supabase-postgres.git / summary / log / commit / refs
commit 1ba4bbbdb19c5fbf0b306e9aba33ea789fe2f1b7
Author: samrose <samuel@supabase.io>
Commit: GitHub <noreply@github.com>
Date: Tue Apr 21 18:19:25 2026 +0000
Fix supautils in authenticator session_preload_libraries (#2113)
* fix: assure supautils on session_preload_libraries in authenticator role
* fix: expected output
* fix: quoting
* fix: regress tests
* chore: bump versions to release
ansible/vars.yml | 6 +++---
...20260413000000_fix-authenticator-session-preload-libraries.sql | 8 ++++++++
nix/tests/expected/roles.out | 6 +++---
nix/tests/expected/z_multigres-orioledb-17_roles.out | 6 +++---
4 files changed, 17 insertions(+), 9 deletions(-)
diff --git a/ansible/vars.yml b/ansible/vars.yml
index 6a903f0b..9f1b5058 100644
--- a/ansible/vars.yml
+++ b/ansible/vars.yml
@@ -10,9 +10,9 @@ postgres_major:
# Full version strings for each major version
postgres_release:
- postgresorioledb-17: "17.6.0.065-orioledb"
- postgres17: "17.6.1.108"
- postgres15: "15.14.1.108"
+ postgresorioledb-17: "17.6.0.066-orioledb"
+ postgres17: "17.6.1.109"
+ postgres15: "15.14.1.109"
# Non Postgres Extensions
pgbouncer_release: 1.25.1
diff --git a/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql b/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql
new file mode 100644
index 00000000..4e95f40c
--- /dev/null
+++ b/migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql
@@ -0,0 +1,8 @@
+-- migrate:up
+
+-- The original fix in 20220224211803 checked pg_available_extensions for
+-- supautils, but supautils is a preload library without a .control file,
+-- so it never appears in pg_available_extensions. That migration was a no-op.
+ALTER ROLE authenticator SET session_preload_libraries = supautils, safeupdate;
+
+-- migrate:down
diff --git a/nix/tests/expected/roles.out b/nix/tests/expected/roles.out
index a457f402..78a60dc2 100644
--- a/nix/tests/expected/roles.out
+++ b/nix/tests/expected/roles.out
@@ -60,11 +60,11 @@ select
from pg_roles r
where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections')
order by rolname;
- rolname | rolconfig
-----------------------------+---------------------------------------------------------------------------------
+ rolname | rolconfig
+----------------------------+------------------------------------------------------------------------------------------
anon | {statement_timeout=3s}
authenticated | {statement_timeout=8s}
- authenticator | {session_preload_libraries=safeupdate,statement_timeout=8s,lock_timeout=8s}
+ authenticator | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s}
dashboard_user |
pg_checkpoint |
pg_database_owner |
diff --git a/nix/tests/expected/z_multigres-orioledb-17_roles.out b/nix/tests/expected/z_multigres-orioledb-17_roles.out
index a307b201..9e530eee 100644
--- a/nix/tests/expected/z_multigres-orioledb-17_roles.out
+++ b/nix/tests/expected/z_multigres-orioledb-17_roles.out
@@ -57,11 +57,11 @@ select
from pg_roles r
where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections')
order by rolname;
- rolname | rolconfig
-----------------------------+---------------------------------------------------------------------------------
+ rolname | rolconfig
+----------------------------+------------------------------------------------------------------------------------------
anon | {statement_timeout=3s}
authenticated | {statement_timeout=8s}
- authenticator | {session_preload_libraries=safeupdate,statement_timeout=8s,lock_timeout=8s}
+ authenticator | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s}
dashboard_user |
pg_checkpoint |
pg_database_owner |
[parent: e37e0835018d]