This release includes various security fixes from dependency upgrades.
What’s Changed
- Update pgx to v5.11.0 and preserve timestamp decoding (#4975) @ilidemi
- Update decimal to v1.5.0 and preserve large numeric values (#4976) @ilidemi
- Mongodb sampling-based objectid range fix (#4970) @jgao54, @claude, @tanya-whyte-clickhouse
- fix(deps): update gomod dependencies (#4891) @renovate[bot], @ilidemi
- Fix ClickHouse JSON test readback with flattened serialization (#4978) @ilidemi
- refactor(clickhouse): reuse table mapping and column setting lookups (#4971) @dtunikov, @claude
- chore(deps): update github-actions dependencies (#4938) @renovate[bot], @ilidemi
- chore(deps): lock file maintenance (#4936) @renovate[bot]
- chore(deps): update dockerfile dependencies (#4939) @renovate[bot], @ilidemi
- security: pin UI Node image to fixed 24.22.1 (CVE-2026-111497 / Node2Shell) (#4973) @motsc
- fix(clickhouse): honor column destination_name in initial load (#4963) @dtunikov, @claude
- fix(query-cdc): only catch up when the poll window was capped (#4968) @dtunikov, @claude
- fix(pg-pg): exclude peerdb internal and policies from dump (#4921) @Amogh-Bharadwaj
- fix(postgres): keep the JSON form of a json/jsonb column default on ADD COLUMN (#4966) @gheorghepucea
- fix(clickhouse): honour per-column destination types in the snapshot JSON cast (#4965) @gheorghepucea
- fix(postgres): keep unchanged toast columns on delete rows (#4951) @ReguiguiMohamed
- safe command monitor debugging (#4961) @jgao54
- fix(clickhouse): write {} for SQL NULL into plain JSON column on CDC (#4955) @gheorghepucea
- CI versions table: Bump MongoDB 8.X version from 8.0 to 8.2 (#4956) @pfcoperez