chore(deps): bump pg from 8.16.3 to 8.23.0 by dependabot[bot] · Pull Request #222 · flyingrobots/db8

dependabot · 2026-08-17T07:45:50Z

Bumps pg from 8.16.3 to 8.23.0.

Changelog

pg@8.23.0

Add support for query pipelineing.

pg@8.22.0

Add support for sslnegotiation=direct for PostgreSQL 17+.

pg@8.21.0

Handle SASL SCRAM server error responses properly.

Add support for node@26.

Add scramMaxIterations config option.

Add client.getTransactionStatus() method.

pg@8.20.0

Add onConnect callback to pg.Pool constructor options allowing for async initialization of newly created & connected pooled clients.

pg@8.19.0

Deprecate interal query queue.

Pass connection parameters to password callback.

pg@8.18.0

Return the client instance as the result of calling connect (previously it was void).

pg@8.17.0

Throw correct error if database URL parsing fails.

pg@8.16.0

Add support for min connection pool size.

pg@8.15.0

Add support for esm importing. CommonJS importing is still also supported.

pg@8.14.0

Add support for SCRAM-SHA-256-PLUS, i.e. channel binding.

pg@8.13.0

Add ability to specify query timeout on per-query basis.

pg@8.12.0

... (truncated)

Commits

df274d1 Publish
eb19d0f Add opt-in query pipelining (#3652)
b617619 Publish
d80b261 Update docs & changelog
835fb83 Fix error handling for exceptions on values parsing. (#3574)
f49ab4a fix: correct spelling mistakes across codebase (#3692)
d7175a4 Expand CI matrix of PG versions and add direct SSL test (#3693)
882fc30 Add support for sslnegotiation=direct (PostgreSQL 17) (#3688)
544b1ce Publish
cc03fa5 Add scramMaxIterations option to limit SCRAM iteration count (#3677)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) from 8.16.3 to 8.23.0. - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg) --- updated-dependencies: - dependency-name: pg dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

flyingrobots · 2026-10-29T11:26:04Z

@coderabbitai full review

coderabbitai · 2026-10-29T11:26:10Z

⚠️ Action not completed

Review skipped.

coderabbitai · 2026-10-29T11:26:14Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: 82605da7-209d-4121-969d-c5c1844d6a3b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

flyingrobots · 2026-10-29T15:24:21Z

@codex review

chatgpt-codex-connector · 2026-10-29T15:24:39Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-29T16:00:48.134121Z	`3c854aa`	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

chatgpt-codex-connector · 2026-10-29T15:25:37Z

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: 6ed97d05be

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

flyingrobots · 2026-10-29T15:26:58Z

@dependabot rebase

…rn/pg-8.23.0 Resolved package.json and package-lock.json: main's files with pg ^8.23.0; the lockfile regenerated with npm install --package-lock-only resolves pg 8.23.1. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

flyingrobots · 2026-10-29T15:59:36Z

@codex review

chatgpt-codex-connector · 2026-10-29T16:00:46Z

Codex Review: Didn't find any major issues. Keep it up!

Reviewed commit: 3c854aabbe

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

flyingrobots · 2026-10-29T16:02:31Z

Activity Summary (Code Lawyer)

Review covers head 3c854aa. No review threads; no change needed.

Check	Result
Change	`pg` ^8.13.1 → ^8.23.0 (runtime, optional dependency). After main was merged in (`3c854aa`, because Dependabot did not respond to a rebase request), the lockfile resolves `pg` 8.23.1.
Breaking changes	none relevant: 8.17 gives a correct error for a URL that does not parse; 8.18 `connect()` returns the client; 8.19 deprecates the internal query queue; 8.20–8.23 add features (onConnect, SCRAM fixes, sslnegotiation, pipelining). The #257 classifier reads `code`, `severity` and `message`, and these did not change.
CI	all checks pass at `3c854aa`
Bot review	CodeRabbit skips bot-authored PRs (no seat), and the local Codex CLI hangs on this machine. The Codex GitHub app reviewed `3c854aa`: "Didn't find any major issues."
Extra evidence	full Docker suite, run twice: on main with pg 8.23.0 (471 tests without a database, 542 with Postgres), and in the pre-push hook on `3c854aa` with pg 8.23.1 (471 / 542)

Merge gate: 0 approvals (none is possible from a reviewer bot here). It is merged under the owner's instruction to take the open PRs to main.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026

flyingrobots merged commit 75fe337 into main Oct 29, 2026
6 checks passed

flyingrobots deleted the dependabot/npm_and_yarn/pg-8.23.0 branch October 29, 2026 16:02

Navigation Menu

Repository navigation

chore(deps): bump pg from 8.16.3 to 8.23.0 - #222

chore(deps): bump pg from 8.16.3 to 8.23.0#222
flyingrobots merged 2 commits into
mainfrom
dependabot/npm_and_yarn/pg-8.23.0

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

coderabbitai Bot commented Oct 29, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 29, 2026 •

edited

Loading

Review skipped

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 29, 2026 •

edited

Loading

Uh oh!

chatgpt-codex-connector Bot commented Oct 29, 2026

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 29, 2026

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

pg@8.23.0

pg@8.22.0

pg@8.21.0

pg@8.20.0

pg@8.19.0

pg@8.18.0

pg@8.17.0

pg@8.16.0

pg@8.15.0

pg@8.14.0

pg@8.13.0

pg@8.12.0

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

coderabbitai Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codex Review Summary

Uh oh!

chatgpt-codex-connector Bot commented Oct 29, 2026

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

flyingrobots commented Oct 29, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 29, 2026

Uh oh!

flyingrobots commented Oct 29, 2026

Activity Summary (Code Lawyer)

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

coderabbitai Bot commented Oct 29, 2026 •

edited

Loading

coderabbitai Bot commented Oct 29, 2026 •

edited

Loading

chatgpt-codex-connector Bot commented Oct 29, 2026 •

edited

Loading