v2.35.0

Features

• Added a per-policy allowlist for system tables, letting admins grant specific catalog tables (e.g. pg_stats, information_schema) an exception from data masking when a tool genuinely needs them.
• Added a "Verify server hostname" option for database SSL connections (Postgres sslmode=verify-full), requiring the server certificate's hostname to match the connection host.

Improvements

• Database SSL connections now validate the server's certificate chain against a configured CA certificate instead of only encrypting the connection.

Bug Fixes

• A single slow query no longer blocks other queries running against the same database credential.
• Data protection now fails closed: queries the masking engine can't fully model (such as PREPARE, COPY, DO, CALL, and cursor statements) are rejected rather than passed through unmasked.
• The QueryDesk Postgres proxy now rejects function-call and COPY messages that could return data outside a maskable query, and closes connections on oversized or unexpected messages.
• Hardened Postgres proxy authentication: unknown users and bad passwords now return the same error to prevent user enumeration, clients requiring channel binding are properly refused, and the authentication nonce is verified.
• Fixed AI chat error handling so failed or crashed query recommendations show a clear error, and results from an old conversation no longer leak into a newly started one.