Database News

The PostgreSQL team has released a critical security update for all supported versions, patching 28 vulnerabilities and over 110 bugs. This major release requires immediate attention from anyone running a PostgreSQL database to prevent potential exploits.

A federal court has ruled that "tower dump" warrants are unconstitutional. This decision protects user privacy by preventing law enforcement from collecting location data from every phone connected to a specific cell tower, a major win for digital privacy.

A common database architecture using proxies adds hidden costs and latency to AI systems. A direct-access pattern with Valkey can achieve microsecond speeds, improve resilience, and cut infrastructure spending.

Choosing a vector database for your AI app is a major decision. A new guide explores the trade-offs between specialized databases and unified platforms, which impacts your app's speed, cost, and future scalability.

Elasticsearch 9.5 adds a native VectorDB mode, making it easier for developers to build AI-powered search and retrieval applications. The update also introduces columnar storage for faster analytics and AI-driven tools for security teams.

ClickHouse Cloud rebuilt its autoscaling system to react to demand in seconds instead of minutes. This new 'fast path' approach helps prevent performance bottlenecks during traffic spikes and improves resource efficiency for its cloud database service.

E-Maj, a PostgreSQL extension for database management, released version 5.0.0. It now allows non-superusers to use the tool, significantly improving security by limiting administrator privileges and simplifying automated scripting for developers.

The popular PostgreSQL backup tool pgBackRest now supports AWS S3 Outposts, making it easier to manage backups in hybrid cloud environments. The update also adds support for the upcoming PostgreSQL 19, helping teams prepare for the future.

U.S. immigration authorities collected DNA from nearly one million people last year, including children. This data is now permanently stored in an FBI criminal database, raising major privacy and surveillance concerns for everyone.

A new open-source tool called plRuby lets developers write and run functions inside PostgreSQL using the Ruby language. This simplifies database logic for Ruby developers and can significantly speed up development cycles.

DuckDB, a popular analytics database, now fetches data from the cloud asynchronously. This architectural change significantly speeds up queries on large datasets by keeping the processor busy instead of waiting for data.

Modern cloud databases are increasingly separating compute from storage. This 'disaggregated' design allows teams to scale each component independently, leading to significant cost savings, better performance, and improved fault tolerance for critical applications.

Oracle's AI Database now supports the EBCDIC character set used by IBM mainframes. This removes a major technical barrier, making it significantly easier for large enterprises to migrate their legacy applications to modern infrastructure.

A developer treated an espresso machine like a distributed system, using OpenTelemetry and ClickHouse to analyze every shot. The project is a creative case study on applying observability principles to real-world, unconventional systems.

Snowflake's Adaptive Compute feature is now generally available on AWS, Azure, and Google Cloud. It automatically adjusts compute resources to match workload demands, helping companies avoid overspending on unpredictable AI and data tasks.

ClickHouse has relaunched its documentation with an AI-powered search feature and an interactive API playground. The changes aim to help developers find answers and build integrations faster, improving the overall developer experience.

Hibernate, a popular Java tool, now includes a built-in feature to automatically generate code from a database schema. This saves developers from manually writing tedious boilerplate code, especially when working with large or older database systems.

ClickHouse has released Silk, a new open-source C++ runtime. It uses advanced techniques to dramatically lower query latency and improve performance, making the database more efficient for demanding workloads.

A new service from PGX offers security patches and bug fixes for old, unsupported versions of PostgreSQL. This helps companies that can't upgrade stay secure and maintain data integrity without a costly migration.

Visa built a conversational AI agent using ClickHouse and LibreChat to analyze payments data. The new system turns multi-day reporting tasks into sub-second queries, saving each user up to 10 hours of work every week.

A new benchmark, CostBench, offers an end-to-end cost and performance comparison of Snowflake and ClickHouse Cloud. The analysis helps engineering leaders choose the right platform for real-time analytics by looking beyond just query speed.

Google BigQuery now lets developers run custom Python code directly within the data warehouse. This simplifies complex data analysis and machine learning tasks by eliminating the need to manage separate computing infrastructure for Python scripts.

Delivery Hero replaced Google Analytics with its own simple, scalable user tracking platform. The new system handles 10 times more traffic while capturing 97% of data, giving them more control over costs and privacy.

A new open-source tool called postgres-lsp is now available for PostgreSQL developers. It provides advanced code editing features like error checking and auto-completion in any modern code editor, improving productivity and code quality.

HypoPG, a popular PostgreSQL extension for testing "hypothetical" indexes without the cost of building them, has a new update. Version 1.4.3 fixes a long-standing bug and adds early support for the upcoming PostgreSQL 19.

A code formatter for PostgreSQL, pgfmt, can now format code to match the standard pg_dump tool. This makes it much easier for developers to track and compare changes in database schemas.

Elastic 9.4 now offers two ways to build custom integrations. A new no-code tool makes it faster for anyone, while a developer toolkit provides full control for complex needs, simplifying data ingestion from any source.

The PostgreSQL Workload Analyzer (PoWA) project has released version 5.1.2 of its core tool, powa-archivist. This update provides incremental improvements for developers and IT teams who use it to monitor database performance.

The new version of PostgreSQL Anonymizer introduces Local Differential Privacy, a sophisticated technique for data masking. This gives developers a more robust way to protect sensitive user information without compromising data utility.

Autonomous databases promise to manage themselves, but they won't eliminate the need for human experts. Percona's co-founder explains that while automation is transforming data management, human oversight and strategic input remain essential for success.