server: v0.1.42

0.1.42 (2026-10-27)

Features

• control-plane: file a pull request's SQL only once it is ready for review (a8f7c2c)
• control-plane: show a pull request's code reviews on its Slack messages (fd2d72b)
• cpgo: serve the approval inbox, detail, approve, reject and unapprove in Go (653a29f)
• cpgo: serve the AuthorizeRequest RPC in Go (988607c)
• cpgo: serve the workload token exchange in Go (e7ef269)

Bug Fixes

• control-plane: decide a stored result's view from what it stored (836c9bf)

Refactoring

• goproxy: the runner takes OpenRunChannel itself (0d5df44)

server: v0.1.41

0.1.41 (2026-10-23)

Features

• analyzer: EngineCall, the control plane's questions answered by the Go engine (7ed007f)
• control-plane: keep a request's CC list on every Slack message (598fdf1)
• control-plane: name people in a request's Slack thread by mention (a110da0)
• control-plane: open a request's Slack message with its title (10870c4)
• control-plane: post a long query into its Slack thread (c5a38c2)
• control-plane: say a request's Slack message as a sentence, then its SQL (b824f01)
• cpgo: serve the policy schema in Go (ff98644)
• credit a pull request's SQL edit to whoever wrote the commit (0290e5b)

Bug Fixes

• analyzer: fold call names, EXCLUDED and the search path by the dialect (bc1f02a)
• analyzer: Postgres routine names are the exact proname (400b259)
• control-plane: compare already-canonical catalog names exactly (dbd3400)
• goproxy: Athena names fold once, as the analyzer keys them (049b39c)
• goproxy: MySQL lower_case_table_names=2 fragments fold by utf8mb3_general_ci (d24053f)
• goproxy: one engine session per target connection (4fa384b)
• goproxy: table detail returns names in canonical spelling (eb7f76d)
• l10n: call a rejected request 반려 in Korean (78d86f3)
• read classification names as SQL identifiers (c16f9da)

Refactoring

• analyzer: an Engine keeps what it is and how its target behaves in Traits (12b9a20)
• analyzer: engine code sits in the file it belongs to (ff46d17)
• analyzer: engine files are named for what they hold (732c24e)
• analyzer: engine hooks and traits replace the per-statement session (260c801)
• analyzer: engines.Datasource and the session settings become one Session (5f2936f)
• analyzer: the catalog-row trait is catalogColumnNames (eab462e)
• control-plane: EngineDefinition wraps the Go engine (316d389)
• control-plane: engines read requests, one authorizer asks Cedar (db5528a)
• goproxy: a run's session is a connection (0af5004)
• goproxy: a wire client and a run share one connection type (8b53038)
• goproxy: command runner files are named for what they hold (9a9b43e)
• goproxy: one ProxyCommandRunner per connection (baa2b1b)
• goproxy: the Authorizer holds the SessionSnapshot (bc57fa1)
• goproxy: the wire client's file is wire_client.go (8bb0abf)
• name catalog column names alike, read engines from the Go engine (0591994)
• the analyzer's JVM binding is named for the analyzer (61c89b4)

server: v0.1.40

0.1.40 (2026-10-21)

Features

• control-plane: name the query executed check after the instance (888e33d)
• control-plane: run a pull request's SQL that merged before it ran (0f182de)
• cpgo: serve request threads in Go (d8e0654)
• cpgo: serve the MCP OAuth authorization server in Go (1c1a68a)
• sql-action: post the skipped check from the workflow (ddd8a7f)

Refactoring

• analyzer: rename EngineDatasource to TargetSettings (ed1e149)

Build & Dependencies

• check TypeScript formatting with Prettier (fbddbc9)

server: v0.1.39

0.1.39 (2026-10-21)

Features

• web: link URLs in request comments, opening in a new tab (b14e58c)
• web: show the MCP OAuth consent page in the web console (0b8f693)
• web: show the role a query request runs as (974f86f)

Bug Fixes

• cpgo: honor PM_BIND_HOST on the public listeners (84d0bfc)
• notify: show Slack replies as plain text, with mentions as usernames (7f9cf38)

Refactoring

• analyzer: read keywords from sqlglot-go's token flags in SqlNormalize (cc9021c)
• notify: one Slack mrkdwn escape (74bb84e)
• web: read the control plane's URL at run time as PM_CP_URL (446fcd0)

Build & Dependencies

• build every Go binary with Go 1.26.10 (5e4abb9)
• stop trusting emSign ECC Root CA - G3 in the control plane and web images (4a11548)

server: v0.1.38

0.1.38 (2026-10-20)

Bug Fixes

• control-plane: run a PR's SQL only when GitHub would merge it (4666ee4)
• control-plane: wait for running checks and drafts before running a PR's SQL (7333ec0)

Refactoring

• cpgo: check every setting before run starts anything (1cb0342)
• goproxy: give mysql and postgres their own Provider and target (da9867f)
• goproxy: replace the relay.Db interface with the sqldb.Queries struct (2e91deb)
• goproxy: the mysql and postgres Server and RunSession hold their target (7b77160)
• goproxy: update package docs, docs and comments for the new paths (a8c7988)

pmon: v0.1.16

0.1.16 (2026-10-21)

Bug Fixes

• pmon: keep socket-path test dirs short under macOS TMPDIR (a41e226)
• pmon: retry the config rename while Windows blocks it (6c7d26c)

Build & Dependencies

• build every Go binary with Go 1.26.10 (5e4abb9)

pm-ci: v0.1.2

0.1.2 (2026-10-21)

Features

• sql-action: post the skipped check from the workflow (ddd8a7f)

Documentation

• sql-action: say why pm-ci posts when no file matches (ad46a97)

pm-ci: v0.1.1

0.1.1 (2026-10-21)

Build & Dependencies

• build every Go binary with Go 1.26.10 (5e4abb9)

server: v0.1.37

0.1.37 (2026-10-20)

Features

• cpgo: serve the ReportCompletion RPC in Go (6da3bff)
• web: link URLs in request comments, opening in a new tab (f289b57)

Bug Fixes

• goproxy: catalog Athena views and untyped Glue tables like tables (2cc9db2)
• notify: show Slack replies as plain text, with mentions as usernames (3e2e541)

Refactoring

• cpgo: parse the settings shared with the Kotlin child with kong (0a8821c)
• cpgo: read the tailnet name and GitHub App key settings in main (6cc84d0)
• goproxy: move dialects/athena to goproxy/athena (835e294)
• goproxy: move introspect into a new sqldb package (08de54f)
• goproxy: move MySQL's introspection open and namespace probe into goproxy/mysql (0b5b580)
• goproxy: move MySQL's SQL text and its tests into goproxy/mysql (02c4493)
• goproxy: move MySQL's table detail into goproxy/mysql (5c0394a)
• goproxy: move PostgreSQL's introspection open and namespace probe into goproxy/postgres (c111195)
• goproxy: move PostgreSQL's SQL text and its tests into goproxy/postgres (6f3ba23)
• goproxy: move PostgreSQL's table detail into goproxy/postgres (3ce8255)
• goproxy: move QueryEngine from relay into spi (251ddc9)
• goproxy: move the decision contract types from relay into spi (1dc64d5)
• goproxy: move the schema-fragment refetcher into sqldb (a6928af)
• goproxy: move the shared table-detail helpers into sqldb (2982227)
• goproxy: name the levels Target, TargetConfig and Session in spi (a112b6c)
• goproxy: name variables after the types they hold (d6fbaab)
• goproxy: one control-plane client per proxy (aa64375)
• goproxy: one ControlPlane interface for the control-plane client (06ee0cb)
• goproxy: one Runner joins the target and the control-plane client (3aebb87)
• goproxy: one spi.Authorizer per connection, built by whoever opens it (fce2259)
• goproxy: rename package engine to relay (d81db55)
• goproxy: rename package mysqlproxy to mysql (044ccfa)
• goproxy: rename package pgproxy to postgres (84edf61)
• goproxy: rename spi.QueryEngine to spi.Authorizer (71932e4)
• notify: one Slack mrkdwn escape (f0a9985)

Build & Dependencies

• give verify its own test database servers (393297d)
• run verify's static, JVM and Go parts concurrently and size test forks from Docker (088b5cd)
• stop verify's parts on interrupt and remove its test containers' volumes (2ae8279)

Documentation

• backlog retiring cp-go's Kotlin bridges once Kotlin is gone (ecabda4)

server: v0.1.36

0.1.36 (2026-10-19)

Bug Fixes

• control-plane: read a datasource's catalog once, not once per classification (8673b25)