...
Runtime Closure Size
Raw Dependency Closure |
c824b2f to
366159a
Compare
0530b1d to
6c6c99f
Compare
|
supabase, doesnt wanna release this or it prioritize paid user? |
|
@SpaceM88 hey, I'm waiting with you 👯 |
|
We're returning to this soon. |
|
hey @samrose , now it's postgres 17.11 and 18.6 . it's almost a year and next will be postgres 19.0. are you going to support the postgres 17.11, 18.6 and 19.0? |
This comment has been minimized.
This comment has been minimized.
726df40 to
740d287
Compare
|
@mmlb hey, any plan to push this to be merged soon? |
We are planning for this to be out by Wednesday. Official comms will be out later today. |
281041b to
3d6e9c0
Compare
This comment has been minimized.
This comment has been minimized.
3d6e9c0 to
df77cb3
Compare
|
Waiting for it @mmlb :) |
Slight delay (see the added PRs in the stack) more info soon. |
|
@mmlb thanks for the info. so I think you are trying to build a mechanism for supporting multiple Postgres versions in this repo, right? When the 17.11 has been released, it won't take time for the postgres 18? |
We already support multiple PG versions in the repo, 15, 17 and 17+orioledb already exist. Most of the delay for 17/18 have been testing involved and man power. We've gotten some more folk on board so have been able to make progress recently. I'm not sure we'll do 18 and might just skip over to 19 tbh. |
|
Cool! I've been waiting for Postgres 18 support since last year :D Hopefully PG 19 support lands sooner. |
c555c08 to
d764f5e
Compare
e2d8332 to
b0f0c52
Compare
|
I'm going to bring #2166 and #2195's contents in via this PR. Bringing them in before the upgrade so I can verify in CI that they reproduce the issues and thus can be confident the upgrades do in fact fix them and regression tests will catch if they come back. This first run is going to fail once we hit the hstore regression test due to postgres crashing and not being restarted, next commit skips hstore so the rest of the tests will be able to fail as expected. Upgrade will show tests now pass w/o any changes to them (hstore test will be brought back in to the list). |
|
ok hit the hstore failures, so just pushed commit to filter it out from tests to run. |
31d5083 to
5419f89
Compare
Sorted runtimeInputs and indented code in `if`s because they annoyed me. I moved the check for postgresql.conf to right after it was first created because it doesn't really make much sense to do it later than necessary.
pg_regress suite under nix/tests/sql pinning this release's CVE and behavior-change fixes. - btree_gist_nan (fix NaN handling for float4 & float8) - create_statistics_priv (CVE-2025-12817) - hstore_copy_binary (CVE-2026-6472) - intarray_ltree_query (CVE-2026-6473) - ltree_label_overflow (fix integer overflow in comparisons) - multirange_create_priv (CVE-2026-6472) - operator_breaking_change (CVE-2026-2004) - output_plugin_libraries (CVE-2026-6471) - pgcrypto_cipher_matrix (CVE-2026-14663) All skipped on orioledb-17 because its based on 17.9. CLI variant skips output_plugin_libraries and btree_gist_nan since logical-decoding infra / btree_gist not primed there. Refs: MPG-140, MPG-164 - merge_serialization (must raise serialization failure (40001) under REPEATABLE READ when its target row was updated+committed concurrently) Ref: MPG-163 Assisted-By: Claude Opus 4.8 <noreply@anthropic.com>
This crashes postgres and we don't have automatic restarts in these tests (as seen in last commit's ci run).
8e18e32 to
f39625d
Compare
PG 15.19/17.11 introduces output_plugin_libraries (CVE-2026-6471) defaulting to pgoutput and test_decoding only, which breaks wal2json slots (Realtime, CI wal2json tests). Allow wal2json in the shared config.
f39625d to
a86684a
Compare
What kind of change does this PR introduce?
Bump Postgres 15.14 → 15.19 and 17.6 → 17.11 (upstream security releases of 2026-08-13), absorbing five upstream minors per major — 44 CVEs total, including CVE-2026-19385, CVE-2026-16239, CVE-2026-14669 (all CVSS 8.8).
Breaking change analysis
Full analysis in MPG-140