From 238d63f3b92ed58dcf5256ed83d11dd8d9501b6d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 16 Aug 2026 16:41:07 +0000 Subject: [PATCH 1/2] Bump pg-boss from 12.26.0 to 12.27.0 Bumps [pg-boss](https://github.com/timgit/pg-boss) from 12.26.0 to 12.27.0. - [Release notes](https://github.com/timgit/pg-boss/releases) - [Commits](https://github.com/timgit/pg-boss/compare/12.26.0...12.27.0) --- updated-dependencies: - dependency-name: pg-boss dependency-version: 12.27.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- package.json | 2 +- pnpm-lock.yaml | 49 ++++++++++++++++++++++++++++++++++++++----------- 2 files changed, 39 insertions(+), 12 deletions(-) diff --git a/package.json b/package.json index c1fac9b41..7f43e275d 100644 --- a/package.json +++ b/package.json @@ -84,7 +84,7 @@ "nodemailer": "9.0.3", "otpauth": "^9.5.1", "p-limit": "^7.3.1", - "pg-boss": "^12.26.0", + "pg-boss": "^12.27.0", "prisma": "^7.8.0", "qrcode": "^1.5.4", "radix-ui": "^1.6.2", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 9e8cd59f8..9e8a89ff1 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -115,8 +115,8 @@ importers: specifier: ^7.3.1 version: 7.3.1 pg-boss: - specifier: ^12.26.0 - version: 12.26.0 + specifier: ^12.27.0 + version: 12.27.0 prisma: specifier: ^7.8.0 version: 7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(typescript@6.0.3) @@ -3966,10 +3966,9 @@ packages: resolution: {integrity: sha512-piICUB6ei4IlTv1+653yq5+KoqfBYmj9bw6LqXoOneTMDXk5nM1qt12mFW1caG3LlJXEKW1Bp0WggEmIfQB34g==} engines: {node: '>= 14'} - cron-parser@5.6.2: - resolution: {integrity: sha512-yJ/G1LVir6CnlkLI40CsampPLKl1SprGGlUagWtGJxewytRVYezv5xVyzzbT+Pvzx+VIRvZVF7/a0eEMTxdnTA==} + cron-parser@5.10.0: + resolution: {integrity: sha512-izNAxJyRWUP8ljBoDSub5WyrVOUlT4SLGShswE7eoRBpp6QUsSycYxLBMJlbshgPBMcPT/nrfgjNY2918ayv2A==} engines: {node: '>=18'} - deprecated: 'Published tarball was built from a stale dist/ and is missing the fixes from #414 and #415 — its contents are effectively v5.6.1. Upgrade to v5.7.0.' cross-spawn@7.0.6: resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==} @@ -5850,8 +5849,8 @@ packages: performance-now@2.1.0: resolution: {integrity: sha512-7EAHlyLHI56VEIdK57uwHdHKIaAGbnXPiw0yWbarQZOKaKpvUIgW0jWRVLiatnM+XXlSwsanIBH/hzGMJulMow==} - pg-boss@12.26.0: - resolution: {integrity: sha512-qMLyokiG2/Ey8U3sptl0We4nRGr1iveHL/lQ7g6n7cI/ubp9HVJZJnfPf6B9jzAbpd55uSdltKL/DMkyBC0ynw==} + pg-boss@12.27.0: + resolution: {integrity: sha512-DawcUffyDVJvxGYvaoc7B+G1yY86dJtvugVYMAt+CtO6Lg+RSyQuAU7IRfNyhqi0Bo/JeaxLqhqIy5+twpmYlg==} engines: {node: '>=22.12.0'} hasBin: true @@ -5876,6 +5875,9 @@ packages: pg-protocol@1.15.0: resolution: {integrity: sha512-cq9sECI5s0+uPUXjbz8ioyPJni6RzsRib0US67i5IoTZKw8fNeYlVE7u8F4dG7vEJJtc5wdD1K189lCCUwqWTQ==} + pg-protocol@1.16.0: + resolution: {integrity: sha512-sILXutLVjCLjcDuOmvhX5e2Z4cS5qG/6Bu3VkpFwdf/633ElGLpEh9bgmuI5I4sqKqkifQiGyiCcx1HdtrK7tg==} + pg-types@2.2.0: resolution: {integrity: sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA==} engines: {node: '>=4'} @@ -5889,6 +5891,15 @@ packages: pg-native: optional: true + pg@8.23.0: + resolution: {integrity: sha512-Ip2EQCngowJLGOfCwkFhPXU7/ljlhn6Rxlmy4XYfL2Y+vyRM59+8uR2xqRWKdYmbXmxCFOAmKxBuSUCdF34qLg==} + engines: {node: '>= 16.0.0'} + peerDependencies: + pg-native: '>=3.0.1' + peerDependenciesMeta: + pg-native: + optional: true + pgpass@1.0.5: resolution: {integrity: sha512-FdW9r/jQZhSeohs1Z3sI1yxFQNFvMcnmfuj4WBMUTxOrAyLMaTcE1aAMBiTlbMNaXvBCQuVi0R7hd8udDSP7ug==} @@ -10920,7 +10931,7 @@ snapshots: crc-32: 1.2.2 readable-stream: 4.7.0 - cron-parser@5.6.2: + cron-parser@5.10.0: dependencies: luxon: 3.7.2 @@ -12957,10 +12968,10 @@ snapshots: performance-now@2.1.0: optional: true - pg-boss@12.26.0: + pg-boss@12.27.0: dependencies: - cron-parser: 5.6.2 - pg: 8.22.0 + cron-parser: 5.10.0 + pg: 8.23.0 serialize-error: 13.0.1 transitivePeerDependencies: - pg-native @@ -12976,10 +12987,16 @@ snapshots: dependencies: pg: 8.22.0 + pg-pool@3.14.0(pg@8.23.0): + dependencies: + pg: 8.23.0 + pg-protocol@1.13.0: {} pg-protocol@1.15.0: {} + pg-protocol@1.16.0: {} + pg-types@2.2.0: dependencies: pg-int8: 1.0.1 @@ -12998,6 +13015,16 @@ snapshots: optionalDependencies: pg-cloudflare: 1.4.0 + pg@8.23.0: + dependencies: + pg-connection-string: 2.14.0 + pg-pool: 3.14.0(pg@8.23.0) + pg-protocol: 1.16.0 + pg-types: 2.2.0 + pgpass: 1.0.5 + optionalDependencies: + pg-cloudflare: 1.4.0 + pgpass@1.0.5: dependencies: split2: 4.2.0 From c4860968458d8f1c224e85fd4b6ffea4dc5c67d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= Date: Sun, 16 Aug 2026 19:28:11 +0200 Subject: [PATCH 2/2] Re-verify the failed-row retention assumptions against pg-boss 12.27.0 The guard pins the installed version alongside the three source facts the 72-hour reader depends on, so a dependency bump has to stop and be looked at rather than sliding past. It did its job here: 12.27.0 tripped the version line. Checked the release against 12.26.0. The retention plan is untouched, all three assertions still match the shipped dist/plans.js verbatim. What moved sits in the fetch path (group concurrency reworked to a keyed JSONB lookup, schema names now routed through normalizeSchemaName / resolveSchemaName) and in start_after, which becomes inclusive so a job written with the default start time is fetchable on the next statement. None of that touches the failed-row ledger. So the assumption holds and the pin moves with it. --- src/lib/jobs/__tests__/job-failures-retention.test.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/jobs/__tests__/job-failures-retention.test.ts b/src/lib/jobs/__tests__/job-failures-retention.test.ts index e1437bbb2..f098283e1 100644 --- a/src/lib/jobs/__tests__/job-failures-retention.test.ts +++ b/src/lib/jobs/__tests__/job-failures-retention.test.ts @@ -16,7 +16,7 @@ describe("pg-boss failed-row ledger retention", () => { ) as { version: string }; const plans = readFileSync(join(PG_BOSS_ROOT, "dist/plans.js"), "utf8"); - expect(packageJson.version).toBe("12.26.0"); + expect(packageJson.version).toBe("12.27.0"); expect(plans).toContain("retention_seconds: FORTEEN_DAYS"); expect(plans).toContain("deletion_seconds: SEVEN_DAYS"); expect(plans).toContain(