From 5f3e4111570552a0bdaed5e577f222ec9eaa97e7 Mon Sep 17 00:00:00 2001 From: Sam Rose Date: Mon, 13 Apr 2026 15:27:18 -0400 Subject: [PATCH 1/5] fix: assure supautils on session_preload_libraries in authenticator role --- ...000000_fix-authenticator-session-preload-libraries.sql | 8 ++++++++ nix/tests/expected/roles.out | 2 +- nix/tests/expected/z_multigres-orioledb-17_roles.out | 2 +- 3 files changed, 10 insertions(+), 2 deletions(-) create mode 100644 migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql diff --git a/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql b/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql new file mode 100644 index 0000000000..1d2594297a --- /dev/null +++ b/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql @@ -0,0 +1,8 @@ +-- migrate:up + +-- The original fix in 20220224211803 checked pg_available_extensions for +-- supautils, but supautils is a preload library without a .control file, +-- so it never appears in pg_available_extensions. That migration was a no-op. +ALTER ROLE authenticator SET session_preload_libraries = 'supautils, safeupdate'; + +-- migrate:down diff --git a/nix/tests/expected/roles.out b/nix/tests/expected/roles.out index a457f40297..bc29c6dedb 100644 --- a/nix/tests/expected/roles.out +++ b/nix/tests/expected/roles.out @@ -64,7 +64,7 @@ order by rolname; ----------------------------+--------------------------------------------------------------------------------- anon | {statement_timeout=3s} authenticated | {statement_timeout=8s} - authenticator | {session_preload_libraries=safeupdate,statement_timeout=8s,lock_timeout=8s} + authenticator | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s} dashboard_user | pg_checkpoint | pg_database_owner | diff --git a/nix/tests/expected/z_multigres-orioledb-17_roles.out b/nix/tests/expected/z_multigres-orioledb-17_roles.out index a307b2014b..d2bab8a397 100644 --- a/nix/tests/expected/z_multigres-orioledb-17_roles.out +++ b/nix/tests/expected/z_multigres-orioledb-17_roles.out @@ -61,7 +61,7 @@ order by rolname; ----------------------------+--------------------------------------------------------------------------------- anon | {statement_timeout=3s} authenticated | {statement_timeout=8s} - authenticator | {session_preload_libraries=safeupdate,statement_timeout=8s,lock_timeout=8s} + authenticator | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s} dashboard_user | pg_checkpoint | pg_database_owner | From 7b78bdbbac6de7559ae8fead4ad10386b4b1e214 Mon Sep 17 00:00:00 2001 From: Sam Rose Date: Mon, 13 Apr 2026 16:29:42 -0400 Subject: [PATCH 2/5] fix: expected output --- nix/tests/expected/roles.out | 6 +++--- nix/tests/expected/z_multigres-orioledb-17_roles.out | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/nix/tests/expected/roles.out b/nix/tests/expected/roles.out index bc29c6dedb..cf935b5849 100644 --- a/nix/tests/expected/roles.out +++ b/nix/tests/expected/roles.out @@ -60,11 +60,11 @@ select from pg_roles r where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections') order by rolname; - rolname | rolconfig -----------------------------+--------------------------------------------------------------------------------- + rolname | rolconfig +----------------------------+---------------------------------------------------------------------------------------------- anon | {statement_timeout=3s} authenticated | {statement_timeout=8s} - authenticator | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s} + authenticator | {"session_preload_libraries=\"supautils, safeupdate\"",statement_timeout=8s,lock_timeout=8s} dashboard_user | pg_checkpoint | pg_database_owner | diff --git a/nix/tests/expected/z_multigres-orioledb-17_roles.out b/nix/tests/expected/z_multigres-orioledb-17_roles.out index d2bab8a397..5522538374 100644 --- a/nix/tests/expected/z_multigres-orioledb-17_roles.out +++ b/nix/tests/expected/z_multigres-orioledb-17_roles.out @@ -57,11 +57,11 @@ select from pg_roles r where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections') order by rolname; - rolname | rolconfig -----------------------------+--------------------------------------------------------------------------------- + rolname | rolconfig +----------------------------+---------------------------------------------------------------------------------------------- anon | {statement_timeout=3s} authenticated | {statement_timeout=8s} - authenticator | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s} + authenticator | {"session_preload_libraries=\"supautils, safeupdate\"",statement_timeout=8s,lock_timeout=8s} dashboard_user | pg_checkpoint | pg_database_owner | From 2d68e6d4c015c31715fe7ee8604d44c7036d4a45 Mon Sep 17 00:00:00 2001 From: Sam Rose Date: Mon, 13 Apr 2026 22:42:03 -0400 Subject: [PATCH 3/5] fix: quoting --- ...260413000000_fix-authenticator-session-preload-libraries.sql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql b/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql index 1d2594297a..4e95f40cea 100644 --- a/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql +++ b/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql @@ -3,6 +3,6 @@ -- The original fix in 20220224211803 checked pg_available_extensions for -- supautils, but supautils is a preload library without a .control file, -- so it never appears in pg_available_extensions. That migration was a no-op. -ALTER ROLE authenticator SET session_preload_libraries = 'supautils, safeupdate'; +ALTER ROLE authenticator SET session_preload_libraries = supautils, safeupdate; -- migrate:down From 9d871a4588e9df59a05b4c026c0cb939b7d2785a Mon Sep 17 00:00:00 2001 From: Sam Rose Date: Tue, 14 Apr 2026 06:27:11 -0400 Subject: [PATCH 4/5] fix: regress tests --- nix/tests/expected/roles.out | 6 +++--- nix/tests/expected/z_multigres-orioledb-17_roles.out | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/nix/tests/expected/roles.out b/nix/tests/expected/roles.out index cf935b5849..78a60dc24d 100644 --- a/nix/tests/expected/roles.out +++ b/nix/tests/expected/roles.out @@ -60,11 +60,11 @@ select from pg_roles r where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections') order by rolname; - rolname | rolconfig -----------------------------+---------------------------------------------------------------------------------------------- + rolname | rolconfig +----------------------------+------------------------------------------------------------------------------------------ anon | {statement_timeout=3s} authenticated | {statement_timeout=8s} - authenticator | {"session_preload_libraries=\"supautils, safeupdate\"",statement_timeout=8s,lock_timeout=8s} + authenticator | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s} dashboard_user | pg_checkpoint | pg_database_owner | diff --git a/nix/tests/expected/z_multigres-orioledb-17_roles.out b/nix/tests/expected/z_multigres-orioledb-17_roles.out index 5522538374..9e530eee17 100644 --- a/nix/tests/expected/z_multigres-orioledb-17_roles.out +++ b/nix/tests/expected/z_multigres-orioledb-17_roles.out @@ -57,11 +57,11 @@ select from pg_roles r where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections') order by rolname; - rolname | rolconfig -----------------------------+---------------------------------------------------------------------------------------------- + rolname | rolconfig +----------------------------+------------------------------------------------------------------------------------------ anon | {statement_timeout=3s} authenticated | {statement_timeout=8s} - authenticator | {"session_preload_libraries=\"supautils, safeupdate\"",statement_timeout=8s,lock_timeout=8s} + authenticator | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s} dashboard_user | pg_checkpoint | pg_database_owner | From 654ea05604ecc93e8fc769c2184b7aea304cb4c4 Mon Sep 17 00:00:00 2001 From: Sam Rose Date: Tue, 21 Apr 2026 11:43:46 -0400 Subject: [PATCH 5/5] chore: bump versions to release --- ansible/vars.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ansible/vars.yml b/ansible/vars.yml index 6a903f0b99..9f1b505892 100644 --- a/ansible/vars.yml +++ b/ansible/vars.yml @@ -10,9 +10,9 @@ postgres_major: # Full version strings for each major version postgres_release: - postgresorioledb-17: "17.6.0.065-orioledb" - postgres17: "17.6.1.108" - postgres15: "15.14.1.108" + postgresorioledb-17: "17.6.0.066-orioledb" + postgres17: "17.6.1.109" + postgres15: "15.14.1.109" # Non Postgres Extensions pgbouncer_release: 1.25.1