v0.45.1
Patch release: cloud-IAM database authentication for the migrations Job.
Bug Fixes
- Migrations Job now supports cloud-IAM DB auth — v0.45.0 wired IAM+TLS into the API but not
alembic/env.py, so the pre-upgrade migrations hook still used a static password and no TLS. On an IAM-only / TLS-required database that hook fails and blocks the rollout. The migrations Job now mints a per-connection IAM token and connects with TLS exactly like the API (gated ondatabase.auth_mode; default static-password is unchanged), runs under the API's workload-identity service account, and mounts the database CA bundle forverify-full.
Status
Beta. Upgraders using database.auth_mode != password should take this release before relying on schema migrations under cloud-IAM auth.
Full Changelog: v0.45.0...v0.45.1