Skip to content

chore(deps): bump postgres from 3.4.7 to 3.4.9 - #4

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/postgres-3.4.9
Closed

chore(deps): bump postgres from 3.4.7 to 3.4.9#4
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/postgres-3.4.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown

Bumps postgres from 3.4.7 to 3.4.9.

Release notes

Sourced from postgres's releases.

v3.4.9


porsager/postgres@v3.4.8...v3.4.9

v3.4.8

  • Prevent out of bound errors from commit-time failures de64f7a
  • fix: use lower max connections in Cloudflare Workers environment 94b7170
  • Add support for sslnegotiation=direct - fixes #1104 7f80980
  • omit Sql properties absent from TransactionSql 36a53f6
  • Someones engines are getting pedantic - fixes #1061 3ffc3c4
  • Better error if trying to run query during copy 3a43815
  • Fix PGAPPNAME env access by prioritizing connection.application_name 32feb25

porsager/postgres@v3.4.7...v3.4.8

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [postgres](https://github.com/porsager/postgres) from 3.4.7 to 3.4.9.
- [Release notes](https://github.com/porsager/postgres/releases)
- [Changelog](https://github.com/porsager/postgres/blob/master/CHANGELOG.md)
- [Commits](porsager/postgres@v3.4.7...v3.4.9)

---
updated-dependencies:
- dependency-name: postgres
  dependency-version: 3.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 13, 2026
@alsterg alsterg closed this May 28, 2026
@alsterg
alsterg deleted the dependabot/npm_and_yarn/postgres-3.4.9 branch May 28, 2026 14:43
@dependabot @github

dependabot Bot commented on behalf of github May 28, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

alsterg added a commit that referenced this pull request Jun 13, 2026
- Gap #2 claimed ShoferIgnoreController is dead code; it is now central
  and widely used (Task.ts every-task instantiation, code indexer,
  assistant agent, tree-sitter, ripgrep, context-management). Marked
  resolved.
- PROTECTED_PATTERNS no longer contains .shoferrules* (it's now
  .shofer/**, .vscode/**, *.code-workspace, .shoferprotected, AGENTS.md,
  AGENT.md). Reconciled the stale .shoferrules* gaps (#3, #4, #6) and added
  the missing .shoferprotected row to the write-protected summary table.
- Fixed a ghost 'rules-ask/' example (no Ask mode) -> rules-code-search/.
alsterg added a commit that referenced this pull request Jul 3, 2026
Adds packages/types/src/providers/catalog.ts: STATIC_MODEL_CATALOG collects every
statically-known provider's models record + default into one queryable surface
(lookupStaticModel / getStaticModelsForProvider / hasStaticCatalog), replacing
the pattern of importing each *Models record and switching on provider name.
getModelCapabilities normalizes a ModelInfo into the inspectable per-model view
§7 wants (vision, prompt-cache, context/limits, pricing, tool include/exclude
dialect). Dynamic providers (openrouter/ollama/…) fetch at runtime and are
intentionally absent.

This is the seam a models.dev-backed source slots into (Part E #4 decision:
snapshot vs live vs both) — after which getProviderDefaultModelId and the API
handlers' lookups route through it and adding a provider becomes config-only.
Tested (6 tests incl. default-in-record invariant); typecheck + lint clean.
alsterg added a commit that referenced this pull request Jul 3, 2026
Part E #4 decision: bundled snapshot + local overrides now; live models.dev
refresh later. Adds lookupModel(provider, modelId, overrides?) which merges a
provider→modelId→Partial<ModelInfo> override map over the bundled catalog entry —
correcting pricing/limits/capabilities or registering a model the snapshot lacks,
without code changes. Documents the catalog + overrides in new-llm-provider.md.
8 catalog tests pass; typecheck + lint clean.
alsterg added a commit that referenced this pull request Jul 7, 2026
Add an optional private?: boolean to plugin contribution declarations — modes,
skills, commands (via the manifest/mode schemas) and plugin-contributed tools
(CustomToolDefinition). A private contribution is still registered and invocable
by its qualified name (design §14.7 → namespacing composes), but excluded from
every user-facing surface (owner directive #4):

- modes: hidden from the mode selector/picker (getStateToPostToWebview filters
  private out); getCustomModes still returns them so switching by qualified slug
  works.
- commands: getCommands (palette / slash menu / autocomplete) filters private;
  getCommand still resolves them by qualified name.
- skills: getSkillsForMode (system prompt, skill tool) and getSkillsMetadata
  (skills UI) exclude private; getSkillContent resolves them for invocation via a
  new includePrivate resolution path.
- Plugins settings panel: private contributions are excluded from the per-kind
  contributionCounts.

privateNames flow from the manifest through getContributedSkillDirs/CommandDirs
to the command/skill scanners. Regenerated shofermodes JSON schema.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant