Skip to content

Migrate postgres pgx store to pgx v5#4736

Merged
asim merged 1 commit into
masterfrom
codex/increment-4735
Jul 11, 2026
Merged

Migrate postgres pgx store to pgx v5#4736
asim merged 1 commit into
masterfrom
codex/increment-4735

Conversation

@asim

@asim asim commented Jul 11, 2026

Copy link
Copy Markdown
Member

Summary

  • migrate store/postgres/pgx imports and pool construction from pgx/v4 to pgx/v5
  • update module requirements to remove direct pgx/v4 and pgproto3/v2 dependency drift
  • verify govulncheck reports zero reachable vulnerabilities

Closes #4556
Closes #4735

Testing

  • go build ./...
  • go test ./... (fails in this sandbox: ai atlascloud 400 and loopback targets forbidden in grpc tests)
  • golangci-lint run ./... (fails: installed golangci-lint built with Go 1.24, module targets Go 1.25.12)
  • govulncheck ./... (via installed govulncheck binary)

@asim asim added the codex label Jul 11, 2026
Copilot AI review requested due to automatic review settings July 11, 2026 20:03
@asim asim merged commit 585f181 into master Jul 11, 2026
12 checks passed
@asim asim deleted the codex/increment-4735 branch July 11, 2026 20:03

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR migrates the Postgres store/postgres/pgx implementation from github.com/jackc/pgx/v4 to github.com/jackc/pgx/v5, aligning dependencies with the v5 line to address the reachable-vulnerability findings described in #4556.

Changes:

  • Updated store/postgres/pgx imports from pgx/v4 to pgx/v5.
  • Switched pool construction to the v5 API (pgxpool.NewWithConfig).
  • Updated module requirements to depend on pgx/v5 and refreshed related sums.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 1 comment.

File Description
store/postgres/pgx/pgx.go Migrates pgx imports to v5 and updates pgxpool construction API.
store/postgres/pgx/db.go Updates pgxpool import to v5.
go.mod Replaces pgx/v4 requirement with pgx/v5 and updates indirect deps accordingly.
go.sum Reflects dependency graph changes from pgx v4 → v5 migration.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread store/postgres/pgx/pgx.go
Comment on lines +134 to 137
db, err := pgxpool.NewWithConfig(s.options.Context, config)
if err != nil {
return err
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Loop: build increment #207 security: migrate store/postgres from pgx/v4 to pgx/v5 (2 unfixable CVEs)

3 participants