Jonathan S. Katz [Thu, 4 Sep 2025 19:49:51 +0000 (15:49 -0400)]
Fix link to pgarchives project
This also makes a small modification to the language describing
how to get involved in the project.
Co-authored-by: Tobias Bussmann <t.bussmann@gmx.net>
Magnus Hagander [Thu, 4 Sep 2025 19:25:16 +0000 (21:25 +0200)]
Properly strip newlines at end of filename
Devrim Gunduz [Thu, 4 Sep 2025 18:34:42 +0000 (21:34 +0300)]
Update issue tracker link for RPM based projects.
Jonathan S. Katz [Thu, 4 Sep 2025 12:03:06 +0000 (08:03 -0400)]
PostgreSQL 18 RC 1
Magnus Hagander [Wed, 3 Sep 2025 12:39:17 +0000 (14:39 +0200)]
Floor replaces Chris as chair of CoC committee
Magnus Hagander [Wed, 3 Sep 2025 12:26:51 +0000 (14:26 +0200)]
Make docspage inherit from base.html
There was 99+% overlap between these, leading to some details missed
between them. The fact that the whole base is reproduced inside
docspage.html is probably legacy from a long time ago. So
instead make docspage.html inherit from base and set the required parametrs.
The only output difference in this is that the rel=canonical link moves
to a different part in the <head>, but it's still in <head>.
As a bonus, this also fixes the gitrev tag for theme.js, that commit
97942bcab
only fixed for base and not docs, and it fixes the footer link to
policies that
e7099c90e only updated for base and not docs.
Magnus Hagander [Wed, 3 Sep 2025 12:02:53 +0000 (14:02 +0200)]
Replace bootstrap burger menu with a CSS based one
This removes our dependency on the bootstrap javascript and along with
it also the jquery dependency. Instead we use a pure CSS based dropdown
menu, and a small snippet of custom javascript is used to maintain the
aria- tag information.
Reviewed by Dave Page and Chris Ellis
Magnus Hagander [Wed, 27 Aug 2025 14:17:47 +0000 (16:17 +0200)]
Add support or setting Cross-Origin-Opener-Policy header
And default it to same-origin, the most locked down value. I don't think
we need to allow it anywhere, but having this decorator makes it
possible to override if needed.
Christoph Berg [Tue, 2 Sep 2025 13:21:10 +0000 (15:21 +0200)]
Update list of supported deb distributions
Debian: trixie is stable now, add forky (testing).
Ubuntu: add questing, retire oracular and focal.
Magnus Hagander [Fri, 15 Aug 2025 12:26:43 +0000 (14:26 +0200)]
Give better error message when invalid data is passed to cauth in d param
Int he sample cauth provider for django, the incoming data in the 'd'
parameter is supposed to be the three parts required to do a SIV
decryption of it. But if somebody is sitting on an old link or ends up
going through history or something like that it can end up with just two
parameters since that's what the old version of the plugin uses. Instead
of crashing on that, give an error message so the user can just retry.
Dave Page [Mon, 18 Aug 2025 08:38:12 +0000 (09:38 +0100)]
Add pgAnalyze as a support of PGCA.
Magnus Hagander [Thu, 14 Aug 2025 17:45:07 +0000 (19:45 +0200)]
Purge /dyncss/ when a css file is changed
We serve combined CSS under that URL, so make sure it's purged along
with the static CSS.
Magnus Hagander [Thu, 14 Aug 2025 16:27:11 +0000 (18:27 +0200)]
Change release notes list to use summary/details instaed of JS
This can be done just as well with native HTML as with the bootstrap
javascript, so let's do that.
Jonathan S. Katz [Wed, 13 Aug 2025 16:50:06 +0000 (09:50 -0700)]
2025-08-14 update release, including PostgreSQL 18 Beta 3
Magnus Hagander [Wed, 13 Aug 2025 12:33:32 +0000 (14:33 +0200)]
Remove popper dependency
This isn't used anywhere, and maybe never was.
Magnus Hagander [Wed, 13 Aug 2025 12:24:17 +0000 (14:24 +0200)]
Remove jQuery from forms helper javascript as well
This is a trivial piece of javascript, definitely doesn't need jQuery
Magnus Hagander [Wed, 13 Aug 2025 10:20:16 +0000 (12:20 +0200)]
Fix incorrect message about key-length when generating cauth keys
Reported by Jacob Champion
Magnus Hagander [Wed, 13 Aug 2025 10:19:15 +0000 (12:19 +0200)]
Fix missing base64 decoding of key
Reported by Jacob Champion
Magnus Hagander [Wed, 13 Aug 2025 09:55:49 +0000 (11:55 +0200)]
Drive feature matrix from a file instead of database queries
Storign the data in the file both puts it under git control, and it
allows new entries to be staged when a new release is made, to be
automatically pushed alongside the other release entries.
As a bonus, versions now only need to be specified when the state
changes, not with a massive set of checkboxes, one for each version
since forever.
Imports all the existing content from the current feature matrix for
today. Leaves the database tables in place for now in case we need to
back out, but they should be removed soon. For now, just remove them
from /admin/ so nobody mistakenly tries to update them.
Finally, changes the URLs for feature details to be slug-based instead
of id-based, and keeps the old id mapping around for redirects.
Magnus Hagander [Wed, 13 Aug 2025 07:59:24 +0000 (09:59 +0200)]
Make purgehook aware of files in data/ and issue xkey purges
For any changes to files in data/, issues an xkey purge of
data_<filename_without_extension>. This allows us to automatically purge
out data based on changes to data files in the git repository.
Magnus Hagander [Wed, 13 Aug 2025 07:57:50 +0000 (09:57 +0200)]
Add view decorator to set an explicit xkey
Magnus Hagander [Tue, 12 Aug 2025 20:13:40 +0000 (22:13 +0200)]
Reimplement feature-matrix filtering
* jQuery removed and replaced with native javascript
* Column filtering is now done in pure CSS without javascript. This also
means that the initial rendering of the page is correct instead of
rendering all column and then removing them (visible on slow
connections)
* Reduce page size by moving some contents to CSS instead of repeating
it
Magnus Hagander [Tue, 12 Aug 2025 20:05:22 +0000 (22:05 +0200)]
Remove unused bgcolor field
This was moved to CSS a long time ago, no need to keep a potentially out
of sync copy in the model file.
Magnus Hagander [Tue, 12 Aug 2025 20:02:51 +0000 (22:02 +0200)]
Fix <label> for reference in feature matrix
Magnus Hagander [Tue, 12 Aug 2025 18:22:29 +0000 (20:22 +0200)]
We're using XChaCha, not ChaCha, so fix documentation
Pointed out by Jacob Champion
Magnus Hagander [Tue, 12 Aug 2025 14:57:02 +0000 (16:57 +0200)]
Update python versions used in syntax checking workflow
Magnus Hagander [Tue, 12 Aug 2025 14:52:08 +0000 (16:52 +0200)]
Validate crypto key lengths independently for each cauth version
Since different versions have different requirements on crypto key
length, we should also check it individually and not just assume the
user did it right.
Magnus Hagander [Tue, 12 Aug 2025 14:43:43 +0000 (16:43 +0200)]
Add descriptive texts for community auth version when configuring
Magnus Hagander [Tue, 12 Aug 2025 14:41:28 +0000 (16:41 +0200)]
Implement community auth using ChaCha20_Poly1305 encryption
This is called version 4 (though version 3 is the preferred version so
they are not strictly in increasing number order), and is intended to be
used for platforms that don't support AES-SIV encryption.
Dave Page [Fri, 18 Jul 2025 10:44:40 +0000 (11:44 +0100)]
Clarify that the sponsor table for PGCA only shows "Friend" and above.
Jonathan S. Katz [Thu, 17 Jul 2025 12:10:38 +0000 (08:10 -0400)]
PostgreSQL 18 Beta 2 release
Magnus Hagander [Tue, 15 Jul 2025 10:38:02 +0000 (12:38 +0200)]
Update bio for Floor Drees
Jonathan S. Katz [Fri, 11 Jul 2025 01:28:35 +0000 (21:28 -0400)]
Update info on financial sponsors page
This updates the dates of the sponsorships, and moves to a
different date format based on discussion from PGCA board.
Dave Page [Thu, 10 Jul 2025 09:39:12 +0000 (10:39 +0100)]
Remove activity examples, per PGCA board discussion.
Dave Page [Thu, 10 Jul 2025 09:38:23 +0000 (10:38 +0100)]
Remove Xata as a PGCA financial sponsor.
Magnus Hagander [Wed, 2 Jul 2025 20:20:52 +0000 (22:20 +0200)]
Do full email validation in oauth signup form
These fields aren't editable anyway, but if we don't do the full
validation we will instead crash if for example the same account
creation form is submitted twice (happens surprisingly often). Now we
will instead show a validation error message.
Jimmy Angelakos [Mon, 23 Jun 2025 14:53:28 +0000 (15:53 +0100)]
Add new book: PostgreSQL Mistakes and How to Avoid Them
Author: Jimmy Angelakos <vyruss@hellug.gr>
Reviewed-by: Daniel Gustafsson <daniel@yesql.se>
Discussion: https://postgr.es/m/
8e2b0fbcb7f5ce0b061506f95b211729@hellug.gr
Magnus Hagander [Mon, 16 Jun 2025 13:47:45 +0000 (15:47 +0200)]
Show cauth version field in django overview page
Magnus Hagander [Thu, 12 Jun 2025 08:21:50 +0000 (10:21 +0200)]
Make oauthexceptions be http status 400 on signup as well
This was already done for the majority on signin, but for new accounts
we should do the same.
Magnus Hagander [Wed, 11 Jun 2025 18:47:16 +0000 (20:47 +0200)]
Set status 400 on oauth exceptions
It's not always entirely correct, but it's less wrong than 200.
Magnus Hagander [Wed, 11 Jun 2025 18:40:20 +0000 (20:40 +0200)]
Ensure oauth secure cookie expires
If login isn't completed in 10 minutes, expire the cookie and require a
start-over.
Magnus Hagander [Wed, 11 Jun 2025 13:38:06 +0000 (15:38 +0200)]
Use encrypted cookie instead of session for oauth state data
During oauth logins we need to store some temporary data related to the
users session. Previously we did this in the django session, but thanks
to AI bots trying millions of logins every day (and never completing the
process) we end up with many abandoned sessions in the db. To work
around this, instead store the temporary data in an encrypted cookie
passed to the browser. Since this cookie can be limited in scope to just
the auth part of the site, the slightly larger cookie size doesn't
matter, and we don't need to store any data at all server-side.
Magnus Hagander [Wed, 11 Jun 2025 10:29:24 +0000 (12:29 +0200)]
Use POST when sending to third party oauth
Instead of prepopulating a GET request that could generate a session,
createa a form with different submit buttons and use that. In the brave
new world of AI bots, nobody cares about robots.txt anymore, so we'd get
hit by a lot of requests specifically for these logins that were then
thrown away because they couldn't log in on the third party site.
Magnus Hagander [Wed, 4 Jun 2025 08:56:33 +0000 (10:56 +0200)]
Use base64.urlsafe_b64encode() instead of manual specification of chars
This makes for better readability, and is exactly the same
functionality...
Pointed out by Jacob Champion
Magnus Hagander [Tue, 1 Apr 2025 11:41:08 +0000 (13:41 +0200)]
Implement authenticated encryption in community auth
This creates a community auth version 3 (previous one being 2, and 1 is
long gone) trhat uses AES_SIV as the encryption method instead of
regular AES_CBC, and validates the digests on all accounts.
As this gets deployed on servers incrementall, the version has to be
specified in the database record for the site. We could have the site
indicate this itself, but doing it this way seems safer as it will then
just break for any app that accidentally reverts the plugin.
Reviewed by Jacob Champion
Magnus Hagander [Tue, 1 Apr 2025 11:36:17 +0000 (13:36 +0200)]
Remove suburl support in test_auth.py
This was removed from actual community auth a very long time ago (in
2013, in commit
78de94d1).
Devrim Gunduz [Mon, 2 Jun 2025 16:49:05 +0000 (19:49 +0300)]
Remove more RHEL 7 stuff, also remove Oracle Linux support. We don't test it
Devrim Gunduz [Mon, 2 Jun 2025 16:46:42 +0000 (19:46 +0300)]
RHEL 10 is available, RHEL 7 is EOL, Fedora 40 is EOL, Fedora 42 is already out.
Jonathan S. Katz [Thu, 8 May 2025 03:49:46 +0000 (23:49 -0400)]
2025-05-08 update release and PostgreSQL 18 Beta 1
Dave Page [Wed, 23 Apr 2025 08:58:34 +0000 (09:58 +0100)]
List Fastly as CDN sponsor.
This is not the prettiest at the moment as the server sponsor page doesn't
include logos, but we are obliged to display the Fastly one in return for the
services they provide. We may want to redesign this page at some point in
the future to group by sponsor and work more cleanly with non-server hosting
sponsors.
Daniel Gustafsson [Wed, 23 Apr 2025 08:49:11 +0000 (10:49 +0200)]
Move book to right place in the list
This moves the book added in
eb46390e since I only remembered to put
in chronological order after pushing.
Daniel Gustafsson [Wed, 23 Apr 2025 08:44:30 +0000 (10:44 +0200)]
Add PostgreSQL For Jobseekers to the books page
Per request by the author on pgsql-www@.
Reported-by: Sonia Valeja <soniavaleja@gmail.com>
Discussion: https://postgr.es/m/CAJz4NYk03KyOVfw8GXif_2c3f2nmOACbNWBNUy9q5R9kd4mWFA@mail.gmail.com
Dave Page [Wed, 23 Apr 2025 08:32:58 +0000 (09:32 +0100)]
Add Fastly logo
Dave Page [Tue, 15 Apr 2025 11:58:16 +0000 (12:58 +0100)]
Add Prairie Postgres
Jonathan S. Katz [Fri, 11 Apr 2025 20:23:43 +0000 (13:23 -0700)]
Update committers list
Christoph Berg [Wed, 9 Apr 2025 12:06:03 +0000 (14:06 +0200)]
Upgrade Debian/Ubuntu installation instructions
* Use /etc/os-release instead of lsb_release
* Update list of distribution releases covere
* Drop i386 and s390x architectures
* Use PG 17 in package name examples
Magnus Hagander [Tue, 1 Apr 2025 10:55:27 +0000 (12:55 +0200)]
Update to latest version of auth plugin
For some reason, downstream repos had a newer version but we forgot it
in the upstream repo.
Dave Page [Tue, 4 Mar 2025 10:07:33 +0000 (10:07 +0000)]
Correct note on naming to match reality.
Per discussion on -core and -hackers.
Jonathan S. Katz [Sat, 22 Feb 2025 20:01:25 +0000 (15:01 -0500)]
Remove "Schemaverse" from the "Online resources" page
The Schemaverse website no longer responds, so we don't need to
link to it.
Reported-by: Greg Sabino Mullane <htamfids@gmail.com>
Jonathan S. Katz [Thu, 20 Feb 2025 03:57:14 +0000 (22:57 -0500)]
2025-02-20 update release
Jonathan S. Katz [Wed, 19 Feb 2025 15:58:05 +0000 (10:58 -0500)]
Update Code of Conduct
The CoC had superfluous language on when a CoCC member could be
removed. Given the language didn't provide additional context on
the process of removal, the language itself is removed.
Signed-off-by: Jonathan S. Katz <jonathan.katz@excoventures.com>
Daniel Gustafsson [Tue, 18 Feb 2025 21:46:10 +0000 (22:46 +0100)]
Remove 32-bit Windows column in Windows Download table
The table describing platform support for Windows downloads still
had a column for 32-bit Windows platforms which was all empty.
Reviewed-by: Magnus Hagander <magnus@hagander.net>
Discussion: https://postgr.es/m/
3F3210DF-1A5B-4E6A-B7E1-
50B2D9F4D8AD@yesql.se
Magnus Hagander [Tue, 18 Feb 2025 15:19:36 +0000 (16:19 +0100)]
Fix typo
Spotted by Daniel Gustafsson
Magnus Hagander [Tue, 18 Feb 2025 15:16:12 +0000 (16:16 +0100)]
Add a how to get involved section to developer frontpage
Much more can be done to help this page, but it's a start.
Reviewed-by: Daniel Gustafsson and Jonathan Katz
Jonathan S. Katz [Thu, 13 Feb 2025 05:23:03 +0000 (21:23 -0800)]
2025-02-13 update release
Jonathan S. Katz [Thu, 13 Feb 2025 05:12:49 +0000 (21:12 -0800)]
Prepare for social link updates
The full work will be handled in a subsequent patch, but for now
prepare for the update while finalizing the design.
Jonathan S. Katz [Thu, 6 Feb 2025 21:29:30 +0000 (16:29 -0500)]
Add PgBouncer to list of projects covered by CNA scope
Dave Page [Thu, 6 Feb 2025 11:17:25 +0000 (11:17 +0000)]
List 3rd party support/help resources on the website.
As discussed at the dev meeting in Brussels in January 2025.
Devrim Gunduz [Thu, 30 Jan 2025 10:00:55 +0000 (11:00 +0100)]
RHEL/Rocky/AlmaLinux supports PostgreSQL 16 as well via modules.
Melanie Plageman [Thu, 30 Jan 2025 08:29:51 +0000 (09:29 +0100)]
Add additional Contributor Committee links
The Contributors Committee wants to add our contact email to our
governance page and also link to the release notes from the
Contributor profile page. It should make it easier to know how to
contact us.
Dave Page [Mon, 27 Jan 2025 10:05:38 +0000 (10:05 +0000)]
Add EDB as a PGCA sponsor.
Dave Page [Wed, 22 Jan 2025 11:27:14 +0000 (11:27 +0000)]
Make more use of postgres as it's one of our marks.
Dave Page [Tue, 21 Jan 2025 09:23:14 +0000 (09:23 +0000)]
Use correct org name.
Magnus Hagander [Wed, 15 Jan 2025 12:20:41 +0000 (13:20 +0100)]
Add a help text indicating where the "contributions" field is used
Per discussion among moderators
Dave Page [Tue, 7 Jan 2025 09:28:07 +0000 (09:28 +0000)]
Add a page listing recognised NPOs.
Dave Page [Thu, 2 Jan 2025 09:53:05 +0000 (09:53 +0000)]
Update supported versions
Devrim Gunduz [Fri, 27 Dec 2024 17:12:03 +0000 (20:12 +0300)]
Retire Scientific Linux
Devrim Gunduz [Fri, 27 Dec 2024 17:11:06 +0000 (20:11 +0300)]
Make recent RHEL releases more prominent and remove remaining RHEL 6 stuff
Devrim Gunduz [Fri, 27 Dec 2024 17:08:12 +0000 (20:08 +0300)]
Retire RHEL/CentOS 6
Devrim Gunduz [Fri, 27 Dec 2024 17:06:47 +0000 (20:06 +0300)]
Update Fedora info
Dave Page [Thu, 19 Dec 2024 16:36:58 +0000 (16:36 +0000)]
PGCA sponsorship cost update.
Jonathan S. Katz [Wed, 18 Dec 2024 02:43:45 +0000 (21:43 -0500)]
Update infrastructure admin team page
Author: Joe Conway <mail@joeconway.com>
Jonathan S. Katz [Thu, 21 Nov 2024 16:15:21 +0000 (11:15 -0500)]
Update sponsor logo
Jonathan S. Katz [Thu, 21 Nov 2024 03:02:53 +0000 (22:02 -0500)]
2024-11-21 update release
Dave Page [Wed, 20 Nov 2024 17:00:53 +0000 (17:00 +0000)]
Update NPO text.
Per decision of the PGCA board. This removes a deadlock condition where an NPO that is
recognised could use the name, but an NPO that's being setup cannot yet be recognised.
All NPOs that use the marks in their name should apply for a licence now, as we can approve
that on the condition that they attain and retain recognised status. It also helps strengthen
the marks for us and the NPO.
Jonathan S. Katz [Thu, 14 Nov 2024 20:14:12 +0000 (15:14 -0500)]
Fix link to the "Planetary alignment blog post"
Reported-by: Tobias Bussmann <t.bussmann@gmx.net>
Jonathan S. Katz [Thu, 14 Nov 2024 04:09:02 +0000 (23:09 -0500)]
2024-11-14 release
David Rowley [Wed, 6 Nov 2024 06:07:27 +0000 (19:07 +1300)]
Adjust CSS to have tooltips in the H2 headings in the docs
There's been at least one complaint about a stray # that appears in the
manual. Add a tooltip to this to make it more clear why this appears
and what it's for.
Reported-by: Muhammad Ikram <mmikram@gmail.com>
Reviwed-by: Daniel Gustafsson <daniel@yesql.se>
Discussion: https://postgr.es/m/CAGeimVqnkm7X-cXNNXjdGL2u5N29RiFtcpUzPuW1-VYACe6m+Q@mail.gmail.com
Jonathan S. Katz [Tue, 15 Oct 2024 15:04:11 +0000 (11:04 -0400)]
Update Code of Conduct Committee
Jonathan S. Katz [Thu, 26 Sep 2024 02:52:07 +0000 (22:52 -0400)]
PostgreSQL 17 release announcement!
Jonathan S. Katz [Tue, 24 Sep 2024 02:49:01 +0000 (22:49 -0400)]
PostgreSQL 17 website content refresh
This is an annual pass over all of the content on the website to
ensure it's up-to-date for the press release.
Jonathan S. Katz [Sat, 21 Sep 2024 19:10:10 +0000 (15:10 -0400)]
PostgreSQL 17 press kit
The press kit for the PostgreSQL 17 release. This includes
translations of the press kit into the following languages:
- Chinese
- English
- French
- German
- Greek
- Hebrew
- Indonesian
- Italian
- Japanese
- Korean
- Polish
- Portuguese
- Russian
- Spanish
- Swedish
- Ukrainian
This includes contributions from the following folks:
- Adrian Klaver
- Alicja Kucharczyk
- Andrea Farci
- Andreas 'ads' Scherbaum
- Andrew Atkinson
- Anna Uraskova
- Carlos Chapi
- Cary Huang
- Daniel Gustafsson
- Daniel Westermann
- Dayeong Yoon
- Domenico Sgarbossa
- Ekaterina Kiryanova
- Elena Karavaeva
- Euler Taveira
- Gunnar "Nick" Bluth
- Grant Zhou
- Hervé Lefebvre
- Iis Khoerun Nisa
- Ioseph Kim
- Jaehan Choi
- Jean-Christophe Arnu
- Jimmy Angelakos
- Jonathan Katz
- Julyanto Sutandang
- Matthias van de Meent
- Michael Goldberg
- Nicolas Lutic
- Nozomi Anzai
- Pavlo Golub
- Peter Eisentraut
- Philippe Viegas
- Robert Haas
- Stefanie Janine Stölting
- Stéphane Schildknecht
- Szymon Lipiński
- Tetiana Petiurenko
- Xiangyu Liang
- Xueyu Gao
Many thanks to everyone who helped with the PostgreSQL 17
release announcement!
m
Jonathan S. Katz [Sat, 7 Sep 2024 18:00:10 +0000 (14:00 -0400)]
Reword contributors page and update links
This patch adds clarifications and updates links around the contributors
page.
Author: Melanie Plageman <melanieplageman@gmail.com>
Jonathan S. Katz [Thu, 5 Sep 2024 12:37:13 +0000 (08:37 -0400)]
PostgreSQL 17 RC1 release
Jonathan S. Katz [Mon, 12 Aug 2024 15:34:53 +0000 (11:34 -0400)]
Update "contributors" test fixture to match site language
Author: Christoph Berg <myon@debian.org>
Anthony DeBarros [Mon, 12 Aug 2024 13:38:43 +0000 (14:38 +0100)]
Make the download pages about macOS and Windows more readable via some minor edits.
On the Windows download page and macOS download page:
Transform the paragraph of items included in the EDB installer into a list for readability.
Split a long sentence in two.
Trim some wordiness/redundancies.
Remove italics around “Advanced users”.
Jonathan S. Katz [Thu, 8 Aug 2024 03:54:39 +0000 (23:54 -0400)]
2024-08-08 update release
Dave Page [Mon, 29 Jul 2024 08:45:47 +0000 (09:45 +0100)]
Clarify where to report installer issues.
Dave Page [Mon, 22 Jul 2024 14:30:20 +0000 (15:30 +0100)]
Format sponsor logos so they work regardless of light/dark mode.
Dave Page [Mon, 22 Jul 2024 14:05:15 +0000 (15:05 +0100)]
Fix type
projects / pgweb.git / log