pig-v1.8.1

Changelog

• cc770b5 build: bump default pgrx to 0.19.2
• 1c6f524 build: enable debug packages by default
• f0cb2bb chore(deps): upgrade Go and build tooling
• c9e050b chore(deps): upgrade to Go 1.27.0
• e3d1eb4 chore(release): prepare v1.8.1
• 49a8599 chore(release): track immutable upload helper
• f58cbd2 data(ext): refresh extension catalog
• 2dbf9ee docs(repo): make website the canonical documentation source
• 220ef9c fix(build): make proxy setup service-safe
• de7ffd0 fix(build): mark proxy operands optional
• 74cb128 fix(build): redact proxy credentials in structured output
• 37741a5 fix(build): reject incomplete artifacts and unsafe inputs
• 3a87d3d fix(cli): keep config-free commands diagnosable
• 6bf93b9 fix(cli): validate automation inputs and refresh postgres detection
• 1db4d03 fix(cmd): isolate legacy output and strengthen CI gates
• d99a6e8 fix(cmd): preserve leaf initialization policy
• 4942a7a fix(config): fail fast and avoid query-side persistence
• 3e1603b fix(do): align Pigsty name validation
• a880485 fix(do): reject reserved Ansible cluster targets
• 6aaf302 fix(log): read database logs as dbsu and reject links
• f0ff11e fix(pg): bind role detection to the selected instance
• 5e21302 fix(release): harden self-update and release guards
• 0eab530 fix(repo): correct offline cache examples
• 70bca04 fix(repo): deduplicate modules and simplify replacement flow
• 7007f41 fix(repo): fail partial add and remove operations
• 8fa3abb fix(repo): make offline bundles fail closed
• d1e804c fix(security): redact license and structured output secrets
• d9fd27d fix(utils): preserve DBSU argv through sudo
• f3e96a1 refactor(archive): use rooted native extraction for build specs
• 420f45e refactor(cli): simplify sty and extension workflows
• d745c6f refactor(inventory): remove legacy options and isolate validation stages
• be0eacb refactor(pg): move fork rendering and remove unreachable helpers
• e3580ce refactor(repo): remove obsolete cache wrapper
• 41d6003 test(cli): tighten review guards