Pigsty v4.4.0

PG 19 beta support, 531 extensions, kernel updates, pig CLI improvements

v4.4.0 · 2026-07-10

Pigsty v4.4.0 is a maintenance release centered on PostgreSQL 18.4, PostgreSQL 19 beta readiness, 531 extensions, refreshed kernel variants, and broader platform coverage.

Released on 2026-07-10. See the GitHub release and all changes since v4.3.0.

Highlights

PostgreSQL 18.4 / 19 beta: PostgreSQL 18.4 is now the production default, with a minimal PostgreSQL 19 beta template for evaluation.
531 extensions and refreshed kernels: The catalog adds 21 extensions and updates major PostgreSQL variants across the supported platform matrix.
Safer operations with Pig 1.5.1: New clone, fork, and PITR workflows arrive alongside automatic VIP discovery, Zstandard pgBackRest compression, and dedicated Patroni log collection.
Security, applications, and tooling: Secret handling and repository automation are hardened, with new app templates, a redesigned portal, and optional Codex support.
Platform validation: All 14 offline deployment tests pass across seven OS baselines on both x86_64 and aarch64.
Offline artifacts: The Community Edition publishes six dual-architecture offline packages for Debian 13, EL 10, and Ubuntu 24.04 on GitHub. Prebuilt packages for the other validated baselines are available with the Professional Edition.

Upgrade Notes

Generated pgBackRest configurations now use compress-type=zst; preserve intentional local overrides before re-rendering them. #744
Patroni logs now use /pg/log/patroni and job=patroni; update custom log queries and alert rules that use the old syslog selector.
VIP interfaces now default to auto, dnsmasq records move to /etc/dnsmasq.d/pigsty, and Pigsty manages /etc/default/haproxy; preserve explicit network overrides where needed.
The default etcd backend quota drops from 16 GiB to 8 GiB; check existing backend usage before applying the new configuration.
pig automation must use -y/--yes for destructive commands, while pig pb restore and pig pitr require one explicit recovery target. See the pig v1.5 notes.
Supabase analytics moves to the _supabase database and _analytics schema; existing deployments should create them before switching stacks.

Security and Operations

The pg-pitr wrapper adds safer target selection, timelines, dry runs, and stronger checks against unsafe recovery targets.
Application secrets are hidden from Ansible output, generated .env files use mode 0600, and Grafana no longer prints the administrator password.
The dbsu sudo policy gains controlled journal access, while the repository adds a security policy, CodeQL, Dependabot, pinned actions, and release-signing automation.

Applications and Tooling

Added Immich, Maybe, and JumpServer templates; refreshed Supabase, Dify, InsForge, Registry, Jupyter, Kong, Odoo, Teable, Mattermost, and related launch helpers.
Rebuilt the bilingual infrastructure portal and added opt-in Codex CLI support to the experimental VIBE module; Claude Code remains its default managed coding agent.
Removed the legacy FerretDB Compose template; the FERRET module remains available.

Bug Fixes

Fixed EL10 PostgreSQL/libpq provider conflicts, EPEL path handling, and PGDG minor-version repository rules. #752
Reused an existing /www directory during bootstrap and fixed Redis Sentinel HA password rendering. #753 #748
Corrected RPM naming and package groups for pg_http, pg_gzip, apache-age, and odbc_fdw. #750
Prevented unexpected service starts during Debian and Ubuntu package installation, and improved EL9 aarch64 Patroni package handling.
Fixed VirtualBox private-network routing and default NIC selection.
Fixed shell portability and Vector log lifecycle issues, along with PG19 io_workers, Teable HBA, and application runtime defaults.

PostgreSQL and Extension Package Changes

The release adds 21 extensions, updates the PostgreSQL 18.4 package graph, introduces the PostgreSQL 19 beta template, and refreshes major kernel variants. Versions below are verified against final repository metadata and, where bundled, the v4.4.0 artifacts; PG major ranges describe catalog and repository coverage.

PostgreSQL RPM changes · PostgreSQL DEB changes · Infrastructure package changes

Package	Old Version	New Version	Notes
`polardb-17`	`17.9.1.0`	`17.10.1.0`	PG 17; RPM added
`agensgraph-17`	`2.16.0`	`2.17.0`	PG 17.10
`openhalodb-14`	`1.0-beta`	`1.0-2`	OpenHaloDB
`babelfish-17`	`5.4.0`	`5.4.0`	PG 17.7; rebuild
`babelfish-18`	-	`6.0.0`	PG 18.3
`pgedge`	`17.9 / 18.3`	`15.18 / 16.14 / 17.10 / 18.4`	PG 15/16 added; PG 17/18 updated; Spock 5.0.10
`ivorysql-18`	`5.0`	`5.4`	PG 18; RPM added
`cloudberry`	`2.1.0-1`	`2.1.0-2 / 2.1.0-3`	DEB/RPM rebuild; RPM path `/usr/cloudberry`
`cloudberry-backup`	`2.1.0-1`	`2.1.0-2 / 2.1.0-3`	backup subpackage
`cloudberry-pxf`	`2.1.0-1`	`2.1.0-2 / 2.1.0-3`	PXF subpackage
`pg_ducklake`	-	`1.0.0`	PG 14-18
`psql_bm25s`	-	`0.4.13`	BM25 retrieval; PG 17-18
`mongo_fdw`	`5.5.3`	`5.5.3`	new DEB packaging; existing PGDG RPM, PG 14-18
`multicorn`	`3.2`	`3.2`	new DEB packaging; existing PGDG RPM, PG 14-18
`pg_orca`	-	`1.0.0`	PG 18 only
`pg_sorted_heap`	-	`0.14.0`	PG 16-18
`pg_stl`	-	`1.0.0`	PG 16-18
`fsm_core`	-	`1.1.0`	PG 15-18
`pg_projection`	-	`1.0.0`	PG 14-18
`graph`	-	`0.1.7`	PG 14-18
`jsonschema`	-	`0.1.9`	PG 14-18
`pg_durable`	-	`0.2.2`	PG 14-18
`pg_stat_log`	-	`0.1`	PG 18 only
`pg_stat_plans`	-	`2.1.0`	PG 16-18
`pg_task`	`1.0.0`	`2.1.29`	PG 14-18, pcre2grep fix
`pg_stat_backtrace`	-	`1.0.0`	PG 14-18; libunwind
`pg_mockable`	-	`1.1.0`	PG 14-18
`db2fce`	-	`0.0.17`	PG 14-18
`pg_uuid_v8`	-	`1.0.0`	PG 14-18
`pg_extra_time`	`2.0.0`	`2.1.0`	PG 14-18
`pg_pinyin`	`0.0.2`	`0.0.4`	PG 14-18
`passwordpolicy`	-	`2.0.5`	PG 14-18
`pgdisablelogerror`	-	`1.0`	PG 14-18
`plpgsql_wrap`	-	`1.0`	PG 14-18
`timescaledb`	`2.26.4`	`2.28.2`	PG 15-18
`documentdb`	`0.110`	`0.113`	PG 15-18
`citus`	`14.0.0-4`	`14.1.0`	PG 16-18
`pgvector`	`0.8.2`	`0.8.4`	PG 14-18
`orioledb`	`1.7-beta15`	`1.8-beta16`	Build for PG 16, 17, 18
`pg_search`	`0.23.1`	`0.24.0`	PG 15-18
`pg_textsearch`	`1.1.0`	`1.2.0`	BM25 full-text search, PG 17-18
`storage_engine`	`1.3.4`	`2.4.0`	PGXN 2.x bump, PG 15-18
`pg_clickhouse`	`0.2.0`	`0.3.2`	PGXN bump, ClickHouse integration
`provsql`	`1.2.3`	`1.10.0`	PGXN bump, PG 14-18
`pgclone`	`4.0.0`	`4.3.2`	PGXN bump, PG 14-18
`biscuit`	`2.2.2`	`2.4.0` DEB / `2.4.1` RPM	PG 16-18
`pgmnemo`	`0.7.2`	`0.12.1`	PG 14-18
`rdf_fdw`	`2.5.0`	`2.6.0`	PG 14-18, libcurl compatibility patch
`roaringbitmap`	`1.1.0`	`1.2.0-2`	PG 14-18, llvm-lto packaging fix
`plpgsql_check`	`2.9.0`	`2.9.2`	PG 14-18
`timescaledb_toolkit`	`1.22.0`	`1.23.0`	PG 15-18, pgrx 0.18.1
`wrappers`	`0.6.0`	`0.6.1`	PG 14-18, pgrx 0.18.1
`pgrdf`	`0.5.0`	`0.6.4`	PG 14-17, pgrx 0.18.1
`pg_graphql`	`1.5.12`	`1.6.1`	PG 14-18, pgrx 0.18.1
`pg_anon`	`3.0.13`	`3.1.1`	PG 14-18, pgrx 0.18.1
`pg_kazsearch`	`2.0.0`	`2.2.0`	PG 16-18, pgrx 0.18.1
`pg_session_jwt`	`0.4.0`	`0.5.0`	PG 14-18, pgrx 0.18.1
`pg_tzf`	`0.2.4`	`0.3.0`	PG 14-18, pgrx 0.18.1
`pg_vectorize`	`0.26.1`	`0.26.2`	PG 14-18, pgrx 0.18.1
`pglinter`	`1.1.2`	`2.0.0`	PG 14-18, pgrx 0.18.1
`pgmqtt`	`0.1.0`	`0.3.0`	PG 14-18, pgrx 0.18.1
`etcd_fdw`	`0.0.0`	`0.0.1`	PG 14-18, pgrx 0.18.1
`pg_http`	`1.7.0`	`1.7.1`	PG 14-18, RPM rename to `pgsql_http_$v`
`pg_gzip`	`1.0.0`	`1.1.0`	PG 14-18, RPM rename to `pgsql_gzip_$v`
`age`	`1.7.0`	`1.7.0`	PG 17-18, RPM rename to `age_$v`
`pg_trickle`	`0.40.0`	`0.81.0`	PG 18 only
`re2`	`0.1.1`	`0.4.0`	PG 16-18
`pg_background`	`1.9.2`	`2.0.2` DEB / `2.0` RPM	PG 14-18
`firebird_fdw`	`1.4.1`	`1.4.2`	PG 14-18
`pg_net`	`0.20.2`	`0.20.3`	DEB + EL10 RPM; EL8/9 RPM stays on `0.9.2`
`pg_dirtyread`	`2.7`	`2.8`	PG 14-18
`pg_stat_ch`	`0.3.6`	`0.3.6`	PG 16-18, rebuild
`pggraph`	`0.1.5`	`0.1.7`	PG 14-18
`pgsql_tweaks`	`1.0.2`	`1.0.5`	PG 14-18; PGDG RPM also carries `1.0.3`
`pgfincore`	`1.3.1`	`1.4.0`	PG 14-18
`toastinfo`	`1.5`	`1.7`	PG 14-18
`pg_ivm`	`1.14`	`1.15` DEB / `1.14` RPM	PG 14-18
`timeseries`	`0.2.0`	`0.2.1`	PG 14-18

Infrastructure Package Changes

Package	Old Version	New Version	Notes
`pig`	`1.4.1`	`1.5.1`
`pg_exporter`	`1.2.2`	`1.3.0`
`pgschema`	`1.9.0`	`1.12.0`
`pgstream`	`1.0.1`	`1.1.1`
`pg-hardstorage`	-	`1.0.8`
`codex`	`0.125.0`	`0.144.1`
`claude`	`2.1.123`	`2.1.206`
`opencode`	`1.14.30`	`1.17.18`
`agentsview`	`0.26.0`	`0.37.5`
`genai-toolbox`	`1.1.0`	`1.6.0`	packaged as `mcp-toolbox`
`crush`	`0.64.0`	`0.84.0`
`code`	`1.118.1`	`1.128.0`
`code-server`	`4.117.0`	`4.127.0`
`victoria-metrics`	`1.142.0`	`1.147.0`
`victoria-metrics-cluster`	`1.142.0`	`1.147.0`
`vmutils`	`1.142.0`	`1.147.0`
`victoria-logs`	`1.50.0`	`1.51.0`
`vlagent`	`1.50.0`	`1.51.0`
`vlogscli`	`1.50.0`	`1.51.0`
`victoria-traces`	`0.8.2`	`0.9.4`
`prometheus`	`3.11.3`	`3.13.1`
`alertmanager`	`0.32.1`	`0.33.1`
`pushgateway`	`1.11.2`	`1.11.3`
`node_exporter`	`1.11.1`	`1.11.1`	tarball cache; version metadata fix
`redis_exporter`	`1.82.0`	`1.86.0`
`mongodb_exporter`	`0.50.0`	`0.51.0`
`grafana`	`13.0.1`	`13.1.0`
`grafana-victorialogs-ds`	`0.26.3`	`0.29.0`
`grafana-victoriametrics-ds`	`0.24.0`	`0.25.2`
`vector`	`0.55.0`	`0.56.0`
`minio`	`20260417000000`	`20260618000000`
`seaweedfs`	`4.22`	`4.39`
`rustfs`	`1.0.0-b1`	`1.0.0-b8`	prerelease line
`duckdb`	`1.5.2`	`1.5.4`
`kafka`	`4.2.0`	`4.3.1`
`etcd`	`3.6.10`	`3.6.13`
`restic`	`0.18.1`	`0.19.1`
`juicefs`	`1.3.1`	`1.4.0`
`tigerbeetle`	`0.17.2`	`0.17.9`
`tigerfs`	`0.6.0`	`0.7.0`
`caddy`	`2.11.2`	`2.11.4`
`cloudflared`	`2026.2.0`	`2026.7.1`
`headscale`	`0.28.0`	`0.29.2`
`v2ray`	`5.48.0`	`5.51.2`
`nodejs`	`24.15.0`	`24.18.0`
`golang`	`1.26.2`	`1.26.5`
`hugo`	`0.161.1`	`0.164.0`
`uv`	`0.11.8`	`0.11.28`
`rclone`	`1.73.5`	`1.74.4`
`asciinema`	`3.2.0`	`3.2.1`
`stalwart`	`0.16.2`	`0.16.12`
`maddy`	`0.9.3`	`0.9.5`
`dblab`	`0.38.0`	`0.43.0`
`npgsqlrest`	`3.12.0`	`3.20.0`
`postgrest`	`14.10`	`14.14`
`sabiql`	`1.11.1`	`1.14.0`
`pev2`	`1.21.0`	`1.22.0`
`rainfrog`	`0.3.18`	`0.3.19`

The MD5 list below covers all 14 validated artifacts. Six Community Edition artifacts are published on GitHub, while the remaining eight are delivered with the Professional Edition. GitHub records SHA-256 digests for the uploaded Community Edition artifacts.

Checksums

7de8b932412f1863fd9c033a7be355d7  pigsty-pkg-v4.4.0.d12.aarch64.tgz
2e5006a8d35eb1c087dc0ed11cf14d14  pigsty-pkg-v4.4.0.d12.x86_64.tgz
955308c00d3890f6e82a6a83bc624760  pigsty-pkg-v4.4.0.d13.aarch64.tgz
350f31c66de0aafff3bd91c2c9d740a0  pigsty-pkg-v4.4.0.d13.x86_64.tgz
0b4817a8edbab0bdf37ecee730fb0412  pigsty-pkg-v4.4.0.el10.aarch64.tgz
4584a61e4456749e68d86e4817cfe526  pigsty-pkg-v4.4.0.el10.x86_64.tgz
21621daf510a532829c36464d48f9198  pigsty-pkg-v4.4.0.el9.aarch64.tgz
504afd5030e2738a25e1b4c570d0e654  pigsty-pkg-v4.4.0.el9.x86_64.tgz
461c999424dee587ca33fe1a63df40d7  pigsty-pkg-v4.4.0.u22.aarch64.tgz
20ccc5ab8f9f4648b05bcd304f9fb5fc  pigsty-pkg-v4.4.0.u22.x86_64.tgz
d092c48ee55116ed5e2c99a3d909ccdd  pigsty-pkg-v4.4.0.u24.aarch64.tgz
24fa5399d8421305961fcaf91325b382  pigsty-pkg-v4.4.0.u24.x86_64.tgz
36f69b699d8b3041d35384970e157631  pigsty-pkg-v4.4.0.u26.aarch64.tgz
330047d117b20f04317dce506edd5d9a  pigsty-pkg-v4.4.0.u26.x86_64.tgz
3077203c0c656ec99abc32b227f6566b  pigsty-v4.4.0.tgz