Skip to content

release: prepare 0.5.0 - #87

Merged
KARTIKrocks merged 1 commit into
mainfrom
release/0.5.0
Sep 25, 2026
Merged

KARTIKrocks merged 1 commit into
mainfrom
release/0.5.0

Conversation

@KARTIKrocks

Copy link
Copy Markdown
Owner

First of the two release PRs, per
CONTRIBUTING:
the root tag comes first, the satellites are pinned to it afterwards. The eight
go.mod files still require v0.4.0 here and are updated once v0.5.0
exists.

What's in 0.5.0

Everything that accumulated under [Unreleased] since 0.4.0 — four bug fixes
in the insert-without-columns family (#68), the once-per-execution analysis fix
(#67), the parser parity test, and two behaviour changes.

Why this one gets a docs snapshot

VERSIONING.md rule 1: snapshot when a release changes documented behaviour, not
on every release. 0.5 changes it in three places, which is what the three
_Changed in 0.5._ markers in website/docs/ record:

  • insert-without-columns fires on every row-inserting keyword now — REPLACE,
    UPSERT, the INTO-less forms — and its message changed with it.
  • sqlguard explain --allow-dml admits REPLACE and UPSERT, which it
    previously refused as unrecognized statements.
  • A query on MySQL is analyzed once per execution rather than once per attempt,
    so a configured N+1 threshold is no longer effectively halved.

/docs/ has to keep describing 0.4 for anyone still on it. versions.json is
now 0.5, 0.4, 0.3, 0.2 — exactly the four maxLiveVersions builds, so
nothing drops out of the window.

Verification

  • make ci green (fmt-check, vet, lint, vuln, test-race, lint-docs across all
    nine modules).
  • GOWORK=off make test green — the run that resolves the satellites against
    the published v0.4.0 core rather than this tree, which is what a consumer
    builds.
  • cd website && npm run check green with the new snapshot in place (that is
    what the Docs workflow runs, and onBrokenLinks: 'throw' means a bad
    internal link in the snapshot would fail it).

After this merges

  1. git tag v0.5.0 && git push origin v0.5.0
  2. A second PR pinning the eight satellites to v0.5.0, verified with
    GOWORK=off.
  3. The eight <mod>/v0.5.0 tags.

Closes the [Unreleased] section as [0.5.0] and cuts the matching docs
snapshot.

0.5 earns a snapshot rather than markers because it changes documented
behaviour rather than only adding to it: `insert-without-columns` now fires on
every row-inserting keyword and its message changed with it, `sqlguard explain
--allow-dml` admits `REPLACE` and `UPSERT` where it previously refused them as
unrecognized statements, and a query on MySQL is analyzed once per execution
rather than once per attempt, which halves nothing in the N+1 counter any
more. `/docs/` has to keep describing 0.4 for anyone still on it, and
versions.json is now 0.5, 0.4, 0.3, 0.2 — exactly the four maxLiveVersions
builds.

Only the changelog and the snapshot are here. Per CONTRIBUTING the root tag
comes first and the satellites are pinned to it afterwards, so the eight
go.mod files still require v0.4.0 and are updated once v0.5.0 exists.
@codeant-ai

codeant-ai Bot commented Sep 25, 2026

Copy link
Copy Markdown

Skipping CodeAnt AI review — this PR is a back-merge between long-lived branches (release/0.5.0 → main). The diff here has already been reviewed when the underlying commits landed on the source branch, so re-running analysis would produce duplicate findings on already-reviewed code.

If you want to analyze this anyway (e.g. you resolved conflicts with new logic), comment @codeant-ai : review and CodeAnt will start a review.

@coderabbitai

coderabbitai Bot commented Sep 25, 2026

Copy link
Copy Markdown
Contributor

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Repository: KARTIKrocks/sqlguard/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 114d5479-e886-4a8d-bf70-b61d578fe7b2


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codeant-ai

codeant-ai Bot commented Sep 25, 2026

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit: a3c085f4
Scan Time: 2026-09-25 12:13:42 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality Gate Status Details
Secrets ✅ PASSED 0 secrets found
SAST ✅ PASSED No security issues
SCA (Dependencies) ✅ PASSED Rating S: No vulnerabilities

View Full Results

@KARTIKrocks
KARTIKrocks merged commit 5b7e8f8 into main Sep 25, 2026
31 checks passed
@KARTIKrocks
KARTIKrocks deleted the release/0.5.0 branch September 25, 2026 12:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant