chore: bump version to 14.17

fix: JWT validation uses wrong current time due to a bug in auto-update
Upgrade auto-update to 0.2.7 which contains a fix to a bug causing some threads not seeing updates to the cached values. (cherry picked from commit a2a592a617)
2026-08-13 10:48:30 -05:00 · 2026-08-13 09:30:02 -05:00 · 2026-08-07 07:40:59 +00:00 · 2026-08-04 21:04:54 +00:00 · 2026-07-30 20:41:24 +00:00
10 changed files with 28 additions and 12 deletions
@@ -17,7 +17,7 @@ runs:
  using: composite
  steps:
    - if: ${{ inputs.vm == 'freebsd' }}
-      uses: vmactions/freebsd-vm@77ed28d336d03fe19a3f4f7266c1d2c4714dd79d # v1.5.2
+      uses: vmactions/freebsd-vm@83b151f58c6047089f4c80eb5ba2039d158ce093 # v1.5.3
      with:
        envs: ${{ inputs.envs }}
        prepare: ${{ inputs.prepare }}
@@ -117,7 +117,7 @@ jobs:
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - if: ${{ !matrix.vm }}
-        uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2.11.0
+        uses: haskell-actions/setup@6037f33647c3f17758a2356c80fc4a53d7e0685d # v2.12.0
        with:
          # This must match the version in stack.yaml's resolver
          ghc-version: 9.6.7
@@ -165,7 +165,7 @@ jobs:
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2.11.0
+      - uses: haskell-actions/setup@6037f33647c3f17758a2356c80fc4a53d7e0685d # v2.12.0
        with:
          ghc-version: ${{ matrix.ghc }}
      - name: Cache .cabal
@@ -133,7 +133,7 @@ jobs:
        with:
          name: postgrest-ubuntu-aarch64
      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
-      - uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
        with:
          username: ${{ vars.DOCKER_USER }}
          password: ${{ secrets.DOCKER_PASS }}
@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file. From versio

 ## Unreleased

+## [14.17] - 2026-08-13
+
+### Fixed
+
+- JWT validation uses wrong current time due to a bug in auto-update by @mkleczek in #5159
+
 ## [14.16] - 2026-07-27

 ### Fixed
@@ -2,7 +2,7 @@
 # The x86-64 is a single-static-binary image built via Nix, see:
 # nix/tools/docker/README.md

-FROM ubuntu:resolute@sha256:3131b4cc82a783df6c9df078f86e01819a13594b865c2cad47bd1bca2b7063bb AS postgrest
+FROM ubuntu:resolute@sha256:678c6550cc43645e08669028bc177f50be4e7c5b8cca677067b1914d4afc7a03 AS postgrest

 RUN apt-get update -y \
    && apt install -y --no-install-recommends libpq-dev zlib1g-dev jq gcc libnuma-dev \
@@ -1 +1 @@
-index-state: hackage.haskell.org 2026-07-11T17:34:10Z
+index-state: hackage.haskell.org 2026-08-10T16:58:32Z
@@ -50,6 +50,16 @@ let
      # jailbreak, because hspec limit for tests
      fuzzyset = prev.fuzzyset_0_2_4;

+      # TODO: Remove once available in nixpkgs
+      auto-update =
+        prev.callHackageDirect
+          {
+            pkg = "auto-update";
+            ver = "0.2.7";
+            sha256 = "sha256-fHX/OqF/cB9rbpGpLUtA29bcEJS43HUWHcK55yUxKoo=";
+          }
+          { };
+
      # TODO: Remove once available in nixpkgs haskellPackages
      configurator-pg =
        prev.callHackageDirect
@@ -1,5 +1,5 @@
 name:               postgrest
-version:            14.16
+version:            14.17
 synopsis:           REST API for any Postgres database
 description:        Reads the schema of a PostgreSQL database and creates RESTful routes
                    for tables, views, and functions, supporting all HTTP methods that security
@@ -100,7 +100,7 @@ library
                    , HTTP                      >= 4000.3.7 && < 4000.5
                    , Ranged-sets               >= 0.3 && < 0.5
                    , aeson                     >= 2.0.3 && < 2.3
-                    , auto-update               >= 0.1.4 && < 0.3
+                    , auto-update               >= 0.2.7 && < 0.3
                    , base64-bytestring         >= 1 && < 1.3
                    , bytestring                >= 0.10.8 && < 0.13
                    , case-insensitive          >= 1.2 && < 1.3
@@ -9,7 +9,7 @@ nix:
  pure: false

 extra-deps:
-  - auto-update-0.2.6
+  - auto-update-0.2.7
  - configurator-pg-0.2.11
  - fuzzyset-0.2.4
  - hasql-pool-1.0.1
@@ -5,12 +5,12 @@

 packages:
 - completed:
-    hackage: auto-update-0.2.6@sha256:4adf0d523c8b8fbd53f32b79f115d5f304da7e1a2b35b66625497add8e9abbb5,1670
+    hackage: auto-update-0.2.7@sha256:32ca6ce351604a17ee79e4086939f798f958f8407478288e9adb7adeb194c6ea,1670
    pantry-tree:
-      sha256: ce58248c2d6d83cf0dfcfe0aec20c238b279e70926f49108a38fe6917dc0c532
+      sha256: 641faa7d5ee516195ecd4b538f170722d56f84e3bc5714c6bbe8123849b49983
      size: 1105
  original:
-    hackage: auto-update-0.2.6
+    hackage: auto-update-0.2.7
 - completed:
    hackage: configurator-pg-0.2.11@sha256:de0c56386591e85159436b0af04a8f15a4f4e156354e99709676c2c2ee959505,2850
    pantry-tree:
Author	SHA1	Message	Date
steve-chavez	064e5fea7b	chore: bump version to 14.17	2026-08-13 10:48:30 -05:00
Michał KłeczekandSteve Chavez	cbdafd6f8b	fix: JWT validation uses wrong current time due to a bug in auto-update Upgrade auto-update to 0.2.7 which contains a fix to a bug causing some threads not seeing updates to the cached values. (cherry picked from commit `a2a592a617`)	2026-08-13 09:30:02 -05:00
renovate[bot]andWolfgang Walther	b6ffe9bcf8	chore(deps): update vmactions/freebsd-vm action to v1.5.3	2026-08-07 07:40:59 +00:00
renovate[bot]andWolfgang Walther	c57a10a8c4	chore(deps): update all dependencies	2026-08-04 21:04:54 +00:00
renovate[bot]andWolfgang Walther	aee0d52b4f	chore(deps): update docker/login-action action to v4.6.0	2026-07-30 20:41:24 +00:00