chore: added missing changelog entries

[tsivaprasad]

Fixup missing changelog entries for the next release:

✗ changie batch minor --dry-run

v0.10.0 - 2026-07-23

Added

• The Control Plane now rejects database specs that remove spock from
  postgresql_conf.shared_preload_libraries, preventing accidental
  disabling of the replication extension.
• Added image upgrade support. Use
  GET /v1/databases/{id}?include=available_upgrades to list newer
  stable images within the same Postgres major and Spock major version
  bucket, and POST /v1/databases/{id}/upgrade to apply an upgrade
  without changing the Postgres major version.
• Added support for custom container image pinning per database or node
  via orchestrator_opts.swarm.image. pgEdge-formatted image tags are
  validated against the spec's declared versions; unrecognized tags are
  accepted without version checks. The Control Plane also persists the
  resolved image at creation time, preventing silent image changes
  during Control Plane upgrades.
• Version resolution is now fully manifest-driven. Supported versions
  update with manifest refreshes without requiring a Control Plane
  upgrade.
• The Control Plane now falls back to the first available IPv6 address
  when no IPv4 address is found during IP autodetection.
• Cancelling a task now propagates to any in-progress activities,
  interrupting long-running operations rather than waiting for them to
  complete.
• RPM and DEB packages are now published to the pgEdge dnf and apt
  repositories on every release, enabling installation via dnf and
  apt-get in addition to the existing Docker and binary distribution
  methods.

Changed

• Breaking: Changed the default password_encryption from md5 to
  scram-sha-256. If you're using the default password encryption,
  every role in a database's database_users will be automatically
  updated to scram-sha-256 the next time you update that database.
  Roles created outside of database_users will need their passwords
  updated manually. To keep using md5, set
  postgresql_conf.password_encryption to md5 in your database spec.

Fixed

• Fixed an issue where resources pending recreation were not correctly
  planned for creation in the right reconciliation phase, causing
  reconciliation errors.
• Fixed Patroni rejecting connections from IPv4 addresses presented as
  IPv4-mapped IPv6 addresses (e.g. ::ffff:192.168.1.1) on dual-stack
  hosts.
• Fixed rolling updates failing on multi-node databases with replica
  instances due to replication slot timing during instance
  initialization.
• Fixed an issue where services configured with "version": "latest"
  failed at runtime because "latest" was not registered in the
  version map.

Security

• Updated vulnerable dependencies (pgx v5.10.0, OpenTelemetry v1.44.0,
  golang.org/x/crypto v0.54.0, golang.org/x/net v0.57.0) and bumped
  the Go toolchain to 1.26.5 to remediate Trivy-flagged CVEs.
• Fixed a SQL injection vulnerability in role attribute handling during
  database creation and updates.

PLAT-696

[coderabbitai]

Warning

Review limit reached

@tsivaprasad, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 47 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 2510f796-9771-4538-80cf-26a6a5bce59a

📥 Commits

Reviewing files that changed from the base of the PR and between cd1ecdb and 4a8a851.

📒 Files selected for processing (1)

• changes/unreleased/Fixed-20260716-000000.yaml

📝 Walkthrough

Walkthrough

Changes

Release note entries

Layer / File(s)	Summary
Database and version capabilities changes/unreleased/Added-20260625-000000.yaml, changes/unreleased/Added-20260701-*.yaml, changes/unreleased/Added-20260707-000000.yaml	Adds unreleased notes for spock validation, database image upgrades and pinning, and manifest-driven version resolution.
Runtime and distribution additions changes/unreleased/Added-20260707-000001.yaml, changes/unreleased/Added-20260713-000000.yaml, changes/unreleased/Added-20260723-000000.yaml	Documents IPv6 autodetection fallback, cancellation propagation, and RPM/DEB repository publication.
Fix and security entries changes/unreleased/Fixed-*.yaml, changes/unreleased/Security-20260721-000000.yaml	Records fixes for reconciliation, Patroni IPv4-mapped IPv6 handling, rolling updates, latest versions, and SQL injection in role attributes.

Poem

I’m a rabbit with changelogs to share,
Twelve fresh notes hop through the air.
Fixes thump, new features glow,
Security guards stand in a row.
Release notes nibble carrots tonight! 🐇

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise, conventional, and accurately describes the main change: adding missing changelog entries.
Description check	✅ Passed	The description covers summary, changes, testing, and release context, though it omits the template's checklist and notes sections.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch PLAT-696-cleanup-release-notes-for-v-0-10-0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@changes/unreleased/Fixed-20260716-000000.yaml`:
- Line 2: Update the changelog entry’s body value to quote the entire string,
preserving the existing message while ensuring the embedded “version”: “latest”
text and its colon-space sequence are valid YAML.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 02e8ffcb-f3a4-49d9-8e8a-fbb1ef039792

📥 Commits

Reviewing files that changed from the base of the PR and between 83b91b7 and cd1ecdb.

📒 Files selected for processing (12)

• changes/unreleased/Added-20260625-000000.yaml
• changes/unreleased/Added-20260701-000000.yaml
• changes/unreleased/Added-20260701-000001.yaml
• changes/unreleased/Added-20260707-000000.yaml
• changes/unreleased/Added-20260707-000001.yaml
• changes/unreleased/Added-20260713-000000.yaml
• changes/unreleased/Added-20260723-000000.yaml
• changes/unreleased/Fixed-20260706-000000.yaml
• changes/unreleased/Fixed-20260708-000000.yaml
• changes/unreleased/Fixed-20260715-000001.yaml
• changes/unreleased/Fixed-20260716-000000.yaml
• changes/unreleased/Security-20260721-000000.yaml