Pigsty v4.4.0
Pigsty v4.4.0 is a maintenance release centered on PostgreSQL 18.4, PostgreSQL 19 beta readiness, 531 extensions, refreshed kernel variants, and broader platform coverage.
Released on 2026-07-10. See the GitHub release and all changes since v4.3.0.
Highlights
- PostgreSQL 18.4 / 19 beta: PostgreSQL 18.4 is now the production default, with a minimal PostgreSQL 19 beta template for evaluation.
- 531 extensions and refreshed kernels: The catalog adds 21 extensions and updates major PostgreSQL variants across the supported platform matrix.
- Safer operations with Pig 1.5.1: New clone, fork, and PITR workflows arrive alongside automatic VIP discovery, Zstandard pgBackRest compression, and dedicated Patroni log collection.
- Security, applications, and tooling: Secret handling and repository automation are hardened, with new app templates, a redesigned portal, and optional Codex support.
- Platform validation: All 14 offline deployment tests pass across seven OS baselines on both
x86_64andaarch64. - Offline artifacts: The Community Edition publishes six dual-architecture offline packages for Debian 13, EL 10, and Ubuntu 24.04 on GitHub. Prebuilt packages for the other validated baselines are available with the Professional Edition.
Upgrade Notes
- Generated pgBackRest configurations now use
compress-type=zst; preserve intentional local overrides before re-rendering them. #744 - Patroni logs now use
/pg/log/patroniandjob=patroni; update custom log queries and alert rules that use the old syslog selector. - VIP interfaces now default to
auto, dnsmasq records move to/etc/dnsmasq.d/pigsty, and Pigsty manages/etc/default/haproxy; preserve explicit network overrides where needed. - The default etcd backend quota drops from 16 GiB to 8 GiB; check existing backend usage before applying the new configuration.
pigautomation must use-y/--yesfor destructive commands, whilepig pb restoreandpig pitrrequire one explicit recovery target. See thepigv1.5 notes.- Supabase analytics moves to the
_supabasedatabase and_analyticsschema; existing deployments should create them before switching stacks.
Security and Operations
- The
pg-pitrwrapper adds safer target selection, timelines, dry runs, and stronger checks against unsafe recovery targets. - Application secrets are hidden from Ansible output, generated
.envfiles use mode0600, and Grafana no longer prints the administrator password. - The
dbsusudo policy gains controlled journal access, while the repository adds a security policy, CodeQL, Dependabot, pinned actions, and release-signing automation.
Applications and Tooling
- Added Immich, Maybe, and JumpServer templates; refreshed Supabase, Dify, InsForge, Registry, Jupyter, Kong, Odoo, Teable, Mattermost, and related launch helpers.
- Rebuilt the bilingual infrastructure portal and added opt-in Codex CLI support to the experimental VIBE module; Claude Code remains its default managed coding agent.
- Removed the legacy FerretDB Compose template; the FERRET module remains available.
Bug Fixes
- Fixed EL10 PostgreSQL/libpq provider conflicts, EPEL path handling, and PGDG minor-version repository rules. #752
- Reused an existing
/wwwdirectory during bootstrap and fixed Redis Sentinel HA password rendering. #753 #748 - Corrected RPM naming and package groups for
pg_http,pg_gzip,apache-age, andodbc_fdw. #750 - Prevented unexpected service starts during Debian and Ubuntu package installation, and improved EL9 aarch64 Patroni package handling.
- Fixed VirtualBox private-network routing and default NIC selection.
- Fixed shell portability and Vector log lifecycle issues, along with PG19
io_workers, Teable HBA, and application runtime defaults.
PostgreSQL and Extension Package Changes
The release adds 21 extensions, updates the PostgreSQL 18.4 package graph, introduces the PostgreSQL 19 beta template, and refreshes major kernel variants. Versions below are verified against final repository metadata and, where bundled, the v4.4.0 artifacts; PG major ranges describe catalog and repository coverage.
PostgreSQL RPM changes · PostgreSQL DEB changes · Infrastructure package changes
| Package | Old Version | New Version | Notes |
|---|---|---|---|
polardb-17 |
17.9.1.0 |
17.10.1.0 |
PG 17; RPM added |
agensgraph-17 |
2.16.0 |
2.17.0 |
PG 17.10 |
openhalodb-14 |
1.0-beta |
1.0-2 |
OpenHaloDB |
babelfish-17 |
5.4.0 |
5.4.0 |
PG 17.7; rebuild |
babelfish-18 |
- | 6.0.0 |
PG 18.3 |
pgedge |
17.9 / 18.3 |
15.18 / 16.14 / 17.10 / 18.4 |
PG 15/16 added; PG 17/18 updated; Spock 5.0.10 |
ivorysql-18 |
5.0 |
5.4 |
PG 18; RPM added |
cloudberry |
2.1.0-1 |
2.1.0-2 / 2.1.0-3 |
DEB/RPM rebuild; RPM path /usr/cloudberry |
cloudberry-backup |
2.1.0-1 |
2.1.0-2 / 2.1.0-3 |
backup subpackage |
cloudberry-pxf |
2.1.0-1 |
2.1.0-2 / 2.1.0-3 |
PXF subpackage |
pg_ducklake |
- | 1.0.0 |
PG 14-18 |
psql_bm25s |
- | 0.4.13 |
BM25 retrieval; PG 17-18 |
mongo_fdw |
5.5.3 |
5.5.3 |
new DEB packaging; existing PGDG RPM, PG 14-18 |
multicorn |
3.2 |
3.2 |
new DEB packaging; existing PGDG RPM, PG 14-18 |
pg_orca |
- | 1.0.0 |
PG 18 only |
pg_sorted_heap |
- | 0.14.0 |
PG 16-18 |
pg_stl |
- | 1.0.0 |
PG 16-18 |
fsm_core |
- | 1.1.0 |
PG 15-18 |
pg_projection |
- | 1.0.0 |
PG 14-18 |
graph |
- | 0.1.7 |
PG 14-18 |
jsonschema |
- | 0.1.9 |
PG 14-18 |
pg_durable |
- | 0.2.2 |
PG 14-18 |
pg_stat_log |
- | 0.1 |
PG 18 only |
pg_stat_plans |
- | 2.1.0 |
PG 16-18 |
pg_task |
1.0.0 |
2.1.29 |
PG 14-18, pcre2grep fix |
pg_stat_backtrace |
- | 1.0.0 |
PG 14-18; libunwind |
pg_mockable |
- | 1.1.0 |
PG 14-18 |
db2fce |
- | 0.0.17 |
PG 14-18 |
pg_uuid_v8 |
- | 1.0.0 |
PG 14-18 |
pg_extra_time |
2.0.0 |
2.1.0 |
PG 14-18 |
pg_pinyin |
0.0.2 |
0.0.4 |
PG 14-18 |
passwordpolicy |
- | 2.0.5 |
PG 14-18 |
pgdisablelogerror |
- | 1.0 |
PG 14-18 |
plpgsql_wrap |
- | 1.0 |
PG 14-18 |
timescaledb |
2.26.4 |
2.28.2 |
PG 15-18 |
documentdb |
0.110 |
0.113 |
PG 15-18 |
citus |
14.0.0-4 |
14.1.0 |
PG 16-18 |
pgvector |
0.8.2 |
0.8.4 |
PG 14-18 |
orioledb |
1.7-beta15 |
1.8-beta16 |
Build for PG 16, 17, 18 |
pg_search |
0.23.1 |
0.24.0 |
PG 15-18 |
pg_textsearch |
1.1.0 |
1.2.0 |
BM25 full-text search, PG 17-18 |
storage_engine |
1.3.4 |
2.4.0 |
PGXN 2.x bump, PG 15-18 |
pg_clickhouse |
0.2.0 |
0.3.2 |
PGXN bump, ClickHouse integration |
provsql |
1.2.3 |
1.10.0 |
PGXN bump, PG 14-18 |
pgclone |
4.0.0 |
4.3.2 |
PGXN bump, PG 14-18 |
biscuit |
2.2.2 |
2.4.0 DEB / 2.4.1 RPM |
PG 16-18 |
pgmnemo |
0.7.2 |
0.12.1 |
PG 14-18 |
rdf_fdw |
2.5.0 |
2.6.0 |
PG 14-18, libcurl compatibility patch |
roaringbitmap |
1.1.0 |
1.2.0-2 |
PG 14-18, llvm-lto packaging fix |
plpgsql_check |
2.9.0 |
2.9.2 |
PG 14-18 |
timescaledb_toolkit |
1.22.0 |
1.23.0 |
PG 15-18, pgrx 0.18.1 |
wrappers |
0.6.0 |
0.6.1 |
PG 14-18, pgrx 0.18.1 |
pgrdf |
0.5.0 |
0.6.4 |
PG 14-17, pgrx 0.18.1 |
pg_graphql |
1.5.12 |
1.6.1 |
PG 14-18, pgrx 0.18.1 |
pg_anon |
3.0.13 |
3.1.1 |
PG 14-18, pgrx 0.18.1 |
pg_kazsearch |
2.0.0 |
2.2.0 |
PG 16-18, pgrx 0.18.1 |
pg_session_jwt |
0.4.0 |
0.5.0 |
PG 14-18, pgrx 0.18.1 |
pg_tzf |
0.2.4 |
0.3.0 |
PG 14-18, pgrx 0.18.1 |
pg_vectorize |
0.26.1 |
0.26.2 |
PG 14-18, pgrx 0.18.1 |
pglinter |
1.1.2 |
2.0.0 |
PG 14-18, pgrx 0.18.1 |
pgmqtt |
0.1.0 |
0.3.0 |
PG 14-18, pgrx 0.18.1 |
etcd_fdw |
0.0.0 |
0.0.1 |
PG 14-18, pgrx 0.18.1 |
pg_http |
1.7.0 |
1.7.1 |
PG 14-18, RPM rename to pgsql_http_$v |
pg_gzip |
1.0.0 |
1.1.0 |
PG 14-18, RPM rename to pgsql_gzip_$v |
age |
1.7.0 |
1.7.0 |
PG 17-18, RPM rename to age_$v |
pg_trickle |
0.40.0 |
0.81.0 |
PG 18 only |
re2 |
0.1.1 |
0.4.0 |
PG 16-18 |
pg_background |
1.9.2 |
2.0.2 DEB / 2.0 RPM |
PG 14-18 |
firebird_fdw |
1.4.1 |
1.4.2 |
PG 14-18 |
pg_net |
0.20.2 |
0.20.3 |
DEB + EL10 RPM; EL8/9 RPM stays on 0.9.2 |
pg_dirtyread |
2.7 |
2.8 |
PG 14-18 |
pg_stat_ch |
0.3.6 |
0.3.6 |
PG 16-18, rebuild |
pggraph |
0.1.5 |
0.1.7 |
PG 14-18 |
pgsql_tweaks |
1.0.2 |
1.0.5 |
PG 14-18; PGDG RPM also carries 1.0.3 |
pgfincore |
1.3.1 |
1.4.0 |
PG 14-18 |
toastinfo |
1.5 |
1.7 |
PG 14-18 |
pg_ivm |
1.14 |
1.15 DEB / 1.14 RPM |
PG 14-18 |
timeseries |
0.2.0 |
0.2.1 |
PG 14-18 |
Infrastructure Package Changes
| Package | Old Version | New Version | Notes |
|---|---|---|---|
pig |
1.4.1 |
1.5.1 |
|
pg_exporter |
1.2.2 |
1.3.0 |
|
pgschema |
1.9.0 |
1.12.0 |
|
pgstream |
1.0.1 |
1.1.1 |
|
pg-hardstorage |
- | 1.0.8 |
|
codex |
0.125.0 |
0.144.1 |
|
claude |
2.1.123 |
2.1.206 |
|
opencode |
1.14.30 |
1.17.18 |
|
agentsview |
0.26.0 |
0.37.5 |
|
genai-toolbox |
1.1.0 |
1.6.0 |
packaged as mcp-toolbox |
crush |
0.64.0 |
0.84.0 |
|
code |
1.118.1 |
1.128.0 |
|
code-server |
4.117.0 |
4.127.0 |
|
victoria-metrics |
1.142.0 |
1.147.0 |
|
victoria-metrics-cluster |
1.142.0 |
1.147.0 |
|
vmutils |
1.142.0 |
1.147.0 |
|
victoria-logs |
1.50.0 |
1.51.0 |
|
vlagent |
1.50.0 |
1.51.0 |
|
vlogscli |
1.50.0 |
1.51.0 |
|
victoria-traces |
0.8.2 |
0.9.4 |
|
prometheus |
3.11.3 |
3.13.1 |
|
alertmanager |
0.32.1 |
0.33.1 |
|
pushgateway |
1.11.2 |
1.11.3 |
|
node_exporter |
1.11.1 |
1.11.1 |
tarball cache; version metadata fix |
redis_exporter |
1.82.0 |
1.86.0 |
|
mongodb_exporter |
0.50.0 |
0.51.0 |
|
grafana |
13.0.1 |
13.1.0 |
|
grafana-victorialogs-ds |
0.26.3 |
0.29.0 |
|
grafana-victoriametrics-ds |
0.24.0 |
0.25.2 |
|
vector |
0.55.0 |
0.56.0 |
|
minio |
20260417000000 |
20260618000000 |
|
seaweedfs |
4.22 |
4.39 |
|
rustfs |
1.0.0-b1 |
1.0.0-b8 |
prerelease line |
duckdb |
1.5.2 |
1.5.4 |
|
kafka |
4.2.0 |
4.3.1 |
|
etcd |
3.6.10 |
3.6.13 |
|
restic |
0.18.1 |
0.19.1 |
|
juicefs |
1.3.1 |
1.4.0 |
|
tigerbeetle |
0.17.2 |
0.17.9 |
|
tigerfs |
0.6.0 |
0.7.0 |
|
caddy |
2.11.2 |
2.11.4 |
|
cloudflared |
2026.2.0 |
2026.7.1 |
|
headscale |
0.28.0 |
0.29.2 |
|
v2ray |
5.48.0 |
5.51.2 |
|
nodejs |
24.15.0 |
24.18.0 |
|
golang |
1.26.2 |
1.26.5 |
|
hugo |
0.161.1 |
0.164.0 |
|
uv |
0.11.8 |
0.11.28 |
|
rclone |
1.73.5 |
1.74.4 |
|
asciinema |
3.2.0 |
3.2.1 |
|
stalwart |
0.16.2 |
0.16.12 |
|
maddy |
0.9.3 |
0.9.5 |
|
dblab |
0.38.0 |
0.43.0 |
|
npgsqlrest |
3.12.0 |
3.20.0 |
|
postgrest |
14.10 |
14.14 |
|
sabiql |
1.11.1 |
1.14.0 |
|
pev2 |
1.21.0 |
1.22.0 |
|
rainfrog |
0.3.18 |
0.3.19 |
The MD5 list below covers all 14 validated artifacts. Six Community Edition artifacts are published on GitHub, while the remaining eight are delivered with the Professional Edition. GitHub records SHA-256 digests for the uploaded Community Edition artifacts.