v0.5.0.0

Added

• The configuration (e.g. postgrest.conf) now accepts arbitrary settings that will be passed through as session-local database settings. This can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)" will take MYAPP_JWT_SECRET from the environment and make it available to postgresql functions as current_setting('app.settings.jwt_secret'). Only app.settings.* values in the configuration file are treated in this way. - @canadaduane
• #256, Add support for bulk UPSERT with POST and single UPSERT with PUT - @steve-chavez
• #1078, Add ability to specify source column in embed - @steve-chavez
• #821, Allow embeds alias to be used in filters - @steve-chavez
• #906, Add jspath configurable role-claim-key - @steve-chavez
• #1061, Add foreign tables to OpenAPI output - @rhyamada

Fixed

• #828, Fix computed column only working in public schema - @steve-chavez
• #925, Fix RPC high memory usage by using parametrized query and avoiding json encoding - @steve-chavez
• #987, Fix embedding with self-reference foreign key - @steve-chavez
• #1044, Fix view parent embedding when having many views - @steve-chavez
• #781, Fix accepting misspelled desc/asc ordering modificators - @onporat, @steve-chavez

Changed

• #828, A SET SCHEMA <db-schema> is done on each request, this has the following implications:
  • Computed columns now only work if they belong to the db-schema
  • Stored procedures might require a search_path to work properly, for further details see https://postgrest.org/en/v5.0/api.html#explicit-qualification
• To use RPC now the json_to_record/json_to_recordset functions are needed, these are available starting from PostgreSQL 9.4 - @steve-chavez
• Overloaded functions now depend on the dbStructure, restart/sighup may be needed for their correct functioning - @steve-chavez
• #1098, Removed support for:
  • curly braces {} in embeds, i.e. /clients?select=*,projects{*} can no longer be used, from now on parens () should be used /clients?select=*,projects(*) - @steve-chavez
  • "in" operator without parens, i.e. /clients?id=in.1,2,3 no longer supported, /clients?id=in.(1,2,3) should be used - @steve-chavez
  • "@@", "@>" and "<@" operators, from now on their mnemonic equivalents should be used "fts", "cs" and "cd" respectively - @steve-chavez

v0.4.4.0

Added

• #887, #601, #1007, Allow specifying dictionary and plain/phrase tsquery in full text search - @steve-chavez
• #328, Allow doing GET on rpc - @steve-chavez
• #917, Add ability to map RAISE errorcode/message to http status - @steve-chavez
• #940, Add ability to map GUC to http response headers - @steve-chavez
• #1022, Include git sha in version report - @begriffs
• Faster queries using json_agg - @ruslantalpa

Fixed

• #876, Read secret files as binary, discard final LF if any - @eric-brechemier
• #968, Treat blank proxy uri as missing - @begriffs
• #933, OpenAPI externals docs url to current version - @steve-chavez
• #962, OpenAPI don't err on nonexistent schema - @steve-chavez
• #954, make OpenAPI rpc output dependent on user privileges - @steve-chavez
• #955, Support configurable aud claim - @statik
• #996, Fix embedded column conflicts table name - @grotsev
• #974, Fix RPC error when function has single OUT param - @steve-chavez
• #1021, Reduce join size in allColumns for faster program start - @nextstopsun
• #411, Remove the need for pk in &select for parent embed - @steve-chavez
• #1016, Fix anonymous requests when configured with jwt-aud - @ruslantalpa

v0.4.3.0

Added

• #567, Support more JWT signing algorithms, including RSA - @begriffs
• #889, Allow more than two conditions in a single and/or - @steve-chavez
• #883, Binary output support for RPC - @steve-chavez
• #885, Postgres COMMENTs on SCHEMA/TABLE/COLUMN are used for OpenAPI - @ldesgoui
• #907, Ability to embed using a specific relation when there are multiple between tables - @ruslantalpa
• #930, Split table comment on newline to get OpenAPI operation summary and description - @daurnimator
• #938, Support for range operators - @russelldavies

Fixed

• #877, Base64 secret read from a file ending with a newline - @eric-brechemier
• #896, Boolean env var interpolation in config file - @begriffs
• #885, OpenAPI repetition reduced by using more definitions- @ldesgoui
• #924, Improve relations initialization time - @9too
• #927, Treat blank pre-request as missing - @begriffs

Changed

• #938, Deprecate symbol operators with mnemonic names. - @russelldavies

v0.4.2.0

Added

• #742, Add connection retrying on startup and SIGHUP - @steve-chavez
• #652, Add and/or params for complex boolean logic - @steve-chavez
• #808, Env var interpolation in config file (helps Docker) - @begriffs
• #878, CSV output support for RPC - @begriffs

Fixed

• #822, Treat blank string JWT secret as no secret - @begriffs

v0.4.1.0

Added

• Allow requesting binary output on GET - @steve-chavez
• Accept clients requesting Content-Type: application/json from / - @feynmanliang
• #493, Updating with empty JSON object makes zero updates @koulakis
• Make HTTP headers and cookies available as GUCs #800 - @ruslantalpa
• #701, Ability to quote values on IN filters - @steve-chavez
• #641, Allow IN filter to have no values - @steve-chavez

Fixed

• #827, Avoid Warp reaper, extend socket timeout to 1 hour - @majorcode
• #791, malformed nested JSON error - @diogob
• Resource embedding in views referencing tables in public schema - @fab1an
• #777, Empty body is allowed when calling a non-parameterized RPC - @koulakis
• #831, Fix proc resource embedding issue with search_path - @steve-chavez
• #547, Use read-only transaction for stable/immutable RPC - @begriffs

v0.4.0.0

Added

• Allow test database to be on another host - @dsimunic
• Prefer: params=single-object to treat payload as single json argument in RPC - @dsimunic
• Ability to generate an OpenAPI spec - @mainx07, @hudayou, @ruslantalpa, @begriffs
• Ability to generate an OpenAPI spec behind a proxy - @hudayou
• Ability to set addresses to listen on - @hudayou
• Filtering, shaping and embedding with &select for the /rpc path - @ruslantalpa
• Output names of used-defined types (instead of 'USER-DEFINED') - @martingms
• Implement support for singular representation responses for POST/PATCH requests - @ehamberg
• Include RPC endpoints in OpenAPI output - @begriffs, @LogvinovLeon
• Custom request validation with --pre-request argument - @begriffs
• Ability to order by jsonb keys - @steve-chavez
• Ability to specify offset for a deeper level - @ruslantalpa
• Ability to use binary base64 encoded secrets - @TrevorBasinger

Fixed

• Do not apply limit to parent items - @ruslantalpa
• Fix bug in relation detection when selecting parents two levels up by using the name of the FK - @ruslantalpa
• Customize content negotiation per route - @begriffs
• Allow using nulls order without explicit order direction - @steve-chavez
• Fatal error on postgres unsupported version, format supported version in error message - @steve-chavez
• Prevent database memory cosumption by prepared statements caches - @ruslantalpa
• Use specific columns in the RETURNING section - @ruslantalpa
• Fix columns alias for RETURNING - @steve-chavez

Changed

• Replace Prefer: plurality=singular with Accept: application/vnd.pgrst.object - @begriffs
• Standardize arrays in responses for Prefer: return=representation - @begriffs
• Calling unknown RPC gives 404, not 400 - @begriffs
• Use HTTP 400 for raise_exception - @begriffs
• Remove non-OpenAPI schema description - @begriffs
• Use comma rather than semicolon to separate Prefer header values - @begriffs
• Omit total query count by default - @begriffs
• No more reserved jwt_claims return type - @begriffs
• HTTP 401 rather than 400 for expired JWT - @begriffs
• Remove default JWT secret - @begriffs
• Use GUC request.jwt.claim.foo rather than postgrest.claims.foo - @begriffs
• Use config file rather than command line arguments - @begriffs

v0.3.2.0

Added

• Reload database schema on SIGHUP - @begriffs
• Support "-" in column names - @ruslantalpa
• Support column/node renaming alias:column - @ruslantalpa
• Accept posts from HTML forms - @begriffs
• Ability to order embedded entities - @ruslantalpa
• Ability to paginate using &limit and &offset parameters - @ruslantalpa
• Ability to apply limits to embedded entities and enforce --max-rows on all levels - @ruslantalpa, @begriffs
• Add allow response header in OPTIONS - @begriffs

Fixed

• Return 401 or 403 for access denied rather than 404 - @begriffs
• Omit Content-Type header for empty body - @begriffs
• Prevent role from being changed twice - @begriffs
• Use read-only transaction for read requests - @ruslantalpa
• Include entities from the same parent table using two different foreign keys - @ruslantalpa
• Ensure that Location header in 201 response is URL-encoded - @league
• Fix garbage collector CPU leak - @ruslantalpa et al.
• Return deleted items when return=representation header is sent - @ruslantalpa
• Use table default values for empty object inserts - @begriffs

v0.3.1.1

Fixed

• Preserve unicode values in insert,update,rpc (regression) - @begriffs
• Prevent duplicate call to stored procs (regression) - @begriffs
• Allow SQL functions to generate registered JWT claims - @begriffs
• Terminate gracefully on SIGTERM (for use in Docker) - @recmo
• Relation detection fix for views that depend on multiple tables - @ruslantalpa
• Avoid count on plurality=singular and allow multiple Prefer values - @ruslantalpa

v0.3.1.0

Fixed

• Prevent query error from infecting later connection - @begriffs, @ruslantalpa, @nikita-volkov, @jwiegley

Added

• Applies range headers to RPC calls - @diogob

v0.3.0.4

Fixed

• Improved usage screen - @begriffs
• Reject non-POSTs to rpc endpoints - @begriffs
• Throw an error for OPTIONS on nonexistent tables - @calebmer
• Remove deadlock on simultaneous contentious updates - @ruslantalpa, @begriffs