What’s New
More detailed information about changes in individual versions can be found directly in GitHub Releases.
v1.3.0
- 🌐 PgArachne Explorer – modern PWA: Complete visual & functional refresh – dark/light theme (auto), responsive cards layout, JSON syntax highlighting, copy-to-clipboard button, better auth UX (password/token tabs), PWA install support (manifest, icons, service worker), shareable links via
?url=…parameter. - 🛠️ Model Context Protocol (MCP) support: New endpoint
/{prefix}/{db}/mcpwith standard methodsresources/list,resources/read,prompts/list,prompts/get– fully backed by PostgreSQL functions and reusing existing auth & role switching. - 🔧 Configurable API prefix: Default changed to
/db/{database}/jsonrpcand/db/{database}/sse. Old/api/…paths now return permanent 307 redirects. Controlled via newAPI_PREFIXenvironment variable. - 🛡️ Idempotency protection: Optional
idempotencyKeyfield in JSON-RPC requests – automatic duplicate detection (HTTP 409 + error code on collision) usingpgarachne.save_idempotency_key(). - 📚 Documentation improvements: New /tools/ section with cards (Explorer + upcoming macOS Toolbar), new page “Architectural Decisions”, SECURITY.md with vulnerability reporting instructions, better typography across all languages via TypoLima, improved 404 page support for GitHub Pages.
- 📝 Login method rename: JSON-RPC method
loginrenamed toget_jwt(old name kept as deprecated alias with warning in logs). - 📊 Logging cleanup: When logging to file, console shows only minimal startup info → cleaner output in production/docker environments.
v1.2.0
- 🛡️ Security: Access token validation now occurs before establishing a database connection. Improved protection against IP spoofing (added
TRUSTED_PROXIESsetting) and hiding internal database errors from end users. - 📊 Isolated Metrics: The Prometheus
/metricsendpoint moved from the public API to its own secure port (by default available only on127.0.0.1:9090). - 📦 New Installation Option: The project now has an official Homebrew tap for macOS and Linux. Builds are signed and generated via GoReleaser.
- 📚 Redesigned Documentation: Completely new look built on the Hugo framework. Added lightning-fast full-text search, code copying capabilities, and production deployment examples (Nginx hardening, BYO JWT).
- ⚙️ Improved Daemon Management: Added support for custom
PID_FILEpath configuration.
v1.1.0
- 🔌 Unified API: All calls go through
POST /api/<db>(the called method is specified in the JSON-RPC body). - ⚡ Real-time Notifications: New endpoint
GET /sse/<db>?channels=...for listening to database events with multi-channel support. - 📈 Observability: Detailed Prometheus metrics for HTTP, auth, JSON-RPC, and SSE.
- 🏋️ Major Stability Improvements: Protection against slow clients, strict timeouts, and automatic connection cleanup.