Skip to content

fix(deps): bump pgsql-parser packages (libpg-query 18.2.1) - #1934

Open
pyramation wants to merge 1 commit into
mainfrom
devin/1792898078-pgsql-parser-18-3-1
Open

pyramation wants to merge 1 commit into
mainfrom
devin/1792898078-pgsql-parser-18-3-1

Conversation

@pyramation

Copy link
Copy Markdown
Contributor

Summary

Bumps every pgsql-parser package to the new patch release: pgsql-parser 18.3.1, pgsql-deparser 18.4.1, plpgsql-parser 18.6.1, @pgsql/transform 18.18.1, @pgsql/utils, @pgsql/traverse, @pgsql/lint, @pgsql/scripts and @pgsql/semantics. safegres's direct libpg-query range also moves to ^18.2.1, so the lockfile now resolves only one libpg-query.

Why: libpg-query 18.2.1 starts the WASM parser at 40 MiB instead of 128 MiB. The 32 MiB stack and the 1 GiB cap are unchanged, and the heap still grows on demand. Every process that loads the parser (pgpm, safegres, the GraphQL plugins) drops from about 133 MiB to about 43 MiB of idle external memory. Parse output is unchanged.

The update was generated with makage deps ../pgsql-parser --install. I ran prettier on the lockfile afterwards to keep its committed format, and pnpm install --frozen-lockfile is clean. The affected packages and the packages they depend on build locally.

Link to Devin session: https://app.devin.ai/sessions/bcd8b2f791164247acb7a659b481efc2
Open in Devin Desktop: https://app.devin.ai/desktop/session/bcd8b2f791164247acb7a659b481efc2?variant=devin
Requested by: @pyramation

@devin-ai-integration

Copy link
Copy Markdown
Contributor

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

  • Disable automatic comment, CI, and merge conflict monitoring

@tenki-reviewer

tenki-reviewer Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

Review complete. No issues found — approved ✅.


This change is a coordinated dependency bump of the pgsql-parser packages to libpg-query 18.2.1 across 11 package.json files spanning the graphile, packages, pgpm, and postgres workspaces. No source code, configuration, or migration files are modified.

Reviewed commit: e3d7ea1

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​pgsql/​lint@​18.3.0 ⏵ 18.3.183 +110010094 +1100
Updated@​pgsql/​scripts@​18.5.0 ⏵ 18.5.187 +110010095 +1100
Updatedlibpg-query@​18.2.0 ⏵ 18.2.110010010096 +1100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant