v0.37.14

This release includes various security fixes from dependency upgrades.

What’s Changed

• Update pgx to v5.11.0 and preserve timestamp decoding (#4975) @ilidemi
• Update decimal to v1.5.0 and preserve large numeric values (#4976) @ilidemi
• Mongodb sampling-based objectid range fix (#4970) @jgao54, @claude, @tanya-whyte-clickhouse
• fix(deps): update gomod dependencies (#4891) @renovate[bot], @ilidemi
• Fix ClickHouse JSON test readback with flattened serialization (#4978) @ilidemi
• refactor(clickhouse): reuse table mapping and column setting lookups (#4971) @dtunikov, @claude
• chore(deps): update github-actions dependencies (#4938) @renovate[bot], @ilidemi
• chore(deps): lock file maintenance (#4936) @renovate[bot]
• chore(deps): update dockerfile dependencies (#4939) @renovate[bot], @ilidemi
• security: pin UI Node image to fixed 24.22.1 (CVE-2026-111497 / Node2Shell) (#4973) @motsc
• fix(clickhouse): honor column destination_name in initial load (#4963) @dtunikov, @claude
• fix(query-cdc): only catch up when the poll window was capped (#4968) @dtunikov, @claude
• fix(pg-pg): exclude peerdb internal and policies from dump (#4921) @Amogh-Bharadwaj
• fix(postgres): keep the JSON form of a json/jsonb column default on ADD COLUMN (#4966) @gheorghepucea
• fix(clickhouse): honour per-column destination types in the snapshot JSON cast (#4965) @gheorghepucea
• fix(postgres): keep unchanged toast columns on delete rows (#4951) @ReguiguiMohamed
• safe command monitor debugging (#4961) @jgao54
• fix(clickhouse): write {} for SQL NULL into plain JSON column on CDC (#4955) @gheorghepucea
• CI versions table: Bump MongoDB 8.X version from 8.0 to 8.2 (#4956) @pfcoperez