pig v1.10.1

PIG v1.10.1 is a security and catalog maintenance release. It upgrades Go to 1.27.3, refreshes tooling dependencies, and expands the embedded PostgreSQL extension catalog from 603 to 615 entries.

Security update

• Upgrade the Go toolchain from 1.27.2 to 1.27.3. CI and release builds read the version from go.mod.
• Include the crypto/x509 fix for CVE-2026-111943 / GO-2026-6809. Go’s certificate verifier rejects chains containing specific intermediate certificates that are no longer trusted.

Go 1.27.3 adds one security fix over 1.27.2, as documented in the Go release announcement. Earlier Go security fixes are already included in the 1.27.2 baseline used by PIG v1.10.0.

Dependency updates

Update inherited tooling dependencies through version-specific module replacements:

Extension catalog

The embedded catalog now contains 615 entries, with 12 additions since v1.10.0:

• codesystem, encsearch, hdr_histogram, pg_improv
• pg_kv, pg_lease, pg_synonym, pg_table_range
• pg_tre, pg_try_cast, stannum, tin

The refresh also updates existing extension versions and package availability metadata. The total follows the catalog-entry counting rule: it includes packaged SQL utilities and retained records for removed extensions. It does not imply that all 615 entries support CREATE EXTENSION or can be installed on every platform.

Compatibility

Commands, flags, and configuration remain compatible with v1.10.0. Embedded Pigsty remains at 4.5.0, and default cargo-pgrx remains at 0.19.3.

Building from source requires Go 1.27.3 or later. Prebuilt packages do not require a local Go installation. Follow the installation guide to upgrade PIG. Replacing the PIG executable brings in the updated Go standard library; upgrading the host’s Go installation alone does not update an existing PIG binary.

Checksums