diff --git a/ansible/vars.yml b/ansible/vars.yml
index 6a903f0b99..9f1b505892 100644
--- a/ansible/vars.yml
+++ b/ansible/vars.yml
@@ -10,9 +10,9 @@ postgres_major:
 
 # Full version strings for each major version
 postgres_release:
-  postgresorioledb-17: "17.6.0.065-orioledb"
-  postgres17: "17.6.1.108"
-  postgres15: "15.14.1.108"
+  postgresorioledb-17: "17.6.0.066-orioledb"
+  postgres17: "17.6.1.109"
+  postgres15: "15.14.1.109"
 
 # Non Postgres Extensions
 pgbouncer_release: 1.25.1
diff --git a/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql b/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql
new file mode 100644
index 0000000000..4e95f40cea
--- /dev/null
+++ b/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql
@@ -0,0 +1,8 @@
+-- migrate:up
+
+-- The original fix in 20220224211803 checked pg_available_extensions for
+-- supautils, but supautils is a preload library without a .control file,
+-- so it never appears in pg_available_extensions. That migration was a no-op.
+ALTER ROLE authenticator SET session_preload_libraries = supautils, safeupdate;
+
+-- migrate:down
diff --git a/nix/tests/expected/roles.out b/nix/tests/expected/roles.out
index a457f40297..78a60dc24d 100644
--- a/nix/tests/expected/roles.out
+++ b/nix/tests/expected/roles.out
@@ -60,11 +60,11 @@ select
 from pg_roles r
 where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections')
 order by rolname;
-          rolname           |                                    rolconfig                                    
-----------------------------+---------------------------------------------------------------------------------
+          rolname           |                                        rolconfig                                         
+----------------------------+------------------------------------------------------------------------------------------
  anon                       | {statement_timeout=3s}
  authenticated              | {statement_timeout=8s}
- authenticator              | {session_preload_libraries=safeupdate,statement_timeout=8s,lock_timeout=8s}
+ authenticator              | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s}
  dashboard_user             | 
  pg_checkpoint              | 
  pg_database_owner          | 
diff --git a/nix/tests/expected/z_multigres-orioledb-17_roles.out b/nix/tests/expected/z_multigres-orioledb-17_roles.out
index a307b2014b..9e530eee17 100644
--- a/nix/tests/expected/z_multigres-orioledb-17_roles.out
+++ b/nix/tests/expected/z_multigres-orioledb-17_roles.out
@@ -57,11 +57,11 @@ select
 from pg_roles r
 where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections')
 order by rolname;
-          rolname           |                                    rolconfig                                    
-----------------------------+---------------------------------------------------------------------------------
+          rolname           |                                        rolconfig                                         
+----------------------------+------------------------------------------------------------------------------------------
  anon                       | {statement_timeout=3s}
  authenticated              | {statement_timeout=8s}
- authenticator              | {session_preload_libraries=safeupdate,statement_timeout=8s,lock_timeout=8s}
+ authenticator              | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s}
  dashboard_user             | 
  pg_checkpoint              | 
  pg_database_owner          |