Skip to content

Pigsty v4.6.0

Latest
Latest

Choose a tag to compare

View all tags
@Vonng Vonng released this 13 Nov 04:03
v4.6.0
d71d9de

v4.6.0

English · Package updates · Offline packages and validation

English {#v460-en}

Pigsty v4.6.0, released on 2026-11-13, updates the default PostgreSQL baseline to 18.7, expands the packaged extension catalog to 625 entries, and ships verified offline archives for seven distributions on both x86_64 and ARM64. The tagged source comparison contains 139 commits and 441 changed files since v4.5.0; the attached source archive also contains the offline dependency fixes described below.

PostgreSQL and extensions

  • PostgreSQL 18.7 and kernel variants: the release updates the default PostgreSQL minor baseline to 18.7, together with IvorySQL 5.6, Babelfish 6.2.0 / 5.7.0, Percona PostgreSQL TDE 18.6.1, OrioleDB 1.10.3, AgensGraph 2.18.6.1, pgEdge revision 3PGSTY with Spock 5.0.13, PolarDB 17.11.1.0, Cloudberry 2.2.0, and DocumentDB 1.0.
  • 625 packaged extensions: the catalog gains 52 entries, removes 2, and reaches 625 packaged extensions with 457 non-contrib package families. Many Rust extensions move to pgrx 0.19.3. The catalog count does not mean that every extension is installed by a template or included in every platform archive.
  • Key extension updates: TimescaleDB 2.31.0, PostGIS 3.7.0, pgvector 0.8.7, Citus 14.3.0, pg_search 0.26.6, pg_lake 3.6.0, pg_fts 1.16.0, pg_duckdb 1.2.0, duckdb_fdw 2.0.2, pg_mooncake 0.3.0, VectorChord 1.3.0, vchord_bm25 1.1.0, pg_tokenizer 1.1.0, and PGroonga 4.1.0 are included in the package update.
  • PGSQL orchestration: the new pg_pitr parameter renders declarative recovery settings into /pg/bin/pg-pitr; PostgreSQL TLS certificates include the configured VIP in their SANs; the crit profile starts a single primary with synchronous_commit: local and enables synchronous quorum settings after bootstrap; HAProxy health checks normalize pg_rto to a valid duration.
  • Kernel templates: PostgreSQL kernel templates use ./configure -c fork/<name>. Version overrides exclude fixed-major fork/mssql and fork/polar templates, and kernel-specific pgBackRest compatibility handling is complete.
  • Offline dependency closure: APT and DNF resolve the complete explicit target set in one transaction against an empty installed state. APT recommendations and suggestions, together with DNF weak dependencies, are disabled. hdfs_fdw and OneSparse are hidden from default package groups, removing their Java and GraphBLAS/LAGraph dependency chains from the default archives. The verified archives also avoid unintended PG14 and duplicate PostGIS branches while retaining dependencies that are required by selected targets.

Offline package validation

  • 14 complete archives: EL9/10, Debian 12/13 and Ubuntu 22/24/26 archives for x86_64 and ARM64 are each below 2 GiB, require no split-file reassembly, and contain an indexed local repository, repo_complete records and the same pigsty-v4.6.0.tgz source archive.
  • Fresh-VM deployment: all 14/14 platform archives passed an isolated bootstrap → configure -c rich → deploy run. The checks covered the PostgreSQL 18 primary, vector, postgis, timescaledb, pg_wait_sampling, 16 core services, HTTP health endpoints and a full pgBackRest backup to Silo. No unintended PG14, HDFS/Java, OneSparse/GraphBLAS/LAGraph or duplicate PostGIS branch was installed.
  • Archive integrity, package membership, architecture, embedded source and transferred SHA-256 digests were verified. APT/DNF dependency closure passed using only the local repository from an empty installed state. EL10 archives use an EPEL 10.2 snapshot matching Rocky 10.2.

Infrastructure, applications and release engineering

  • Docker and Nginx upstream repositories are separate docker and nginx modules, with Docker CE 29.9.2 and Nginx 1.31.8. INFRA adds production portal templates and cache-directory settings. Certbot refreshes certificate symlinks before validating and reloading Nginx. Rendered remote PostgreSQL exporter credentials use owner prometheus and mode 0600.
  • Docker application .env rendering escapes literal $ as $$ and retains mode 0600. New Silo and digest-pinned Discourse templates join updates to Supabase 0.8.2, Dify 1.17.1, InsForge 2.3.3, JumpServer 5.0.0, and Registry 3.1.2.
  • IaC scripts default to tofu, with IAC_CLI=terraform available as an override. Cloud and VM image baselines are refreshed. The offline archive defaults to /var/tmp/pkg.tgz, with /tmp/pkg.tgz as a fallback; failed extraction or a missing repo_complete marker aborts bootstrap and removes partial output. Docker builds use make source, Debian 13.7, and pig=1.11.0-*.

Modules and orchestration

  • VAULT (Beta): OpenBao 2.7.2 deploys on the vault group. One member provides a lab instance; three members form a production Raft cluster without ETCD or an external database. Static-seal material is kept under files/pki/vault/, defaults enable secret/ (KV v2), transit/ and approle, Pigsty CA certificates secure TLS 1.3, and VIP/HAProxy exposes https://vault.pigsty:8200. The daily vault-backup job uses flock and retains seven snapshots. The module adds 14 recording rules, six alerts and a Vault Overview dashboard.
  • MYSQL 8.4: the public interface is reduced to 13 deployment and three guarded removal parameters. Preflight rejects obsolete variables such as mysql_backup_repo; configure -g randomizes the root, monitor and cluster passwords. Data lives under /data/mysql, with three retained physical backups under /data/backups/mysql. Reconciliation supports complete-outage recovery, InnoDB Clone and cluster.rescan(), while the rules adapt to mysqld-exporter 0.21.0.
  • KAFKA: kafka_jmx_exporter_enabled defaults to true and controls the embedded JMX agent independently of the protocol exporter. Removal retires dynamic KRaft controller voters before stopping services, then cleans exporter units and targets. Kafka updates to 4.4.0.
  • JUICE and VIBE: JuiceFS checks both the systemd result and the actual mount with findmnt. VIBE installs native claude-code 2.1.322 and codex 0.167.2 packages from the INFRA repository, isolates JupyterLab in /data/jupyter/.venv with uv, and updates Node.js to 26.13.1 LTS.

Package updates {#v460-packages}

Release package baseline

The core versions below come from the actual PG18 release archives. Exact package revisions, architectures and hashes are recorded in PACKAGE-MANIFEST.json.

Component Release baseline
PostgreSQL 18.7
Patroni 4.1.5
PgBouncer 1.26.1
pgBackRest 2.60.0
PostGIS 3.7.0
pgvector 0.8.7
TimescaleDB 2.31.0
PIG / PG Exporter / SOW 1.11.0 / 1.6.1 / 0.7.1
Grafana 13.3.1
VictoriaMetrics / Logs / Traces 1.156.0 / 1.53.0 / 0.13.0
ETCD / HAProxy 3.7.3 / 3.4.7
Silo / Console 20261112 / 2.7.2
{.wide .expand}

PostgreSQL kernel, extension and companion package updates

This table consolidates the RPM/DEB changes since v4.5.0, checked against the PG18 release archives. Previous versions are the earliest recorded baselines in this cycle. Current versions are the final repository records or explicitly marked PG18 snapshots. Optional kernels, extensions and libraries are included in the changelog; they are not all installed by default or bundled on every platform. Other PostgreSQL majors follow their own repository branches.

Package Previous Current Notes
postgresql-18 18.6 18.7 Default production baseline: PostgreSQL 18.7; other supported majors follow their own maintenance branches.
acdat 0.1.1 0.1.1 PG14-18; First full production packaging of an existing extension; 80 main packages
address_standardizer - RPM: 3.7.0-1PGSTY / DEB: 3.7.0 EL8 gap fill; standalone; SQL 3.7; includes data_us; no PostGIS dependency
addressing_dictionary - 1.1 PG14-18; SQL-only
age 1.7.0 RPM: 1.8.0 / DEB: 1.8.0~rc0 PG18 snapshot: RPM 1.8.0 and PGDG DEB 1.8.0~rc0; older PG majors retain their release branches.
agensgraph-18 - 2.18.6.1 PG18.6 kernel and contrib
arrow 22.0.0 RPM: 25.0.1 / DEB: 24.0.0 / 25.0.1 Runtime, compute and development libraries; versions vary by distribution and ABI.
babelfish-17 5.4.0 5.7.0 PG17.11; includes all four companion extensions
babelfish-18 6.0.0 6.2.0 PG18.6; includes all four companion extensions
biscuit 3.0.0 3.1.0 PG16-18
cat_tools 0.3.0 0.4.0 SQL-only
citus 14.2.0 14.3.0 PG16-18; includes citus_columnar
cloudberry 2.1.0 2.2.0 Kernel and contrib
cloudberry-backup 2.1.0 2.2.0 Six backup/restore tools
cloudberry-pxf 2.1.0 2.2.0 For Cloudberry 2.2.0; includes pxf/pxf_fdw
codesystem - RPM only: 0.2.1 PG14-18; SQL version 0.2.0
colnames - 1.7.1 PG14-18; SQL 1.7.0
credcheck RPM only: 4.7 6.0 PGDG packages in the PG18 snapshot; Pigsty fills EL8 gaps.
ddlx 0.30 0.31 PG14-18; SQL-only
documentdb 0.114 RPM: 1.0-2PGSTY / DEB: 1.0 PG15-18; PostGIS 3.7
duckdb_fdw 1.4.3 2.0.2 PG15-18; DuckDB 2.0.0; conflicts with pg_duckdb
edtf_postgres - 1.3.2 PG18 release snapshot; extended date/time types.
emaj 5.0.0 5.0.1 PG14-18; fixes emaj_adm privilege escalation and parallel rollback
encsearch - RPM only: 0.1.1 PG17; encrypted search
graphblas 10.5.0 10.5.2 Runtime and development libraries, ABI 10; excluded from default groups and these offline archives.
groonga RPM: 15.1.8 / DEB: 15.1.7 / 15.1.9 / 16.0.0 RPM: 16.1.5 / DEB: 16.0.5 / 16.1.3 RPM 16.1.5; DEB runtime versions differ by distribution.
groonga-tokenizer-mecab RPM: 15.1.8 / DEB: 15.1.7 / 15.1.9 / 16.0.0 RPM: 16.1.5 / DEB: 16.0.5 / 16.1.3 MeCab tokenizer; versions follow the matching Groonga packages.
haproxy 3.4.4 3.4.7 RPM includes the haproxy-doc subpackage
hdr_histogram - 1.0.0 PG14-18; SQL version 1.0
hypopg 1.4.4 1.4.5 PGDG packages
is_jsonb_valid - 0.1.4 PG14-18
istore - 0.1.12 PG14-18
ivorysql-18 5.4 5.6 PG18.6 kernel
ivorysql-contrib 5.4 5.6 PG18 (IvorySQL); includes 38 extensions
jev - 0.2.1 PG14-17
jsonschema 0.1.9 0.1.11 PG14-18; pgrx 0.19.3
kafgres - 0.3.2 PG16
lagraph 1.2.2 1.2.2 Rebuilt against GraphBLAS 10.5.2; excluded from these offline archives.
lead - 1.0.6 PG17-18; extension tin; development snapshot
libx509pq - 1.3 PG14-18
log_fdw 1.4 1.5 PG14-18
login_hook 1.8 1.9 PG14-17 PGDG; PG18 Pigsty
lolor 1.2.2 1.2.3 Updated with pgEdge 15-18
macavity - 0.2.0 PG16-18; Fault injection; testing only
mobilitydb 1.3.0 RPM: 1.3.1-2PGSTY / DEB: 1.3.1 PG14-18; PostGIS 3.7
nominatim_fdw 2.1.0 2.3 PG14-18; PGDG is the principal RPM provider; same-version Pigsty supplements remain
oai_fdw - 1.16.0 PG14-18; OAI-PMH FDW; SQL 1.16
onesparse 1.0.0-1PGSTY 1.0.0-2PGSTY PG18; rebuilt with GraphBLAS/LAGraph; preload required; hidden from default groups.
opencc - 0.1.0 PG14–18; conversion between simplified and traditional Chinese.
orioledb-16 1.8-beta16 1.10.3 PG16.15 kernel; SQL 1.10
orioledb-17 1.8-beta16 1.10.3 PG17.11 kernel; SQL 1.10
orioledb-18 1.8-beta16 1.10.3 PG18.6 kernel; SQL 1.10
passwordcheck_cracklib 3.2.0 3.2.1 PG14-18
passwordpolicy 2.0.5 2.0.6 PGDG packages
pg_adhoc RPM only: 17.4 RPM only: 19.0 Includes pg_filedump
pg_agent_gate - 0.4.1 PG18; fixes agent-role escape; preload required
pg_anon 3.2.2 3.3.2 PG14-18; pgrx 0.19.3; security update; drop/recreate required
pg_background 2.0.3 2.0.4-2PGSTY PG14-18; remove downstream upgrade patch; built, import pending
pg_circuit - 0.1.0 PG16-18; preload
pg_clickhouse 0.10.0 0.11.1 PG14-18; SQL 0.11
pg_curl 2.4.5 2.5.0 PG14-18; SQL 2.5
pg_currency 0.0.4 0.0.6 PG14-18; extension currency
pg_duckdb 1.1.1 1.2.0 DuckDB 2.0.0; conflicts with duckdb_fdw
pg_durable 0.2.3 0.2.9 PG14-18; preload required; imported locally
pg_eviltransform 0.0.5 0.0.7 PG14-18
pg_fts 0.2.0 1.16.0 PG17-18; fixes top-k and delete performance
pg_grammar_guard - 0.4.9 PG14-18; Apache-2.0; built, import pending
pg_graphql 1.6.2 1.6.3 Fixes quoted primary keys in nodeId
pg_h3 4.2.3 4.5.0 PG14-18; Includes h3_postgis; adds 50 DEBs; follow upstream migration guidance
pg_hint_plan 1.8.0/1.7.1/1.6.2/1.5.3/1.4.4 1.8.1/1.7.2/1.6.3/1.5.4/1.4.5 PGDG PG18/17/16/15/14 release lines
pg_icu_parser - 1.0.0 PG14-18; EL8/9/10 x86_64/aarch64; PG18 compatibility fix; imported locally
pg_improv - 0.14.0 PG15-18; pgrx 0.19.3
pg_incremental 1.5.0 RPM: 1.5.0 / DEB: 1.6.1 DEB upgraded to 1.6.1; PG18 RPM remains at 1.5.0.
pg_integrity_checksums - 2.2.0 PG14-18; SQL 2.2
pg_ivm 1.15 1.17 PG14-18
pg_json_diff - 1.0 PG14-18
pg_kv - 0.1.0 PG15-18; non-persistent shared-memory KV
pg_lake 3.4.0 3.6.0 PG16–18; eight extensions, SQL 3.6; EL9/10 and Debian/Ubuntu packages.
pg_lease - RPM only: 0.1.0 PG14-18; SQL-only
pg_lexo - 0.6.1 PG16-18; SQL 0.6.0; fix rank generation and ordering
pg_lion - 0.3.0 PG16-18; includes citext/vector companions
pg_living_assertions - 0.5.10 SQL-only rebuild
pg_local_cache 1.3.0 3.1.0 PG14-18; OpenSSL dependency; built, import pending
pg_mentat 1.6.0 1.20.0 PG14-18
pg_money - 0.3.0 PG14-18
pg_mooncake 0.2.0 0.3.0-1PGSTY PGSTY fork; pg_duckdb 1.2.0 / DuckDB 2.0.0; no 0.2.0 upgrade script
pg_nanotime - 0.3.0 PG18 release snapshot; nanosecond timestamps.
pg_parquet 0.5.1-3PIGSTY 0.5.1-4PGSTY Fixes streaming COPY temporary-file leaks
pg_pinyin 0.0.6 0.0.8 PG14-18
pg_profile 4.11 4.16 PG14–18; missing RPM coverage restored; SQL-only.
pg_regresql 2.0.0 2.1.0 PG14-18; SQL version 2.0
pg_relusage 0.0.1 1.0.2 PG14-18; loading required
pg_rusage - 1.0 PG14-18
pg_search 0.25.2 0.26.6 PG15-18; preload; known MPP JoinScan crash risk
pg_semver 0.41.0 0.42.0 PG14-18; imported locally
pg_stat_ch 0.3.6 0.4.0 PG16–18; both RPM and DEB use 0.4.0 in the PG18 snapshot.
pg_stat_kcache 2.3.1 2.3.2 PGDG packages
pg_stat_monitor 2.3.2 2.4.0 PG14-18; preload
pg_stat_tcpinfo - 1.1 PG14-18; PGDG primary, Pigsty supplement
pg_statecharts - 0.1.0 PG16-18; includes pg_statecharts_dev
pg_statkit - 1.1.0 PG14-17
pg_statvfs - 1.0 PG14-18
pg_statviz RPM: 0.9 / 1.2 / DEB: 1.2.1 1.2.1 PG14-18; Production RPMs switch from older PGDG builds to Pigsty 1.2.1; SQL version 1.2; fills 30 RPM coordinates
pg_synonym - 1.0.0 PG15-18; SQL version 1.0
pg_table_range - RPM only: 0.1.2 PG16-18; range pruning
pg_task 2.1.29 3.0.0 PG14-18; preload
pg_textsearch 1.4.0 1.5.1 PG17-18; RPMs from PGDG; DEBs from Pigsty
pg_tle 1.5.2 RPM: 1.5.2 / DEB: 1.5.3 The PG18 snapshot retains different RPM and DEB versions.
pg_tokenizer 0.1.1 1.1.0 PG14-18; native tsvector
pg_tre - 4.6.2 PG17-18
pg_trickle 0.81.0 0.108.3 PG18; pgrx 0.19.3; built, import pending
pg_try_cast - 1.0.0 PG16-18; SQL version 1.0
pg_turbovec 2.2.2 2.15.0 PG14-18
pg_utl_smtp DEB only: 1.0.0 DEB only: 2.0.0 PGDG covers EL8/9/10
pg_vault_tde 1.7.0 1.7.2 PG17-18; EL9/10
pg_vectorsearch - 0.1.0 PG18; alpha; imported locally
pg_warren - 0.8.0 PG15-18
pgaudit RPM only: 1.6.3 / 1.7.1 RPM only: 1.6.3-1PGSTY / 1.7.1-1PGSTY Pigsty unifies PG14/15 package names; PG16–18 use PGDG packages, with 18.0 for PG18.
pgbson 2.1.0 2.2.0 PG14-18; RPM package postgresbson
pgdog 0.1.57 0.1.63 PostgreSQL connection pooler
pgedge-15 15.19-1PGSTY 15.19-3PGSTY Includes Spock 5.0.13 and LOLOR 1.2.3; imported locally
pgedge-16 16.15-1PGSTY 16.15-3PGSTY Includes Spock 5.0.13 and LOLOR 1.2.3; imported locally
pgedge-17 17.11-1PGSTY 17.11-3PGSTY Includes Spock 5.0.13 and LOLOR 1.2.3; imported locally
pgedge-18 18.6-1PGSTY 18.6-3PGSTY Includes Spock 5.0.13 and LOLOR 1.2.3; imported locally
pgexporter_ext - 0.2.5 New DEB coverage; RPM continues to use PGDG.
pgextwlist 1.19 1.20 PG14-18; RPM recipe updated; production packages from PGDG
pggraph 1.2.0 1.2.1 PG14-18; Extension graph; fix DEB SQL payload checks
pghydro RPM only: 6.6-1PIGSTY RPM only: 6.6-2PGSTY PG14-18; PostGIS 3.7; noarch
pgmb RPM only: 1.0.0-1PIGSTY RPM only: 1.0.0-2PGSTY PG14-18; fix schema creation and pgsql_http dependency
pgmnemo 0.20.0 0.21.0 PG17-18; preserves corpus tables and sequences in pg_dump
pgmq 1.12.0 1.13.1 PG14-18; SQL-only
pgmqtt 0.5.0 0.5.1 PG14-18; Preload required; CDC requires logical WAL
pgrdf 0.6.20 0.6.40 PG14-18; pgrx 0.19.3; built, import pending
pgroonga 4.0.8 RPM: 4.1.0-4PGSTY.el9 / DEB: 4.1.0 PG14-18; EL9 release; EL8/10 rebuilt at 2PGSTY; Groonga 16.1.5
pgrouting 4.0.1 4.0.2 PGDG packages
pgs3 0.1.1 0.1.1 PG17-18; First full production packaging of an existing extension; 32 main packages; alpha
pgsentinel 1.5.0 1.5.2 PGDG packages
pgsodium 3.1.9 RPM: 3.1.9 / DEB: 3.1.11 DEB upgraded with matching libsodium; PG18 RPM remains at 3.1.9.
pgsql_tweaks 1.0.5 1.1.0 PG14-18; SQL-only
pgtde-18 18.4 18.6 Percona 18.6.1; pg_tde 2.2.2
pgtde-18-contrib 18.4 18.6 pg_stat_monitor 2.4.0; vector 0.8.6
pgtelemetry - 1.7 PG14-18; SQL-only; requires pg_stat_statements
pgvector 0.8.6 0.8.7 Both RPM and DEB use PGDG 0.8.7 in the PG18 offline snapshot.
pgvectorscale 0.9.1 0.9.1 PG14-18; Extension vectorscale; same-version rebuild and correction of stale catalog label
plpgsql_check 2.10.4 2.10.16 PG18 release snapshot; SQL version 2.10.
plphp - 2.6 PG14-18; fix embedded runtime dependencies
plprql 18.0.1 18.0.2 PG14-18
plv8 3.2.4 3.2.5 PG14-18; Fix EL10 LTO builds
polardb-17 17.10.1.0 17.11.1.0-2PGSTY PG17.11 kernel/contrib; rebuilt with updated PolarStore SDK
polarstore 1.2.42-2PGSTY 1.2.42-3PGSTY Rebuilt with zlog 1.2.20
postgis RPM: 3.6.4 / DEB: 3.7.0 RPM: 3.7.0-1PGSTY / DEB: 3.7.0 PostGIS 3.7; Pigsty fills EL8 gaps; EL9/10 use PGDG. The PG18 archives contain one PostGIS branch.
postgis_tiger_geocoder - RPM: 2025.2-1PGSTY / DEB: 2025.2 EL8 PG16-18 gap fill; standalone noarch package
provsql 1.12.0 1.13.1 Fixes circuit sizes/cancellation; preload required
psql_bm25s 0.4.13 0.4.14 PG17-18
q3c RPM only: 2.0.5 RPM only: 2.0.6 PGDG packages
rdf_fdw 2.7.0 3.1.0 PG18 release snapshot; RDF foreign data access.
rdkit RPM: 202303.3 / 202503.6 / DEB: 202503.6 202609.2 EL9/10; D13/U24/U26; older OS packages retained
redis 7.2.16 7.2.17-1PGSTY Includes devel package
repmgr RPM only: 5.5.0 RPM only: 5.5.1 PGDG packages
session_variable 3.5 3.6 PG14-18
set_user 4.2.0 4.3.0 PGDG packages
snowflake 2.6.0 2.6.0 PG15-18; Rebuilt with pgEdge; correct stale 2.5.0 catalog label
spock 5.0.11 5.0.13 Updated with pgEdge 15-18; preload required
stannum - 0.1.0 PG17-18; development snapshot
supautils 3.4.3 4.0.0 PG18 release snapshot.
textsearch_intl - 1.0.1 Both RPM and DEB use 1.0.1 in the PG18 snapshot; SQL version 1.0.
timescaledb 2.29.1 2.31.0 PG16-18; TSL
timescaledb_toolkit 1.26.0 1.27.0 PG15-18; older PG14 packages retained
ulak 0.0.2 0.2.0 PG14-18; preload
valkey 9.1.1 9.1.3-1PGSTY Security update; includes devel package
vchord 1.1.1 1.3.0-1PGSTY PG14-18
vchord_bm25 0.3.0 1.1.0 PG14-18; native tsvector
vectorize 0.26.2 0.27.1 PG14-18; SQL 0.23.0; multi-row fix
vgram - 1.0 PG14-18
wal2json 2.6 2.7 PGDG packages
wrappers 0.6.2 0.6.4 PG18 release snapshot.
zlog 1.2.18 1.2.20 Rebuilds PolarStore and PolarDB
{.wide .expand}

INFRA, PIG and upstream package updates

This table consolidates the INFRA changelog and PIG releases since v4.5.0. UPSTREAM rows belong to the separate Docker/Nginx repository modules. Toolchains, applications and optional services remain opt-in.

Repository Package Versions Notes
INFRA agentsview 0.40.1 → 0.47.0 Repacked for both architectures
INFRA alertmanager 0.33.1 → 0.35.0 Repacked for both architectures
INFRA barn — → 1.2.0 Official native packages
INFRA blackbox-exporter 0.28.0 → 0.29.1
INFRA caddy 2.11.4 → 2.11.9 FastCGI security fixes
INFRA cargo-pgrx-0192 / cargo-pgrx-0193 Added 0.19.2 / 0.19.3 Separate version slots; built from source for both EL8 architectures.
INFRA claude / claude-code 2.1.227 → 2.1.322 Switch to the official signed claude-code package; the old claude package remains at 2.1.319.
INFRA cloudflared 2026.7.3 → 2026.10.7 Repacked upstream executable.
INFRA code 1.133.0 → 1.146.0 Official DEB/RPM packages; repository RPM copies are signed.
INFRA code-server 4.132.0 → 4.145.2 Upstream native packages
INFRA codex 0.147.0 → 0.167.2 Complete canonical runtime preserved, including bundled bwrap
INFRA crush 0.88.1 → 0.100.0 Repacked official tarball with licenses preserved.
INFRA dblab 0.47.4 → 0.55.2 Repacked for both architectures
INFRA duckdb 1.5.5 → 2.0.0 Major version update.
INFRA etcd 3.7.1 → 3.7.3
INFRA garage 2.3.0 → 2.5.0
INFRA golang 1.26.5 → 1.27.4 Repacked for both architectures
INFRA grafana 13.1.3 → 13.3.1 Official native packages
INFRA grafana-infinity-ds 3.11.3 → 4.1.6 Security / gRPC fixes
INFRA grafana-plugins 13.0.0 → 13.3.0 Plugin bundle; includes JSON datasource 1.4.4 and ECharts 7.3.0.
INFRA grafana-victorialogs-ds 0.31.0 → 0.34.0 Repacked for both architectures
INFRA grafana-victoriametrics-ds 0.25.2 → 1.0.1 POST/WITH / security fixes
INFRA headscale 0.29.3 → 0.29.7
INFRA hugo 0.164.0 → 0.169.0 Extended build.
INFRA ivorysql 5.4 → 5.6 New native recipe; DEB ivorysql-5 / RPM ivorysql5; PostgreSQL 18.6
INFRA jmx-exporter 1.6.0 → 1.7.0 Noarch; imported locally
INFRA juicefs 1.4.1 → 1.4.2
INFRA k3s / k3s-images 1.36.3 → 1.37.2 Matching binary and air-gap image packages, revision 2PGSTY.
INFRA kafka 4.3.1 → 4.4.0 Noarch RPM and all DEB; upstream SHA512 verified; imported locally
INFRA kafka-exporter 1.9.0 → 1.11.0
INFRA kes — → 20261026000000.0.0 Key management service
INFRA logcli / loki / loki-canary 3.7.6 → 3.7.9 Loki components updated together.
INFRA maddy 0.9.5 → 0.9.7 DMARC/IMAP fixes
INFRA mcli 20260806000000.0.0 → 20261112000000.0.0 Native pgsty packages; executable at /usr/local/bin/mcli.
INFRA mcp-toolbox 1.8.0 → 1.16.0 CGO; glibc 2.28
INFRA mongodb-exporter 0.52.0 → 0.54.0
INFRA mtail 3.4.7 → 3.4.20 Repacked for both architectures
INFRA mysqld-exporter 0.19.0 → 0.21.0 Metric type changes
INFRA nginx-exporter 1.5.1 → 1.5.3 Dual-architecture RPM/DEB built
INFRA nodejs 24.19.0 → 26.13.1 Node.js 26 LTS; RPM epoch 2.
INFRA openbao — → 2.7.2 New official packages for both architectures; used by the VAULT module.
INFRA opencode 1.18.16 → 1.19.5 Updated to 1.19.5; package revision 2PGSTY includes Bun security fixes.
INFRA opentofu — → 1.13.9 New default IaC tool, package name tofu; includes state persistence fixes.
INFRA pev2 1.23.0 → 1.25.0 noarch RPM / all DEB
INFRA pg-exporter 1.4.1 → 1.6.1 Connection governance, failure cooldown and additional PostgreSQL 19 metrics.
INFRA pg-hardstorage 1.2.1 → 1.7.0 Repacked for both architectures
INFRA pg-timetable 7.0.0 → 7.1.0 Dual-architecture RPM/DEB built
INFRA pgbackrest-exporter 0.24.0 → 0.25.0 Source build
INFRA pgbot — → 0.9.0 New; beta
INFRA pgext — → 1.7.1 Official native packages
INFRA pggo — → 0.1.1 New
INFRA pgschema 1.12.2 → 1.14.1 Repacked for both architectures
INFRA pgstream 1.3.1 → 1.6.0 Source build from pinned commit
INFRA pgsync — → 0.1.1 New; beta
INFRA pgterm — → 0.4.0 New; beta
INFRA pi-coding-agent — → 1.5.2 New package; complete upstream runtime
INFRA pig 1.8.0 → 1.11.0 Pigsty 4.6.0 support; embedded catalog contains 625 available extensions.
INFRA postgrest 16.1 → 16.5 Requires PostgreSQL 14 or newer.
INFRA prometheus 3.13.2 → 3.16.0 TLS / Remote Write changes
INFRA promtail 3.6.7 → 3.6.11 EOL artifact backfill
INFRA pushgateway 1.11.3 → 1.11.4 Both architectures; imported locally
INFRA rainfrog 0.4.3 → 0.4.7 Repacked for both architectures
INFRA rclone 1.75.0 → 1.76.0 Repacked for both architectures
INFRA redis-exporter 1.89.0 → 1.97.0 Redis 8 KEYSIZES
INFRA rust-toolchain 1.97.1 → 1.99.1 Upstream signatures and dual-architecture ELF ABI checks passed; imported locally
INFRA rustfs 1.0.0-rc.1 → 1.0.5 Available as an optional repository package; not a MINIO module backend.
INFRA sabiql 1.15.1 → 3.0.3 Repacked for both architectures
INFRA sealos 5.0.1 → 5.1.1 Official packages; upstream source uses the Sealos Sustainable Use License.
INFRA seaweedfs 4.41 → 4.53 Package version: 4.53.0
INFRA silo 20260806000000.0.0 → 20261112000000.0.0 Native release packages, revision 1PGSTY, with Console 2.7.2 embedded.
INFRA silo-console — → 2.7.2 New standalone console package, paired with Silo 20261112.
INFRA sow 0.3.0 → 0.7.1 Existing 0.3/0.4 workspaces require an explicit migration.
INFRA sql-studio 0.1.51 → 0.1.53 Dual-architecture RPM/DEB built
INFRA stalwart 0.16.17 → 1.1.0 Major update to 1.x; migration required from 0.16.x.
INFRA tailcat — → 0.7.0 Verified and built dual-architecture RPM/DEB
INFRA timescaledb-tools 0.19.0 → 0.19.1 tune 0.19.1 + parallel-copy 0.13.2; Go 1.27.4 source builds
INFRA uv 0.12.3 → 0.13.7
INFRA v2ray 5.52.0 → 5.53.0 Dual-architecture RPM/DEB built
INFRA vector 0.57.0 → 0.61.0 Official native DEB/RPM packages.
INFRA victoria-logs / vlogscli / vlagent 1.52.0 → 1.53.0 Logs components updated together.
INFRA victoria-metrics / victoria-metrics-cluster / vmutils 1.149.0 → 1.156.0 Single-node, cluster and utility packages updated together.
INFRA victoria-traces 0.10.0 → 0.13.0 gRPC TLS now opt-in
INFRA xray 26.3.27 → 26.11.9 Repacked for both architectures
PIG v1.8.1 v1.8.0 → v1.8.1 Go 1.27.1; CLI, repository and build safety improvements.
PIG v1.9.0 v1.8.1 → v1.9.0 Xray client/server, repository signing keys, pgrx 0.19.3 and a 600-entry catalog.
PIG v1.10.0 – v1.10.4 v1.9.0 → v1.10.4 Safer PG targets and recovery, inventory preservation, category aliases and Go 1.27.3.
PIG v1.11.0 v1.10.4 → v1.11.0 Pigsty 4.6.0 support, kernel-specific configuration isolation, stricter backup/recovery/cleanup boundaries and a 625-entry catalog.
UPSTREAM containerd.io - → 2.4.2-3 Official packages; separate docker repository module.
UPSTREAM docker-buildx-plugin - → 0.38.1 Official packages; separate docker repository module.
UPSTREAM docker-ce - → 29.9.2 Official packages; separate docker repository module.
UPSTREAM docker-ce-cli - → 29.9.2 Official packages; separate docker repository module.
UPSTREAM docker-ce-rootless-extras - → 29.9.2 Official packages; separate docker repository module.
UPSTREAM docker-compose-plugin - → 5.7.0 Official packages; separate docker repository module.
UPSTREAM nginx - → 1.31.8 Official packages; separate nginx repository module.
UPSTREAM nginx-module-acme - → 1.31.8+0.4.1 Official packages; separate nginx repository module.
{.wide .expand}

Offline packages, validation and downloads {#v460-offline}

The release provides 14 complete .tgz offline archives, each below 2 GiB, with no reassembly required. Each contains an indexed local repository, repo_complete checksums and the same pigsty-v4.6.0.tgz source archive. Source, package manifests, offline notes and checksum files are attached separately.

OS x86_64 (GiB) ARM64 (GiB) Full offline deployment
EL 9 1.917 1.775 PASS
EL 10 1.942 1.795 PASS
Debian 12 1.753 1.599 PASS
Debian 13 1.781 1.625 PASS
Ubuntu 22.04 1.765 1.631 PASS
Ubuntu 24.04 1.774 1.639 PASS
Ubuntu 26.04 1.782 1.649 PASS
{.wide .expand}

Validation results

  • 14/14 fresh-VM installations passed: no preinstalled Ansible, Pigsty checkout or local repository; external access, host proxies and other guest services were blocked. Every VM independently ran the stock rich template. Real Ansible deployments finished with zero failed, unreachable, ignored or rescued tasks.
  • PostgreSQL 18, the four rich extensions, 16 core services, HTTP health endpoints and a full pgBackRest backup to Silo all passed. No unintended PG14, HDFS/Java, OneSparse/GraphBLAS/LAGraph or duplicate PostGIS branch was installed.
  • Archive integrity, file/package membership, architecture, embedded source and transferred SHA-256 digests were verified. APT/DNF dependency closure also passed against an empty installed state using only the local repository. EL10 archives use an EPEL 10.2 snapshot matching Rocky 10.2.
  • Cold-start Ansible --check remains limited by the not-yet-generated CA CSR; real deployment passes. Validation covers the enabled rich modules, not commented optional application examples.

Source archive and tag

Use the attached pigsty-v4.6.0.tgz, or its identical embedded copy, for installation. It is based on tag commit d71d9de86bf63aa4aa2886baeb542af66dbdfba6 and additionally includes the complete-set dependency solver and regenerated package maps. These fixes remain uncommitted and the tag has not moved, so GitHub's automatic Source code (zip/tar.gz) archives do not contain them. The tag comparison covers only committed changes.

Source archive SHA-256:

6b4a54b52c23bb56753d5d7352582a0a5f78339c12535a56ad263c16f6dca21b

Download SHA256SUMS from the same release and verify the files in your download directory:

sha256sum -c SHA256SUMS --ignore-missing

See the offline installation guide for the installation workflow, and PACKAGE-MANIFEST.json / OFFLINE-NOTES.txt for exact contents and platform differences.

Assets 21
Loading