v2.3.0

GitProxy v2.3.0 brings PostgreSQL support, an improved plugin system and plenty of bugfixes including the Unreferenced commits in pack error seen in 2.2.

Postgres support

Adds PostgreSQL to the supported databases, configurable via proxy.config.json. Includes support for AWS RDS/Aurora IAM auth and relevant migration files.

Plugin improvements

Plugins can now be added to different phases within each chain. This is very useful for plugins that require data from other processors, such as customizable push scanners. For more details, check the plugin documentation.

What's Changed

🚀 Features

• feat: support env var overrides for LDAP password and OIDC client secret @goldensyntax (#1831)
• feat: revamp plugin system @jescalada (#1683)
• feat: PostgreSQL sink backend @dcoric (#1687)
• feat: AWS RDS/Aurora IAM authentication for the PostgreSQL sink @dcoric (#1591)
• feat: data migration from mongo/fs to the PostgreSQL sink @dcoric (#1582)
• feat: add sink-parity agent skill @dcoric (#1689)
• feat: normalise PostgreSQL repo permissions into a repo_users join table @dcoric (#1590)
• feat: configurable PostgreSQL connection (discrete fields, TLS, pool) @dcoric (#1584)
• feat: versioned schema migration runner for the PostgreSQL sink @dcoric (#1581)
• feat: add PostgreSQL as a supported sink backend @dcoric (#1532)

🐛 Bug Fixes

• fix(config): honor MongoDB connection string environment override @dcoric (#1796)
• fix(proxy): #1588 accept smart-HTTP paths without .git suffix @re-vlad (#1642)
• fix(config): recover cached git sources after history changes @dcoric (#1587)
• fix: license inventory dependencies, update dependabot rules @jescalada (#1814)
• fix: flaky postgres and proxy route tests @jescalada (#1815)
• fix(ci): always build the site on main, filter only previews - #1802 @fabiovincenzi (#1803)
• fix: upgrade simple-git to v4 @jescalada (#1800)
• fix: avoid duplicate repo permission grants in the mongo sink @kwy404 (#1747)
• fix: pass gitleaks --log-opts without a shell so Windows keeps the caret @ppcvote (#1676)
• fix: exempt push parent from checkHiddenCommits hidden-commit detection @goldensyntax (#1773)
• fix(ci): guard netlify ignore command against empty CACHED_COMMIT_REF @fabiovincenzi (#1775)
• fix: handle idle pool client errors in the PostgreSQL sink @dcoric (#1583)

🧰 Maintenance

• chore: bump git-proxy to 2.3.0 @github-actions[bot] (#1832)
• refactor: store diff in action object (#1693) @amnkarn (#1701)
• chore(deps): bump zod from 3.24.2 to 4.6.5 in /experimental/license-inventory @dependabot[bot] (#1824)
• chore(deps): bump the npm-non-major group across 1 directory with 8 updates @dependabot[bot] (#1826)
• chore: add osv-scanner.toml to website @jescalada (#1830)
• chore(deps): bump @inquirer/prompts from 7.10.1 to 8.7.3 in /experimental/li-cli @dependabot[bot] (#1821)
• chore(deps): bump zod from 3.25.76 to 4.6.5 in /experimental/li-cli @dependabot[bot] (#1818)
• chore(deps-dev): bump the experimental-linting group across 1 directory with 3 updates @dependabot[bot] (#1816)
• chore(deps-dev): bump slick-carousel from 1.8.1 to 2.0.0 in /website @dependabot[bot] (#1780)
• chore(deps): bump react-router from 7.18.3 to 8.4.0 @dependabot[bot] (#1809)
• chore(deps-dev): bump the vite group across 1 directory with 2 updates @dependabot[bot] (#1806)
• chore(deps): bump yargs from 17.7.2 to 18.2.0 in /experimental/li-cli @dependabot[bot] (#1820)
• chore(deps): bump the experimental-non-major group across 2 directories with 5 updates @dependabot[bot] (#1817)
• chore(deps-dev): bump quicktype from 23.3.25 to 26.0.0 @dependabot[bot] (#1754)
• chore: fix vulnerable deps in website package @jescalada (#1812)
• chore: add roadmap template @jescalada (#1751)
• chore(deps-dev): bump @commitlint/config-conventional from 19.8.1 to 21.2.3 @dependabot[bot] (#1788)
• chore(deps): bump the npm-non-major group across 1 directory with 7 updates @dependabot[bot] (#1799)
• test: remove unused performance tests @jescalada (#1792)
• ci: separate CVE vs evergreen Dependabot PRs @jescalada (#1749)
• docs: fix broken anchor links to "Push via GitProxy" @fabiovincenzi (#1778)
• ci: run main CI checks on release branches too @jescalada (#1740)
• chore: resolve grype CVE reports via npm audit fix @kriswest (#1777)
• docs: Enhance SECURITY.md with CRA escalation procedures @TheJuanAndOnly99 (#1772)
• chore(deps): bump the npm-non-major group across 2 directories with 12 updates @dependabot[bot] (#1766)
• perf: index the PostgreSQL pushes hot paths and slim list projections @dcoric (#1692)

---

Full Changelog: v2.2.0...v2.3.0