Release steampipe-postgres-fdw v1.13.0

.github/workflows/buildimage.yml

@@ -38,10 +38,10 @@ jobs:
           ls -l $INTERNAL_LIB
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Setup Golang
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: 1.22
 
@@ -53,14 +53,14 @@ jobs:
 
       - name: Go Build Cache
         id: build-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-build }}
           key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}
 
       - name: Go Mod Cache
         id: mod-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-mod }}
           key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
@@ -113,21 +113,21 @@ jobs:
           mv build-Darwin/steampipe_postgres_fdw.so.gz build-Darwin/steampipe_postgres_fdw.so.darwin_amd64.gz
 
       - name: Save MacOS Build Artifact - AMD64
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: steampipe_postgres_fdw.so.darwin_amd64
           path: build-Darwin/steampipe_postgres_fdw.so.darwin_amd64.gz
           if-no-files-found: error
 
       - name: Save steampipe_postgres_fdw.control    # only need this once for ALL platforms
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: steampipe_postgres_fdw.control
           path: ./fdw/steampipe_postgres_fdw.control
           if-no-files-found: error
 
       - name: Save steampipe_postgres_fdw--1.0.sql   # only need this once for ALL platforms
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: steampipe_postgres_fdw--1.0.sql
           path: ./fdw/steampipe_postgres_fdw--1.0.sql
@@ -157,10 +157,10 @@ jobs:
           ls -l $INTERNAL_LIB
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Setup Golang
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: 1.22
 
@@ -172,14 +172,14 @@ jobs:
 
       - name: Go Build Cache
         id: build-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-build }}
           key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}
 
       - name: Go Mod Cache
         id: mod-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-mod }}
           key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
@@ -232,7 +232,7 @@ jobs:
           mv build-Darwin/steampipe_postgres_fdw.so.gz build-Darwin/steampipe_postgres_fdw.so.darwin_arm64.gz
 
       - name: Save MacOS Build Artifact - AMD64
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: steampipe_postgres_fdw.so.darwin_arm64
           path: build-Darwin/steampipe_postgres_fdw.so.darwin_arm64.gz
@@ -243,10 +243,10 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Setup GoLang
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: 1.22
 
@@ -258,14 +258,14 @@ jobs:
 
       - name: Go Build Cache
         id: build-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-build }}
           key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}
 
       - name: Go Mod Cache
         id: mod-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-mod }}
           key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
@@ -317,7 +317,7 @@ jobs:
           mv build-Linux/steampipe_postgres_fdw.so.gz build-Linux/steampipe_postgres_fdw.so.linux_amd64.gz
 
       - name: Save Linux Build Artifact - AMD64
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: steampipe_postgres_fdw.so.linux_amd64
           path: build-Linux/steampipe_postgres_fdw.so.linux_amd64.gz
@@ -328,10 +328,10 @@ jobs:
     runs-on: ubuntu-22.04-arm
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Setup GoLang
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: 1.22
 
@@ -343,14 +343,14 @@ jobs:
 
       - name: Go Build Cache
         id: build-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-build }}
           key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}
 
       - name: Go Mod Cache
         id: mod-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-mod }}
           key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
@@ -402,7 +402,7 @@ jobs:
           mv build-Linux/steampipe_postgres_fdw.so.gz build-Linux/steampipe_postgres_fdw.so.linux_arm64.gz
 
       - name: Save Linux Build Artifact - AMD64
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: steampipe_postgres_fdw.so.linux_arm64
           path: build-Linux/steampipe_postgres_fdw.so.linux_arm64.gz
@@ -433,37 +433,37 @@ jobs:
 
       - name: Download steampipe_postgres_fdw.so - darwin_amd64
         id: download_fdw_so_darwin_amd64
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: steampipe_postgres_fdw.so.darwin_amd64
 
       - name: Download steampipe_postgres_fdw.so - darwin_arm64
         id: download_fdw_so_darwin_arm64
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: steampipe_postgres_fdw.so.darwin_arm64
 
       - name: Download steampipe_postgres_fdw.so - linux_amd64
         id: download_fdw_so_linux_amd64
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: steampipe_postgres_fdw.so.linux_amd64
 
       - name: Download steampipe_postgres_fdw.so - linux_arm64
         id: download_fdw_so_linux_arm64
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: steampipe_postgres_fdw.so.linux_arm64
 
       - name: Download steampipe_postgres_fdw.control
         id: download_fdw_control
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: steampipe_postgres_fdw.control
 
       - name: Download steampipe_postgres_fdw--1.0.sql
         id: download_fdw_sql
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: steampipe_postgres_fdw--1.0.sql
 
@@ -472,7 +472,7 @@ jobs:
           ls -la
 
       - name: Create a draft release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
         id: create_draft_release
         with:
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/publish.yml

@@ -17,7 +17,7 @@ env:
 jobs:
   publish:
     name: Publish
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Get Release assets
         env:
@@ -47,7 +47,7 @@ jobs:
 
       # Login to GHCR
       - name: Log in to the Container registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}

.github/workflows/stale.yml

@@ -0,0 +1,39 @@
+name: Stale Issues and PRs
+on:
+  schedule:
+    - cron: "0 8 * * *"
+  workflow_dispatch:
+    inputs:
+      dryRun:
+        description: Set to true for a dry run
+        required: false
+        default: "false"
+        type: string
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Stale issues and PRs
+        id: stale-issues-and-prs
+        uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+        with:
+          close-issue-message: |
+            This issue was closed because it has been stalled for 90 days with no activity.
+          close-issue-reason: 'not_planned'
+          close-pr-message: |
+            This PR was closed because it has been stalled for 90 days with no activity.
+          # Set days-before-close to 30 because we want to close the issue/PR after 90 days total, since days-before-stale is set to 60
+          days-before-close: 30
+          days-before-stale: 60
+          debug-only: ${{ inputs.dryRun }}
+          exempt-issue-labels: 'good first issue,help wanted'
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          stale-issue-label: 'stale'
+          stale-issue-message: |
+            This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.
+          stale-pr-label: 'stale'
+          stale-pr-message: |
+            This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.
+          start-date: "2021-02-09"
+          operations-per-run: 1000

.github/workflows/test.yml

@@ -8,15 +8,15 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: 1.22
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@55c2c1448f86e01eaae002a5a3a9624417608d84 # v6.5.2
         continue-on-error: true # we dont want to enforce just yet
         with:
           version: v1.52.2
@@ -28,12 +28,12 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: 1.22
 
       - name: Checkout Steampipe
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
           repository: turbot/steampipe
@@ -47,14 +47,14 @@ jobs:
 
       - name: Go Build Cache
         id: build-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-build }}
           key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}
 
       - name: Go Mod Cache
         id: mod-cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.go-cache-paths.outputs.go-mod }}
           key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
@@ -72,7 +72,7 @@ jobs:
           steampipe query "select 1 as col"
 
       - name: Checkout FDW
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: turbot/steampipe-postgres-fdw
           path: steampipe-postgres-fdw
@@ -120,13 +120,13 @@ jobs:
           tar -czvf ../build.tar.gz ./build-$(uname)
 
       - name: Upload FDW Build
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: fdw-build
           path: build.tar.gz
 
       - name: Setup BATS
-        uses: mig4/setup-bats@v1
+        uses: mig4/setup-bats@af9a00deb21b5d795cabfeaa8d9060410377686d # v1.2.0
         with:
           bats-version: 1.2.1
 

CHANGELOG.md

@@ -1,3 +1,16 @@
+## v1.13.0 [2025-06-11]
+_Breaking changes_
+- Increased minimum required `glibc` version to `2.34` due to upgrading the Linux build environment from Ubuntu 20.04 to Ubuntu 22.04 GitHub runners. As a result, the FDW no longer supports older Linux distributions such as Ubuntu 20.04 and Amazon Linux 2.
+
+_Whats new_
+- Allow using `pprof` on FDW when `STEAMPIPE_FDW_PPROF` environment variable is set. ([#368](https://github.com/turbot/steampipe-postgres-fdw/issues/368))
+
+_Bug fixes_
+- Fix issue where the FDW ignored to apply filter for `anyOf` key columns for complex queries. ([#558](https://github.com/turbot/steampipe-postgres-fdw/issues/558))
+
+_Dependencies_
+- Upgrade `go-jose/v4` to remediate vulnerabilities.
+
 ## v1.12.7 [2025-06-03]
 _Dependencies_
 - Upgrade `golang.org/x/net` to remediate high vulnerabilities.

Makefile

@@ -7,10 +7,10 @@ PLATFORM=$(shell uname)
 GETTEXT_INCLUDE=$(shell dirname $(shell dirname $(shell readlink -f $(shell which gettext))))/include
 
 install: build
-	if test -d ~/.steampipe/db/14.2.0; then \
-		cp ./build-$(PLATFORM)/steampipe_postgres_fdw--1.0.sql $(STEAMPIPE_INSTALL_DIR)/db/14.2.0/postgres/share/postgresql/extension/; \
-		cp ./build-$(PLATFORM)/steampipe_postgres_fdw.control $(STEAMPIPE_INSTALL_DIR)/db/14.2.0/postgres/share/postgresql/extension/; \
-		cp ./build-$(PLATFORM)/steampipe_postgres_fdw.so $(STEAMPIPE_INSTALL_DIR)/db/14.2.0/postgres/lib/postgresql/; \
+	if test -d ~/.steampipe/db/14.17.0; then \
+		cp ./build-$(PLATFORM)/steampipe_postgres_fdw--1.0.sql $(STEAMPIPE_INSTALL_DIR)/db/14.17.0/postgres/share/postgresql/extension/; \
+		cp ./build-$(PLATFORM)/steampipe_postgres_fdw.control $(STEAMPIPE_INSTALL_DIR)/db/14.17.0/postgres/share/postgresql/extension/; \
+		cp ./build-$(PLATFORM)/steampipe_postgres_fdw.so $(STEAMPIPE_INSTALL_DIR)/db/14.17.0/postgres/lib/postgresql/; \
 	fi
 
 # build standalone