v1.2.0-beta1

What's Changed

• fix(ci): name release archives after the triggering tag by @dpage in #284
• Removes bullseye from supported platform list by @maqeel75 in #290
• docs: separate Jinja2 raw markers from their code fences by @dpage in #285
• feat(cli): add /paste for multi-line input by @dpage in #286
• Add OAuth 2.0 authorisation server for Claude Desktop, mobile, CLI and web clients (#287) by @dpage in #288
• Install the repo client certificate before configuring the pgEdge repos by @maqeel75 in #298
• fix: bump Go to 1.26.10 for the eMudhra CA distrust (CVE-2026-111943) by @dpage in #299
• fix(oauth): compare redirect URI paths in encoded form, reject any '#' by @dpage in #296
• Close connection pools outside the client manager lock (#292) by @dpage in #293
• fix: bump golang.org/x/net, urllib3 and the mcp example floor for open advisories by @dpage in #301
• chore(deps): bump pgedge-go-llm-lib to v1.0.0 by @dpage in #302
• Move container images to smaller runtime bases by @dpage in #300
• docs: bring the MCP spec compliance notes into line with the code by @dpage in #303
• fix(openapi): describe all four legacy MCP revisions and the header rule by @dpage in #305
• docs: reference the split security advisories and their CVEs in the changelog by @dpage in #309
• fix(helm): make the example chart deploy a working server and web client by @dpage in #308
• Persist OAuth state and password sessions in auth.db by @dpage in #306
• docs: match the Helm auth.db passages to the merged chart by @dpage in #310

Full Changelog: v1.1.0...v1.2.0-beta1

v1.1.0

What's Changed

• Update architecture.md by @rpaik in #118
• Add TTL-based metadata cache refresh by @dpage in #120
• Fix Codacy security and code quality findings by @dpage in #116
• Fix database switching not persisting in HTTP mode by @dpage in #121
• Update KB sources: add new sources and promote projects to v1.0.0 by @imtiazqa in #124
• Update knowledge-builder sources configuration and add new tools by @maqeel75 in #128
• Workflow to generate only kb database release by @maqeel75 in #129
• Add Ollama API key to kb release workflow by @maqeel75 in #130
• Run ollama container locally because cloud service does not support m… by @maqeel75 in #131
• Add check-sources workflow from single source of truth docs yaml, dri… by @maqeel75 in #132
• Fixes repo file access issue via curl by @maqeel75 in #133
• Update check-sources workflow with improved PR management and git authentication by @maqeel75 in #136
• Changes runner to self hosted kb-generator runner by @maqeel75 in #140
• Fix self-hosted runner: disable osxkeychain and clean stale build art… by @maqeel75 in #141
• fix(check-sources): preserve PR approvals on re-run with idempotent push by @maqeel75 in #146
• fix(check-sources): insert new entries inside sources block, not at end of file by @maqeel75 in #150
• sync: fix kb-builder drift against SSOT by @maqeel75 in #151
• fix(http): return 202 Accepted with empty body for JSON-RPC notifications by @richyen in #143
• fix(database): tolerate NULL columns in metadata LEFT JOIN by @richyen in #144
• sync: fix kb-builder drift against SSOT by @maqeel75 in #155
• sync: fix kb-builder drift against SSOT by @maqeel75 in #156
• sync: fix kb-builder drift against SSOT by @maqeel75 in #159
• Fix tag/branch selection in drift-fix script and nginx permissions in Dockerfile.web by @maqeel75 in #162
• sync: fix kb-builder drift against SSOT by @maqeel75 in #166
• feat: smart Postgres detection and context-aware installer menu by @AntTheLimey in #127
• fix(mcp): implement ping handler to satisfy client health checks by @davevg in #167
• Extract KB Builder into standalone pgedge-ai-kb project by @dpage in #158
• Update TODO.md by @dpage in #177
• Add in-repo RPM/DEB packaging and full release pipeline by @maqeel75 in #180
• package cells: native arm64 runners to avoid QEMU ldconfig segfault by @maqeel75 in #181
• fix(stdio): treat "id": null as a request, not a notification by @dpage in #169
• fix: machine-safe built-in resource name + env vars for builtins (#139) by @dpage in #168
• docs: fix typo in help guide by @meichuanyi in #179
• feat(devcontainer): refresh dev image and auto-update Claude Code by @dpage in #154
• fix(installer): resolve latest stable v* release, not GitHub "latest" by @AntTheLimey in #182
• refactor(database): split LoadMetadataFor into orchestration + helpers by @dpage in #170
• feat: replace hand-rolled LLM clients with pgedge-go-llm-lib (PR 1 of 4) by @dpage in #172
• feat: adopt pgedge-go-llm-lib HTTP proxy and update web client wire format (PR 3 of 4) by @dpage in #174
• feat: streaming chat, Gemini support, and embedding wrapper cleanup (PR 4 of 4) by @dpage in #175
• feat: remove chat.LLMClient wrapper and use pgedge-go-llm-lib directly (PR 5 of 5) by @dpage in #176
• feat: adopt pgedge-go-llm-lib v0.1.0 follow-ups (PR 6 of 6) by @dpage in #178
• Adds ubuntu resolute in platforms list by @maqeel75 in #185
• ci: use latest=auto so only GA release tags get the Docker tag by @maqeel75 in #190
• fix: install SBOMs under /usr/share// instead of flat /usr/share by @maqeel75 in #191
• fix: detect secret rotation via atomically-swapped symlinks (#186) by @moizpgedge in #192
• fix: show configured display name instead of raw connection details (… by @moizpgedge in #193
• Support client certificate authentication for database connections by @moizpgedge in #194
• Return consistent JSON error responses on every HTTP path by @moizpgedge in #195
• Relocate Save/Delete conversation actions to status banner menu by @dpage in #183
• Aggregate multiple foreign-key references per column in metadata loader by @dpage in #184
• Harden the read-only guardrails against transaction-mode bypass by @dpage in #196
• Upgrade pgx and other dependencies with reachable CVEs, add make vulncheck by @dpage in #197
• Treat retrieved content as untrusted and confirm custom tool writes by @dpage in #198
• Redact provider credentials from error output by @dpage in #199
• Resolve client addresses from the connection, not caller headers by @dpage in #205
• docs: pre-RC catch-up for undocumented and stale behaviour by @dpage in #206
• fix(security): reject subqueries in count_rows where clause by @moizpgedge in #201
• fix(security): reject count_rows subquery injection and raise go.mod floor by @moizpgedge in #207
• fix(security): refresh postgres-mcp Trivy ignore list by @moizpgedge in #208
• fix(security): trim unused packages from nla-web, refresh ignore list by @moizpgedge in #209
• fix(security): refresh nla-cli Trivy ignore list by @moizpgedge in #210
• fix: return tools/prompts/resources in a deterministic sorted order by @moizpgedge in #213
• fix: negotiate protocolVersion instead of echoing the client's request by @moizpgedge in #214
• fix: infer tool_use stop reason from streamed content blocks by @dpage in #221
• fix: reload expired metadata instead of reporting DATABASE_NOT_READY by @dpage in #222
• fix(web): label the header conversation action as Clear, not Delete by @dpage in #224
• chore: update dependencies across Actions, Go, npm, and the docs stack by @dpage in #225
• fix(llm): stop sending a sampling temperature by @dpage in #226
• feat: add dual-era support for the MCP 2026-07-28 spec revision by @moizpgedge in #215
• fix: list configured databases in a deterministic sorted order by @dpage in #227
• test: make the shared-failed-reload test deterministic by @dpage in #228
• fix(web): derive the client version from package.json by @dpage in #229
• fix(security): validate the Origin header to prevent DNS rebinding by @dpage in #232
• fix(security): confirm writes whose first keyword reads by @dpage in #233
• chore: run the web client suite from make test by @dpage in #234
• feat(embeddings): add Gemini as a supported embed...

v1.1.0-rc1

Full Changelog: v1.1.0-beta3...v1.1.0-rc1

v1.1.0-beta3

What's Changed

• docs: add SECURITY.md by @AntTheLimey in #274
• fix: disable knowledgebase by default in packaged config by @dpage in #278
• fix: enforce query_database's row limit cap unconditionally by @dpage in #279
• fix: classify leading-comment and parenthesised SELECTs correctly by @dpage in #280
• fix: recognise FETCH FIRST/NEXT ... ROWS ONLY as an existing limit by @dpage in #281
• fix: negotiate legacy MCP protocol revisions up to 2025-11-25 by @dpage in #282

Full Changelog: v1.1.0-beta1...v1.1.0-beta3

v1.1.0-beta1

What's Changed

• Fix self-hosted runner: disable osxkeychain and clean stale build art… by @maqeel75 in #141
• fix(check-sources): preserve PR approvals on re-run with idempotent push by @maqeel75 in #146
• fix(check-sources): insert new entries inside sources block, not at end of file by @maqeel75 in #150
• sync: fix kb-builder drift against SSOT by @maqeel75 in #151
• fix(http): return 202 Accepted with empty body for JSON-RPC notifications by @richyen in #143
• fix(database): tolerate NULL columns in metadata LEFT JOIN by @richyen in #144
• sync: fix kb-builder drift against SSOT by @maqeel75 in #155
• sync: fix kb-builder drift against SSOT by @maqeel75 in #156
• sync: fix kb-builder drift against SSOT by @maqeel75 in #159
• Fix tag/branch selection in drift-fix script and nginx permissions in Dockerfile.web by @maqeel75 in #162
• sync: fix kb-builder drift against SSOT by @maqeel75 in #166
• feat: smart Postgres detection and context-aware installer menu by @AntTheLimey in #127
• fix(mcp): implement ping handler to satisfy client health checks by @davevg in #167
• Extract KB Builder into standalone pgedge-ai-kb project by @dpage in #158
• Update TODO.md by @dpage in #177
• Add in-repo RPM/DEB packaging and full release pipeline by @maqeel75 in #180
• package cells: native arm64 runners to avoid QEMU ldconfig segfault by @maqeel75 in #181
• fix(stdio): treat "id": null as a request, not a notification by @dpage in #169
• fix: machine-safe built-in resource name + env vars for builtins (#139) by @dpage in #168
• docs: fix typo in help guide by @meichuanyi in #179
• feat(devcontainer): refresh dev image and auto-update Claude Code by @dpage in #154
• fix(installer): resolve latest stable v* release, not GitHub "latest" by @AntTheLimey in #182
• refactor(database): split LoadMetadataFor into orchestration + helpers by @dpage in #170
• feat: replace hand-rolled LLM clients with pgedge-go-llm-lib (PR 1 of 4) by @dpage in #172
• feat: adopt pgedge-go-llm-lib HTTP proxy and update web client wire format (PR 3 of 4) by @dpage in #174
• feat: streaming chat, Gemini support, and embedding wrapper cleanup (PR 4 of 4) by @dpage in #175
• feat: remove chat.LLMClient wrapper and use pgedge-go-llm-lib directly (PR 5 of 5) by @dpage in #176
• feat: adopt pgedge-go-llm-lib v0.1.0 follow-ups (PR 6 of 6) by @dpage in #178
• Adds ubuntu resolute in platforms list by @maqeel75 in #185
• ci: use latest=auto so only GA release tags get the Docker tag by @maqeel75 in #190
• fix: install SBOMs under /usr/share// instead of flat /usr/share by @maqeel75 in #191
• fix: detect secret rotation via atomically-swapped symlinks (#186) by @moizpgedge in #192
• fix: show configured display name instead of raw connection details (… by @moizpgedge in #193
• Support client certificate authentication for database connections by @moizpgedge in #194
• Return consistent JSON error responses on every HTTP path by @moizpgedge in #195
• Relocate Save/Delete conversation actions to status banner menu by @dpage in #183
• Aggregate multiple foreign-key references per column in metadata loader by @dpage in #184
• Harden the read-only guardrails against transaction-mode bypass by @dpage in #196
• Upgrade pgx and other dependencies with reachable CVEs, add make vulncheck by @dpage in #197
• Treat retrieved content as untrusted and confirm custom tool writes by @dpage in #198
• Redact provider credentials from error output by @dpage in #199
• Resolve client addresses from the connection, not caller headers by @dpage in #205
• docs: pre-RC catch-up for undocumented and stale behaviour by @dpage in #206
• fix(security): reject subqueries in count_rows where clause by @moizpgedge in #201
• fix(security): reject count_rows subquery injection and raise go.mod floor by @moizpgedge in #207
• fix(security): refresh postgres-mcp Trivy ignore list by @moizpgedge in #208
• fix(security): trim unused packages from nla-web, refresh ignore list by @moizpgedge in #209
• fix(security): refresh nla-cli Trivy ignore list by @moizpgedge in #210
• fix: return tools/prompts/resources in a deterministic sorted order by @moizpgedge in #213
• fix: negotiate protocolVersion instead of echoing the client's request by @moizpgedge in #214
• fix: infer tool_use stop reason from streamed content blocks by @dpage in #221
• fix: reload expired metadata instead of reporting DATABASE_NOT_READY by @dpage in #222
• fix(web): label the header conversation action as Clear, not Delete by @dpage in #224
• chore: update dependencies across Actions, Go, npm, and the docs stack by @dpage in #225
• fix(llm): stop sending a sampling temperature by @dpage in #226
• feat: add dual-era support for the MCP 2026-07-28 spec revision by @moizpgedge in #215
• fix: list configured databases in a deterministic sorted order by @dpage in #227
• test: make the shared-failed-reload test deterministic by @dpage in #228
• fix(web): derive the client version from package.json by @dpage in #229
• fix(security): validate the Origin header to prevent DNS rebinding by @dpage in #232
• fix(security): confirm writes whose first keyword reads by @dpage in #233
• chore: run the web client suite from make test by @dpage in #234
• feat(embeddings): add Gemini as a supported embedding provider by @dpage in #239
• fix(web): stop repeating a tool call that keeps failing by @dpage in #240
• feat(cli): add Gemini as an LLM provider by @dpage in #241
• docs: show the SSL certificate settings in the example configs by @dpage in #242
• fix(web): carry Gemini's tool-call arguments and signature through sseChat by @moizpgedge in #247
• fix(web): block sending while the new provider's model list loads by @moizpgedge in #248
• chore: even up the provider credential options by @moizpgedge in #249
• fix(config): resolve configuration the way the documentation describes by @dpage in #252
• fix(web): explain that a chosen model cannot be used for chat by @dpage in #254
• style: repair the copyright headers and test that they stay repaired by @dpage in #253
• fix(chat): stop the model fallback choosing a non-chat model by @dpage in #257
• fix(embed): default the OpenAI embedding model to text-embedding-3-small by @dpage in #263
• fix: connect immediately when switching database connections by @dpage ...

v1.0.0

What's Changed

• fix: Docker image defaults to stdio mode for MCP Registry support by @AntTheLimey in #108
• fix: make quickstart demo self-contained by @AntTheLimey in #111
• Strip semicolons from queries before appending LIMIT/OFFSET. #110 by @dpage in #112
• Docs/quickstart updates by @imtiazqa in #113

Full Changelog: v1.0.0-beta3-test1...v1.0.0

What's Changed

• fix: Docker image defaults to stdio mode for MCP Registry support by @AntTheLimey in #108
• fix: make quickstart demo self-contained by @AntTheLimey in #111
• Strip semicolons from queries before appending LIMIT/OFFSET. #110 by @dpage in #112
• Docs/quickstart updates by @imtiazqa in #113
• Updates pgedge-nla-kb-builder.yaml for ace versions. by @maqeel75 in #115

Full Changelog: v1.0.0-beta3-test1...v1.0.0

v1.0.0-beta3

What's Changed

• Rename mcp-server to postgres-mcp in docker by @maqeel75 in #12
• Starting initial work on online docs for MCP server by @susan-pgedge in #10
• Added TOC to README by @susan-pgedge in #13
• Adding Quickstart for publishing quick by @susan-pgedge in #15
• Touched up formatting by @susan-pgedge in #17
• Test: Claude PR review workflow by @dpage in #16
• Add example config files and update documentation by @dpage in #19
• quickstart demo by @rshoemaker in #20
• quickstart doc typo by @rshoemaker in #21
• Formatted the resources folder contents by @susan-pgedge in #22
• Updating version tags and project versions across multiple git sources in a YAML configuration file by @maqeel75 in #24
• Fix links to the quickstart demo and make it clearer that the links point to a demo. by @rshoemaker in #28
• Online doc updates by @susan-pgedge in #25
• Updates GitHub ARM runner name + KB builder docs URLs by @maqeel75 in #33
• Fixing bad link in mkdocs.yml and add link for BR-378 by @susan-pgedge in #34
• feat: Add configurable base URLs for LLM and embedding providers by @dpage in #32
• Adds labels in Dockerfiles by @maqeel75 in #36
• Fixes typo in github docker image URL by @maqeel75 in #37
• fix: Pin README badges to main branch by @dpage in #40
• Add custom tools feature with SQL, pl-do, and pl-func types by @dpage in #38
• feat: Add LLM database connection switching tools by @dpage in #39
• Add type field to prompt arguments for improved UI rendering by @dpage in #46
• Display user-friendly error messages when MCP server is unavailable by @dpage in #47
• Standardize default configuration file paths by @dpage in #49
• Display user-friendly login error messages by @dpage in #48

New Contributors

• @susan-pgedge made their first contribution in #10
• @dpage made their first contribution in #16
• @rshoemaker made their first contribution in #20

Full Changelog: v1.0.0-beta1...v1.0.0-beta3

v1.0.0-beta2

What's Changed

• Rename mcp-server to postgres-mcp in docker by @maqeel75 in #12
• Starting initial work on online docs for MCP server by @susan-pgedge in #10
• Added TOC to README by @susan-pgedge in #13
• Adding Quickstart for publishing quick by @susan-pgedge in #15
• Touched up formatting by @susan-pgedge in #17
• Test: Claude PR review workflow by @dpage in #16
• Add example config files and update documentation by @dpage in #19
• quickstart demo by @rshoemaker in #20
• quickstart doc typo by @rshoemaker in #21
• Formatted the resources folder contents by @susan-pgedge in #22
• Updating version tags and project versions across multiple git sources in a YAML configuration file by @maqeel75 in #24
• Fix links to the quickstart demo and make it clearer that the links point to a demo. by @rshoemaker in #28
• Online doc updates by @susan-pgedge in #25

New Contributors

• @susan-pgedge made their first contribution in #10
• @dpage made their first contribution in #16
• @rshoemaker made their first contribution in #20

Full Changelog: v1.0.0-beta1...v1.0.0-beta2

v1.0.0-beta1

Full Changelog: v1.0.0-alpha6...v1.0.0-beta1

v1.0.0-alpha6

Full Changelog: v1.0.0-alpha5-embed...v1.0.0-alpha6