Ashesh Vashi de71c83d8d Bump version to 9.18 and add the 9.18 release notes ...

Update APP_REVISION/APP_VERSION_INT in web/version.py and the Helm
chart's version/appVersion, and add docs/en_US/release_notes_9_18.rst
with a toctree entry.

The notes cover everything merged since REL-9_17 (ee7109d40..bd7cde585)
plus the three CVE fixes on this branch: the Webserver auth header
bypass (#10383), Backup argument and connection-string injection
(#10384) and the File Manager save_file symlink TOCTOU (#10385). The
CVE identifiers are still placeholders (CVE-2026-XXXXX) pending
assignment, and #10388 has no entry because its fix is not on this
branch yet.

Changes with no associated issue are listed under Housekeeping and Bug
fixes keyed by commit SHA, following the 9.15 convention, so the
"Additional changes" wrapper is dropped and Dependencies becomes a
top-level section.

2026-09-07 15:02:01 +05:30

..

migrations

Use resolve_fks=False in migration reflect() so stale FKs don't crash startup (#9976)

2026-06-09 14:32:19 +01:00

pgacloud

fix(cloud): stop googleapiclient pulling in the system oauth2client (#10110) (#10112)

2026-07-24 19:02:29 +05:30

pgadmin

webserver auth: address round-3 review follow-ups

2026-09-04 19:06:51 +00:00

regression

chore(deps): bump third-party JS and Python dependencies (#10370)

2026-09-03 14:58:04 +05:30

.editorconfig

Fixed focus color issue for Alertify dialog buttons. Fixes #5292

2020-03-26 15:30:31 +05:30

.eslintrc.js

fix: Bump python & javascript dependencies (#9827)

2026-04-08 17:31:56 +05:30

.yarnrc.yml

Updated yarn.lock file to use yarn v4.14.0 and fix the builds

2026-04-17 17:13:19 +05:30

babel.cfg

Update message catalog.

2022-04-01 17:22:16 +05:30

babel.config.json

fix: Bump python & javascript dependencies (#9827)

2026-04-08 17:31:56 +05:30

branding.py

Copyright updated for 2026

2026-01-05 13:33:45 +05:30

config.py

Fix authentication bypass in Webserver auth via client-controlled header

2026-09-04 19:06:51 +00:00

jest.config.js

Core LLM integration infrastructure to allow pgAdmin to connect to AI providers. #9641

2026-02-17 17:16:06 +05:30

package.json

chore(deps): bump third-party JS and Python dependencies (#10370)

2026-09-03 14:58:04 +05:30

pgAdmin4.py

Copyright updated for 2026

2026-01-05 13:33:45 +05:30

pgAdmin4.wsgi

Copyright updated for 2026

2026-01-05 13:33:45 +05:30

setup.py

fix(cli): register module preferences before set-prefs validation (#10105)

2026-06-17 14:49:53 +05:30

version.py

Bump version to 9.18 and add the 9.18 release notes

2026-09-07 15:02:01 +05:30

webpack.config.js

Fix double dot in generated font and image filenames. #9806 (#10032)

2026-06-12 23:05:02 +05:30

webpack.shim.js

fix(webpack): alias react-checkbox-tree to its ESM bundle (#9989)

2026-06-05 09:57:09 +05:30

yarn.lock

chore(deps): bump third-party JS and Python dependencies (#10370)

2026-09-03 14:58:04 +05:30