2 min read

What’s New

More detailed information about changes in individual versions can be found directly in GitHub Releases.

v1.3.0

  • 🌐 PgArachne Explorer – modern PWA: Complete visual & functional refresh – dark/light theme (auto), responsive cards layout, JSON syntax highlighting, copy-to-clipboard button, better auth UX (password/token tabs), PWA install support (manifest, icons, service worker), shareable links via ?url=… parameter.
  • 🛠️ Model Context Protocol (MCP) support: New endpoint /{prefix}/{db}/mcp with standard methods resources/list, resources/read, prompts/list, prompts/get – fully backed by PostgreSQL functions and reusing existing auth & role switching.
  • 🔧 Configurable API prefix: Default changed to /db/{database}/jsonrpc and /db/{database}/sse. Old /api/… paths now return permanent 307 redirects. Controlled via new API_PREFIX environment variable.
  • 🛡️ Idempotency protection: Optional idempotencyKey field in JSON-RPC requests – automatic duplicate detection (HTTP 409 + error code on collision) using pgarachne.save_idempotency_key().
  • 📚 Documentation improvements: New /tools/ section with cards (Explorer + upcoming macOS Toolbar), new page “Architectural Decisions”, SECURITY.md with vulnerability reporting instructions, better typography across all languages via TypoLima, improved 404 page support for GitHub Pages.
  • 📝 Login method rename: JSON-RPC method login renamed to get_jwt (old name kept as deprecated alias with warning in logs).
  • 📊 Logging cleanup: When logging to file, console shows only minimal startup info → cleaner output in production/docker environments.

v1.2.0

  • 🛡️ Security: Access token validation now occurs before establishing a database connection. Improved protection against IP spoofing (added TRUSTED_PROXIES setting) and hiding internal database errors from end users.
  • 📊 Isolated Metrics: The Prometheus /metrics endpoint moved from the public API to its own secure port (by default available only on 127.0.0.1:9090).
  • 📦 New Installation Option: The project now has an official Homebrew tap for macOS and Linux. Builds are signed and generated via GoReleaser.
  • 📚 Redesigned Documentation: Completely new look built on the Hugo framework. Added lightning-fast full-text search, code copying capabilities, and production deployment examples (Nginx hardening, BYO JWT).
  • ⚙️ Improved Daemon Management: Added support for custom PID_FILE path configuration.

v1.1.0

  • 🔌 Unified API: All calls go through POST /api/<db> (the called method is specified in the JSON-RPC body).
  • Real-time Notifications: New endpoint GET /sse/<db>?channels=... for listening to database events with multi-channel support.
  • 📈 Observability: Detailed Prometheus metrics for HTTP, auth, JSON-RPC, and SSE.
  • 🏋️ Major Stability Improvements: Protection against slow clients, strict timeouts, and automatic connection cleanup.