Steampipe CLI v2.5.0 - PostgreSQL 14.24, safer upgrades and connection fixes
Nov 13, 2026•steampipe
Whats new
- Update the embedded PostgreSQL to 14.24.0. A same-major upgrade now keeps your existing data folder, and the upgrade carries over the newest older database. (#4961, #5103)
- The PostgreSQL unix socket now lives in the data directory instead of /tmp. If the resulting path is too long, Steampipe stops with a message saying how to shorten it before it touches your existing data. (#5118)
- pg_hba.conf is now written before every start, with rules from pg_hba.conf.d placed first. Steampipe never rewrites a pg_hba.conf it did not write, and tells you what to do when it stops because of one. (#5100, #5119)
- Only the OS user who runs Steampipe can connect as root, and only through the unix socket. (#5101)
- Update steampipe-plugin-sdk to v6 and the embedded steampipe-postgres-fdw to v2.3.0.
Bug fixes
- A bad connection or a bad config file no longer stops all other connections from syncing. (#5039)
- A connection whose plugin failed to load is now reported as error instead of ready.
- Fix a plugin manager panic, and a lost update, when a connection config changes while a plugin is starting.
- Use each plugin's memory_max_mb even when GOMEMLIMIT is set in the environment. (#5095)
- Rebuild steampipe_plugin_column only when it is missing or wrong. (#5089)
- Fix steampipe service status --all panicking on a process that has exited. (#5133)
- Find a database process that has only just started when forcing a stop, and skip unreadable processes when scanning for Steampipe instances. (#5061, #5116)
- Make installation state writes atomic. (#5038)
- Reinstalling the current version's programs keeps its database, and a leftover backup is kept out of the kept database. (#5120, #5136)
- Stop with a clear message on an unfinished or other-major data folder, and keep non-empty new data when a major upgrade finds a running server. (#5137, #5112)
- Remove old database folders that hold no database after an upgrade. (#5117)
- Print absolute export paths as-is in the export status message.
- Make an install directory containing a comma or a double quote work.
Dependencies
- Bump google.golang.org/grpc, golang.org/x/crypto, golang.org/x/net, github.com/containerd/containerd, github.com/jackc/pgx/v5 and the OpenTelemetry modules to their latest releases.