v1.0.0

Changelog

• 5a7392d fix(spill): keep the row count whole when the fallback footer is cut
• ea201e7 fix(http): refuse token-less requests before their body and bound reads
• 48647ec docs: correct the audit of a failed ask and the XDG_CONFIG_HOME rule
• c357a16 fix(engine): replace bytes that are not UTF-8 in every query error
• ecf050b fix(spill): make an existing spill directory 0700 before writing
• b226986 fix(tools): keep resources/list within the 10 KB inline limit
• f37ee8c test(engine): wait 30s for the server to end an oversized query
• b735926 test(guard): name the Warm test after what it checks
• 8102deb fix(serve): wait at most 2 seconds for the engine to close at exit
• 494da19 fix(http): listen on IPv4 alone for any host but an IPv6 address
• 4274472 fix(introspect): read pg_search and pg_profile values under 16 MiB
• aaed7cf fix(spill): write no spill file under a path that is not UTF-8
• 6688aaf docs: name the confirmation question as the one result past 10 KB
• 6ec1351 fix(tools): cut a wrapped protocol error to the 10 KB limit
• 02b7326 fix(tools): audit a tools/call that ends in a protocol error
• 98bd802 chore(lint): enable modernize
• 06e0ca1 refactor: adopt Go 1.26 idioms
• 648e70d docs: split the safety model and pg_explain costing into short bullets
• 0a26f66 ci(release): fail before GoReleaser unless server.json names the tag
• 0d8d9d2 ci: drop the bench job: the test matrix already runs it on PG 15-18
• b1fd580 chore: merge finish/surface
• b600d1a chore: merge finish/bounds
• e704f22 docs(introspect): say each definition is bounded, not their number
• d83526d docs: name the protocol errors the 10 KB bound does not cover
• 7b0ccc4 fix(explain): read the plan under 16 MiB so large plans are summarized
• b545859 docs: say to move the .env files with config.json when upgrading
• bc94ace fix(introspect): cut long definitions so pg_schema keeps within max_bytes
• 5cee472 docs: say over --http the role check findings reach the first caller
• 31288f0 fix(tools): audit every resources/read, also those the SDK turns away
• 23ee101 fix(tools): list only the resources of connections already in use
• 9a30ee8 fix(spill): cut the fallback notes so a long spill path keeps the limit
• 4b753ae fix(engine): replace bytes that are not UTF-8 in column and type names
• 8fd5a20 perf: compile the SQL parser in the background as the server starts
• f124c72 docs: fix the upgrade steps: move config.json, rename server and rules
• 7bacca0 fix: honour $XDG_CONFIG_HOME for the default config file
• 6b9b72e fix(http): listen on IPv4 alone when --http names an IPv4 address
• 773621b docs: say each run of bytes that are not UTF-8 becomes one U+FFFD
• 370f5cd ci: pin actions by commit SHA, GoReleaser and the base image exactly; add Dependabot
• 4b48079 fix(tools): show control and invisible formatting characters in the confirmation as escapes
• cff62c6 test(engine): spell U+FFFD and é as escapes in the UTF-8 test
• 567fe59 fix(tools): show and bind each connection's search_path in the confirmation, asked after its check
• ef66457 fix(http): send a WWW-Authenticate Bearer challenge with every 401
• aa00240 fix(tools): refuse an older client that cannot be asked during the call, whatever its _meta claims
• 4410fd4 fix(engine): replace bytes that are not UTF-8 in values and errors, so 10 KB holds at the client
• 5db1185 fix(tools): cut the name an unknown tool or prompt error echoes to 10 KB
• ac0caea fix(registry): run the image as the user, who can read a private config
• 2fb83c3 fix(tools): introduce the server by title, description and website
• 19a808b fix(tools): cut the URI a resource-not-found error echoes to 10 KB
• 78ad973 fix(http): cancel the calls still running when shutdown's 10s run out
• 33f0e7d fix(http): require the token for OPTIONS * too, which net/http answered itself
• 5182f9e fix(engine): hide a DSN that does not parse: it may hold a password
• 2e81672 ci: fail on known vulnerabilities the code reaches, with govulncheck
• 1655c57 fix(deps): require Go 1.26.9 and patch x/text, x/crypto, go-archive
• 34d2366 test: cover doctor's failed role check, a failed spill cleanup and the fallback spill directory's errors
• a7707fa test(tools): fail every tool on an unknown connection before any query, and cover the AWS status and error texts
• f697bf4 test(spill): a Store without Now stamps and cleans up by the current time
• 5908ad2 test(introspect): fail Profile when its sample fails or counts other columns
• a8cc46e test(health): check the fixture through Check, and fail on results Postgres did not raise
• d861347 test(guard): reject a statement nested anywhere in a query, and show parse errors without a position
• 29d743a test(explain): fail Run on a plan or relation sizes it cannot read, and a nested loop without an outer side
• aff4fd6 test(resolver): fetch secrets from a local Secrets Manager stand-in, and never cache a failed fetch
• 456cf5b test(engine): cover Querier, QueryError.Error, an unresolvable DSN and an unencodable param
• c64b9e6 test(testdb): cover Querier, Block, AppSQL and the harness's failure paths
• 6db7833 refactor: remove inline comments
• 7f90650 ci: keep the checkout's credentials out of every CI job
• ac528db docs: name the golangci-lint version CI runs
• 4ad562b test: set the deprecated readonly key through config.Parse, which CI's linter accepts
• 8282322 docs: bring README and CONTRIBUTING in line with the merged lanes
• 0d85512 test(tools): share auditedCall between the fan-out and confirmation tests
• a02ce55 test: share testdb.ServerVersion instead of repeating the version query
• 0b78d4f fix(cli): cancel the query when an HTTP client drops its request
• c7307a9 chore: merge pgglass/pg18
• d317a47 chore: merge pgglass/dist
• b2a99da chore: merge pgglass/bench
• 9e9670d chore: merge pgglass/confirm
• 352166e chore: merge pgglass/resources
• 5b62979 chore: merge pgglass/cli
• 4a6bcb7 chore: merge pgglass/fixes
• cc5f8d3 ci: test on PostgreSQL 18 and list the supported versions
• c2ea4ec feat(explain): flag PostgreSQL 18 storage spills and keep per-loop rows to two decimals
• f12a572 fix(introspect): name virtual generated columns among the reasons pg_profile samples
• d85b12a fix(introspect): show a column under a NOT VALID not-null constraint as nullable
• e62eb5a feat(preflight): warn of pg_signal_autovacuum_worker and pg_get_logical_snapshot_*
• cd9f2da feat(guard): deny pg_buffercache_evict* and pg_logicalinspect's snapshot readers
• e6409be docs: warn that HTTP on loopback without a token is open to every local user
• 4db0acb docs: list the command line, doctor and HTTP in the README's docs table
• 4c85930 fix(cli): bound doctor's credential lookup by its connect timeout
• ea942e9 feat(cli): serve Streamable HTTP with --http, bearer token beyond loopback
• 9eb1d1c feat(cli): add doctor to check the config and each connection's role
• 655e4e1 feat(cli)!: read the config from --config, by default ~/.config/pgglass/config.json, and add --version
• 50e7c0e...