## turbot/steampipe — v2.4.7…v2.5.0-beta.202606221001

_58 commits._

### Features
- **Add executing test for the stale-marker refusal (scenario row 13)** (8c92943)
- **Add migration scenario matrix + detector unit tests** (adde204)
- **Add ICU support for PostgreSQL 16+ in the embedded-PG build wrapper** (b9632c4)
- **Add version-parameterised embedded-PG from-source build wrapper (Increment 3)** (37f454d)
- **Add LE-MEGA combined-axes data-tank load case** (60f2010)
- **Add cross-major migration test matrix (failing baseline; spec for D + pre-flight)** (a0f1ea7)

### Fixes
- **Fix twelve stale comments from the review; update hardcoded DB paths in bats files** (f266c59)
- **Fix the copy-tier ladder: pipe deadlock, duplicate rows on escalation, silent plain-table loss** (abc8a7b)
- **Make cross-major migration fire + commit in the Pipes shape; fix two validation bugs** (dd1e240)
- **Fix pre-upgrade backup aborting when any process cmdline is unreadable** (fe9a5ca)
- **Bundle OpenSSL into the Linux embedded-PG artifact (relocatability fix)** (e9269e1)
- **Bundle OpenSSL into the macOS embedded-PG artifact (relocatability fix)** (5d2463e)
- **Fix migration comments left describing the superseded version-revert model** (a931229)
- **Add regression test for PG18 FDW multi-table JOIN** (080df02)
- **Fix release workflow homebrew PR title check (#4983)** (fd9bc28)
- **Update Go version and fix Dependabot CVE alerts by bumping deps and removing pgconn v1. closes #4963 (#4964)** (31a9d9a)

### Backend
- **Working dumps never outlive a cross-major attempt; old data is the sole failure-recovery copy** (be96536)
- **Restate the migration-incomplete flag as an explicit backstop with the edge case spelled out** (819babf)
- **Revert "Remove the migration-incomplete marker; PG_VERSION is the single on-disk decision input"** (79b926e)
- **Remove the migration-incomplete marker; PG_VERSION is the single on-disk decision input** (2fdcc25)
- **Restore user CREATE on the public schema for PG15+** (d619834)
- **Document the restore ladder's per-tier justification in the engine header** (4faaeb7)
- **Document the full migration flow + two-file state table in the engine header** (edc3cac)
- **Strip private project references from committed code** (22dd5d0)
- **Refresh diskspace.go's measured image sizes to the PG18 RC artifacts** (6438eb8)
- **Round-5 review fixes: stop retained old server on the last install error path; refresh two stale docs** (35fef10)
- **Fail-stop pre-dump cross-major failures; status write on the data-tank no-op path** (06c9db3)
- **Harden the fail-stop machinery per re-review; land the bats path updates for real** (7f50a26)
- **Cross-major migration failures fail-stop instead of warn-and-run** (525ec4b)
- **Pin the migration status files' JSON schema with an executed test** (cd03bdc)
- **Export partitionFailure fields so failed_partitions serialises in the status JSON** (3d87dbb)
- **Make the migration target version an explicit parameter; drop the test-only package variable** (0bb915a)
- **Re-flow migration comment blocks to ~120-column lines** (c13a5ba)
- **Point FdwVersion at 2.3.0-rc.0 (PG18 FDW re-tag above the 2.2.4 mainline)** (0fd8299)
- **Converge public cross-major migration onto the shared engine; delete the duplicate orchestration** (c68040f)
- **Migrate from the most-recent prior PG install, not the first on disk** (09f8304)
- **Flip embedded stack to published PG18 RC images** (c129ba0)
- **Point DB image build at the PG18.4 (openssl-bundled) platform .txz** (4fb2ce3)
- **Linux: patchelf contrib .so RUNPATH to $ORIGIN** (b160489)
- **Clean install prefix at start of each run** (e1ad1be)
- **Linux: prune bin/ to the five Steampipe ships (mirror of macOS)** (1b9f96a)
- **Linux: pass --with-icu for PG16+; pack with --hard-dereference** (36d0e7d)
- **Make the extension check DLSUFFIX-aware; document macOS PG18 .dylib finding** (54bdac4)
- **Address code-review findings on the embedded-PG build wrapper** (764636a)
- **Bundle ICU into the embedded-PG artifact + re-sign (relocatable PG18)** (9760037)
- **Sweep data-tank test comments for the same stale version-revert phrasing** (46a7bdf)
- **Converge PG14->PG18 cross-major migration onto a shared engine with a single deletion gate** (cb34d94)
- **Make cross-major migration test matrix drive shipped production code** (f4b5b91)
- **Switch cross-major migration to Option D: pre-flight scan + auto-restore + post-restore validation** (3de0fce)
- **Address code-review findings on the migration hardening** (c21180e)
- **Make embedded-PG migration version-aware and non-bricking (Increment 2)** (7cae7b2)
- **[dep][go](deps): Bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.6 (#4977)** (907269c)
- **Merge pull request #5005 from turbot/merge-v2.4.x-into-develop** (d98db44)
- **Merge remote-tracking branch 'origin/v2.4.x' into merge-v2.4.x-into-develop** (d25cfb9)
- **Harden GitHub Actions: pin actions to SHAs and set explicit permissions (#4965)** (65a921a)
- **Merge branch 'v2.4.x' into develop** (d1d8fb7)

### Chore
- **chore: add .wip and .claude to gitignore (#5002)** (d1674be)
- **chore: bump steampipe-plugin-sdk to v6.0.0 (#4998)** (4ffd800)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/turbot/steampipe?utm_source=github-action)._