gitzette / @NikolayS / Mar 16 – Mar 22 W12
← W11 W12 W13 →
@NikolayS — open-source digest March 17 – March 23, 2026
Vol. 1, No. 3 github.com/NikolayS
the dispatch
@NikolayS
rpg ships EXPLAIN visualization and Lua commands; sqlever hits production readiness with deep test coverage.
293 commits 118 PRs 7 releases 9 repos

Four releases across rpg and sqlever. Ten merged PRs in gitzette's landing page overhaul. One security incident, quickly contained.

RELEASE

rpg v0.8.0 brings EXPLAIN visualization to the psql terminal

*Colorized plans, automatic issue detection, and one-click sharing to depesz and dalibo.*

EXPLAIN output has always lived in plain text. @NikolayS's v0.8.0 transforms that into a readable terminal UI: execution time and row estimates at the top, problem nodes flagged with ⚠ warnings (seq scans on large tables, 10x row estimate misses, sorts spilling to disk), and the costliest query path bolded. Plans now share directly to explain.depesz.com, explain.dalibo.com, or pgMustard via '/explain share depesz' — no copy-paste. Lua custom commands let you write /slow_mean and /table_info scripts; tab completion works on all rpg backslash commands. The \s command now shows numbered, searchable history through the pager.

SECURITY

API key leaked during pgMustard integration testing — rotated, lesson learned

*An AI agent posted testing output with a valid credential. The fix: Claude security rules in the repo.*

@NikolayS discovered a pgMustard API key in a GitHub PR comment during testing of the new \explain share pgmustard feature in v0.8.0. The key was valid and live. He rotated it immediately. Root cause: an AI agent used the key during testing and included the raw output in its test log. The fix is now in the codebase — a security rule in the repo's Claude instructions explicitly prohibits API keys in comments or logs. A reminder that LLM-assisted development needs human oversight on credentials, even in test harnesses.

RELEASE

sqlever reaches production readiness with comprehensive test suite

*Deep test coverage across Sqitch compatibility, static analysis, batch DML, AI integration, and lifecycle workflows.*

@NikolayS merged seven major test PRs this week, adding over 300 test cases across all critical paths. Sqitch compatibility tests validate plan parsing and change ID computation against the real Sqitch binary (#134). Static analysis tests exercise all 22 linting rules and their suppressions (#136). Batch DML tests verify queue operations, partition rotation, and concurrent worker lifecycle (#137). AI and DBLab integration tests mock all three LLM providers and test clone provisioning (#135). Full lifecycle and edge-case tests cover deploy/revert robustness, multi-change dependencies, tags, snapshots, and all 9 exit codes (#139, #138). A fix merged this week (#145) corrects revert to respect the -- sqlever:no-transaction directive. Two releases — v0.1.0 (foundational) and v0.2.0 (test harness complete) — mark the end of scaffolding.

FEATURE

gitzette landing page overhauled — profile explorer, share tags, font improvements

*Ten PRs ship profile pages, week navigation, OG meta tags, and visual polish.*

@NikolayS merged a burst of UX improvements to gitzette's frontend. The homepage now lets you search a GitHub username and explore all their dispatches via a profile page (#48, #46). Dispatch pages gained week navigation and a regenerate button with confirmation (#48). Social sharing works now — each dispatch includes OG meta tags for preview cards (#43). Typography improved: Playfair Display logo font for readability (#42) and a sharper tagline (#46). Favicon and theme-color tags landed on all pages (#41). Legacy dispatch HTML fixes ensure proper link closing and mobile rendering (#53). The quota UX now surfaces generation limits to free users with sponsor links (#47). These changes phase in the groundwork for GitLab support and feedback systems, both in open PRs.

the dispatch — Vol. 1, No. 3 March 17 – March 23, 2026
RELEASE

rpg v0.7.0 wraps '/ask' queries in read-only transactions for safety

*Write queries now blocked; LLM requests can be cancelled; timeouts configurable.*

The /ask command runs AI-generated SQL on your database. v0.7.0 adds database-level protection: every query is wrapped in START TRANSACTION READ ONLY, and write queries (CREATE, DROP, INSERT, DELETE) are refused before they reach the parser (#631). Pressing Ctrl-C now cancels LLM API calls immediately (#641). New config options let you set ai.timeout (default 30s) and ssh_tunnel.connect_timeout (default 15s) to prevent hangs (#640). Built-in pagers now handle backslash commands (/?, /h, /d, /dba) — scrollable output for large result sets (#629). PG 17 compatibility fixes address renamed VACUUM progress columns (#620).

RELEASE

rpg v0.5.0 ships multi-category syntax highlighting and auto-detect AI providers

*Keywords, strings, and operators now in distinct colors. Env var detection works across Anthropic, OpenAI, and Ollama.*

v0.5.0 adds color differentiation in the SQL editor: keywords, strings, and operators now render in distinct ANSI colors. Error/warning/notice prefixes are colorized (red/yellow/cyan). The tool now auto-detects your AI provider by reading ANTHROPIC_API_KEY, OPENAI_API_KEY, or OLLAMA_API_KEY from the environment — no manual config needed. Ctrl-C properly cancels /fix execution. The status bar now spans terminal width. /version displays both rpg and PostgreSQL server versions. References to an "autonomous agent" mode were removed — rpg is a terminal tool, not an autonomous system.

COMMUNITY

pg_ash documentation hardened with security policy and dependency automation

*SECURITY.md added; dependabot configured for GitHub Actions.*

@NikolayS added a SECURITY.md policy (#24) and enabled dependabot (#23) to keep GitHub Actions versions up to date automatically. Badge counts and dated comparison notes were removed from docs (#26). These changes reflect a maturing maintenance posture as pg_ash sees production use.

PENDING

dispatch generator hit 58 commits this week — parallel scanning pending

*Backend infrastructure work. Open issues target 40-second profile scans.*

The gitzette-dispatch generator (the engine powering these newspapers) accumulated 58 commits this week as @NikolayS refined filtering and scanning logic. Two open issues target performance: pre-filtering repos via GitHub commit search API before full scan, and parallel repo scanning to reduce large profile scans from 5 minutes to ~40 seconds. These are backlog items, not shipped yet — but the groundwork is in place.

stats corner
293
commits
118
pull requests
7
releases
commits by repo
REPO COMMITS rpg 83 sqlever 78 gitzette-dispatch 58 gitzette 43 NikolayS 26 pg_ash 3 leandex 1 joe 1
github stars
pg_ash
200
joe
81
rpg
52
gitzette
3
sqlever
2
leandex
1
oak-tree-buzzer
1
release timeline
TUEWEDTHUFRISATSUNMON oak-tree-buzzer v1.3.1 rpg v0.5.0 rpg v0.6.0 rpg v0.7.0 rpg v0.8.0 sqlever v0.1.0 sqlever v0.2.0
repo index
  • gitzette-dispatch
    Weekly engineering newspaper generator — dispatches for gitzette.online
    58 commits · 0 releases · ★ 0
  • gitzette
    Turn your GitHub activity into a weekly newspaper — AI-generated headlines, styled HTML output
    43 commits · 0 releases · ★ 3
  • rpg
    rpg — modern Postgres terminal written in Rust. psql-compatible, with built-in DBA diagnostics and AI assistant
    83 commits · 4 releases · ★ 52
  • sqlever
    Sqitch-compatible PostgreSQL migration tool with static analysis and zero-downtime migrations
    78 commits · 2 releases · ★ 2
  • NikolayS
    GitHub profile
    26 commits · 0 releases · ★ 0
  • leandex
    Keep your Postgres indexes lean — rebuild, drop, and suggest
    1 commits · 0 releases · ★ 1
  • pg_ash
    Active Session History for PostgreSQL — wait event sampling with zero bloat (pg_cron + PGQ-style partition rotation)
    3 commits · 0 releases · ★ 200
  • oak-tree-buzzer
    Dental office intercom app — LAN-only tablet buzzer system
    0 commits · 1 release · ★ 1
  • joe
    Query optimization assistant :point_right: THIS IS A MIRROR OF https://gitlab.com/postgres-ai/joe
    1 commits · 0 releases · ★ 81
← Mar 9 – Mar 15 Mar 23 – Mar 29 →
gitzette @NikolayS on gitzette @NikolayS on GitHub
share: post on X share on LinkedIn

Your GitHub week, turned into something worth reading.

Generate your dispatch →
gitzette.online  ·  2026 © AISlopMedia, Inc.