codenotary / immudb

85%

master: 85%

LAST BUILD ON BRANCH feat/s3performance

branch: feat/s3performance

CHANGE BRANCH

x

Reset

• feat/s3performance
• changelog/1.11.1
• chore/build-updates
• chore/deps-trivy-x-bumps
• chore/test-followups
• ci-regex-fix
• docker-init-db
• docs/rust-sdk-guidance
• fargate
• feat/auditlog
• feat/coalesce
• feature/between-and
• feature/constant-selection-query
• feature/discard-precommitted-txs
• feature/extract-from-timestamp
• feature/individual-col-primary-key
• feature/left-join
• feature/pgsql-catalog
• fix/2082-scan-latest
• fix/cas-notarize
• fix/display-actual-config-path-on-startup
• fix/empty-tree-flush
• fix/empty-tree-flush-file
• fix/index_metrix
• fix/issue-2100-sql-panics
• fix/multiapp-readat-keynotfound-race
• fix/swagger-test-go122-mux
• gh_action_update
• issue-2028
• master
• moshix-patch-8
• parallelvcn
• patch-1
• refs/tags/v1.1.0
• refs/tags/v1.10.0
• refs/tags/v1.11.0
• refs/tags/v1.11.0-RC2
• refs/tags/v1.11.1
• refs/tags/v1.2.0
• refs/tags/v1.2.0-RC1
• refs/tags/v1.2.1
• refs/tags/v1.2.2
• refs/tags/v1.2.3
• refs/tags/v1.2.3-RC1
• refs/tags/v1.2.4
• refs/tags/v1.2.4-RC1
• refs/tags/v1.3.0
• refs/tags/v1.3.0-RC1
• refs/tags/v1.3.1
• refs/tags/v1.3.2
• refs/tags/v1.3.2-RC1
• refs/tags/v1.4.0
• refs/tags/v1.4.0-RC1
• refs/tags/v1.4.0-RC2
• refs/tags/v1.4.1
• refs/tags/v1.4.1-RC1
• refs/tags/v1.5.0
• refs/tags/v1.5.0-RC1
• refs/tags/v1.9.0-RC1
• refs/tags/v1.9.0-RC2
• refs/tags/v1.9.3
• refs/tags/v1.9.4
• refs/tags/v1.9.5
• refs/tags/v1.9.6
• refs/tags/v1.9.7
• refs/tags/v1.9DOM
• refs/tags/v1.9DOM.0
• refs/tags/v1.9DOM.1
• refs/tags/v1.9DOM.1-RC1
• refs/tags/v1.9DOM.2
• refs/tags/v1.9DOM.2-RC1
• refs/tags/v2.0.0-RC1
• release/v1.10.0
• release/v1.2.4
• release/v1.2.4-RC1
• release/v1.3.0
• release/v1.3.0-RC1
• release/v1.3.1
• release/v1.3.2
• release/v1.3.2-RC1
• release/v1.4.0
• release/v1.4.0-RC1
• release/v1.4.0-RC2
• release/v1.4.1
• release/v1.4.1-RC1
• release/v1.5.0
• release/v1.5.0-RC1
• release/v1.9.0-RC1
• release/v1.9.0-RC2
• release/v1.9.3
• release/v1.9.4
• release/v1.9.5
• release/v1.9.6
• release/v1.9.7
• release/v1.9DOM
• release/v1.9DOM.0
• release/v1.9DOM.1
• release/v1.9DOM.1-RC1
• release/v1.9DOM.2
• release/v1.9DOM.2-RC1
• release/v2.0.0-RC1
• update-copyright-notice
• v2-prerelease

Build # 25361615784

Build Type

Pull #2094

gh-ci

Committed by vchaindz

Commit Message

chore(deps): bump jackc/pgx/v5 v5.9.1 -> v5.9.2 (CVE-2026-41889)

Patches a low-severity SQL-injection edge case in pgx's simple-protocol
codepath when a dollar-quoted string literal embeds attacker-controllable
placeholder text (GHSA-j88v-2chj-qfwx).

Not exploitable in immudb: pgx is a test-only dependency used by
pkg/pgsql/server/pgsql_{hardened,compat_integration,integration}_test.go
to drive the wire-compat layer with a real Postgres client. It is not
in the production package graph (`go list -deps ./cmd/... ./pkg/...
./embedded/...` returns 0 for jackc/pgx). Bumped purely to keep the
Dependabot alert clean.

Verified:
  go build ./...                                ok
  go test -count=1 ./pkg/pgsql/server/          ok

Pull Request Pull Request #2094: perf(s3): wave 1-4 remote-storage performance + sql index-only COUNT + hot-path fixes

Coverage Stats

616 of 855 new or added lines in 16 files covered. (72.05%)

4 existing lines in 2 files now uncovered.

45165 of 53102 relevant lines covered (85.05%)

126617.56 hits per line