kolaente 1b8167d4cd perf(db): use the pgx driver for postgres ...

lib/pq sends every query as an unnamed prepared statement, so PostgreSQL
plans each statement from scratch. pgx via database/sql keeps a per-connection
statement cache and reuses named prepared statements instead, removing that
planning cost from the hot path.

xorm already ships a "pgx" driver mapping, so the switch is just the driver
name plus the blank import. The connection string format is unchanged: pgconn
parses the same URL and forwards unknown parameters (search_path) as runtime
parameters.

Named prepared statements do not work through a connection pooler in
transaction pooling mode unless it supports them (PgBouncer 1.21 and later,
with max_prepared_statements above 0). Those setups can raise that setting or
connect to PostgreSQL directly, which is no loss since Vikunja already pools
via database.maxopenconnections.

lib/pq was only used for QuoteIdentifier, which is now inlined.

2026-09-05 23:16:31 +02:00

..

admin_actions_test.go

…

admin_bypass_test.go

…

admin_bypass.go

…

admin_overview.go

…

admin_project_list.go

…

admin_user_actions.go

feat(admin): port GET /admin/users to /api/v2 (#3676)

2026-08-31 09:33:47 +02:00

admin_user_create.go

…

api_routes_test.go

fix(api): enforce token scopes for task expansions

2026-08-31 18:37:03 +02:00

api_routes.go

fix(api): enforce token scopes for task expansions

2026-08-31 18:37:03 +02:00

api_tokens_expiry_cron_test.go

…

api_tokens_expiry_cron.go

…

api_tokens_expiry_notification_test.go

feat: show relative time in api token expiry notifications

2026-08-18 09:44:49 +02:00

api_tokens_expiry_notification.go

feat: show relative time in api token expiry notifications

2026-08-18 09:44:49 +02:00

api_tokens_permissions.go

refactor: use IsBotOwnedBy for bot ownership checks

2026-08-29 23:29:46 +02:00

api_tokens_test.go

fix(api/v2): don't require read_one for autopatch's internal GET

2026-08-19 13:01:59 +02:00

api_tokens.go

refactor: use IsBotOwnedBy for bot ownership checks

2026-08-29 23:29:46 +02:00

bot_users_permissions.go

refactor(bots): take a verified user, not any web.Auth

2026-08-29 23:29:46 +02:00

bot_users_test.go

…

bot_users.go

fix(security): reject link shares at team, bot and webhook permission checks

2026-08-04 13:40:11 +02:00

bulk_task_create_test.go

feat(tasks): add BulkTaskCreation model

2026-08-02 16:21:50 +02:00

bulk_task_create.go

feat(tasks): add BulkTaskCreation model

2026-08-02 16:21:50 +02:00

bulk_task_test.go

…

bulk_task.go

…

comment_quotes_test.go

…

comment_quotes.go

…

error_test.go

…

error.go

fix(filters): bound expression complexity

2026-08-31 18:37:03 +02:00

events.go

feat(tasks): generalize task creation to batches

2026-08-02 16:21:50 +02:00

export_test.go

fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock

2026-08-16 17:57:52 +02:00

export.go

fix: return 404 instead of 500 when a stored file is missing from disk

2026-09-04 23:36:53 +02:00

favorites.go

…

filter_complexity_test.go

fix(filters): bound expression complexity

2026-08-31 18:37:03 +02:00

kanban_permissions.go

fix(projects): tolerate dangling stored parent when updating, keep admin bypass for filter buckets

2026-08-20 11:58:06 +02:00

kanban_task_bucket_test.go

…

kanban_task_bucket.go

feat(tasks): generalize task creation to batches

2026-08-02 16:21:50 +02:00

kanban_test.go

fix(projects): sub-resource permission checks no longer get the un-archive exception

2026-08-20 11:58:06 +02:00

kanban.go

fix(views): seed and maintain kanban buckets when a view's kind changes

2026-08-04 01:09:10 +02:00

label_permissions.go

fix(labels): fail closed if the visibility condition degenerates

2026-08-30 17:27:01 +02:00

label_task_permissions.go

…

label_task_test.go

refactor(bots): take a verified user, not any web.Auth

2026-08-29 23:29:46 +02:00

label_task.go

refactor(labels): share one visibility condition between list and read

2026-08-30 17:27:01 +02:00

label_test.go

fix(labels): fail closed if the visibility condition degenerates

2026-08-30 17:27:01 +02:00

label.go

refactor(labels): split the label query into two honest functions

2026-08-30 17:04:35 +02:00

link_sharing_permissions.go

fix(sharing): restrict link share hash reads

2026-08-31 18:37:03 +02:00

link_sharing_test.go

fix(sharing): restrict link share hash reads

2026-08-31 18:37:03 +02:00

link_sharing.go

fix(security): return the negated user id from LinkSharing.GetID

2026-08-04 13:40:11 +02:00

listeners_test.go

fix: don't report failed webhook deliveries to sentry

2026-09-04 23:27:29 +02:00

listeners.go

fix: lock project views before writing task positions in saved filter sync

2026-09-05 12:30:42 +02:00

main_test.go

…

mentions_test.go

…

mentions.go

…

message.go

…

metrics_count_test.go

…

models.go

perf(db): use the pgx driver for postgres

2026-09-05 23:16:31 +02:00

notifications_database.go

feat(notifications): add clearing stored notifications (#2735)

2026-08-29 21:22:43 +00:00

notifications_permissions_test.go

feat(notifications): notify subscribers when a task is created

2026-08-27 15:41:58 +02:00

notifications_permissions.go

perf(projects): filter accessible projects through the memo

2026-08-29 22:51:44 +02:00

notifications_refresh_test.go

…

notifications_refresh.go

feat(notifications): notify subscribers when a task is created

2026-08-27 15:41:58 +02:00

notifications_task_identifier_test.go

fix(notifications): include the project prefix in task identifiers (#3538)

2026-08-18 16:38:00 +00:00

notifications_test.go

…

notifications.go

feat(notifications): notify subscribers when a task is created

2026-08-27 15:41:58 +02:00

oauth_codes.go

…

permissions_test.go

fix(permissions): decode a null permission as unknown, not read

2026-08-28 23:49:27 +02:00

permissions.go

fix(permissions): decode a null permission as unknown, not read

2026-08-28 23:49:27 +02:00

project_access_test.go

perf(projects): resolve a user's project access in one query per request

2026-08-29 22:51:44 +02:00

project_access.go

perf(projects): store the parent of top-level projects as null

2026-09-04 09:28:29 +02:00

project_duplicate_test.go

…

project_duplicate.go

fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock

2026-08-16 17:57:52 +02:00

project_json_test.go

…

project_permissions_multiple_teams_test.go

…

project_permissions_pseudo_test.go

fix(projects): report read for the Favorites pseudo project

2026-08-28 23:49:27 +02:00

project_permissions_subproject_test.go

test(projects): cover the parent owner on member-created subprojects

2026-08-28 23:49:27 +02:00

project_permissions.go

perf(projects): resolve project permissions from the access memo

2026-08-29 22:51:44 +02:00

project_repair_test.go

…

project_repair.go

perf(projects): store the parent of top-level projects as null

2026-09-04 09:28:29 +02:00

project_team_foreign_test.go

fix(sharing): restrict team attachment visibility

2026-08-31 18:37:03 +02:00

project_team_permissions.go

fix(sharing): restrict team attachment visibility

2026-08-31 18:37:03 +02:00

project_team_test.go

fix(sharing): restrict team attachment visibility

2026-08-31 18:37:03 +02:00

project_team.go

fix(sharing): restrict team attachment visibility

2026-08-31 18:37:03 +02:00

project_test.go

perf(projects): store the parent of top-level projects as null

2026-09-04 09:28:29 +02:00

project_users_permissions_test.go

…

project_users_permissions.go

…

project_users_test.go

fix(users): reject link shares from user listings

2026-08-31 18:37:03 +02:00

project_users.go

fix(users): reject link shares from user listings

2026-08-31 18:37:03 +02:00

project_view_permissions.go

…

project_view_test.go

fix(views): seed and maintain kanban buckets when a view's kind changes

2026-08-04 01:09:10 +02:00

project_view.go

fix(tasks): scope saved filter view updates to filters that can see the task

2026-08-29 18:36:59 +02:00

project.go

fix: lock project views before deleting a project's task positions

2026-09-05 12:30:42 +02:00

reaction_permissions.go

…

reaction_test.go

…

reaction.go

…

saved_filter_positions_test.go

…

saved_filters_permissions.go

fix: report the real link share id in saved filter errors

2026-08-04 13:40:11 +02:00

saved_filters_test.go

…

saved_filters.go

fix: lock project views before writing task positions in saved filter sync

2026-09-05 12:30:42 +02:00

sessions_permissions.go

…

sessions.go

…

setup_tests.go

…

subscription_permissions.go

feat(subscriptions): allow unsubscribing from an inherited subscription

2026-08-29 23:42:41 +02:00

subscription_test.go

test(subscriptions): cover the opt-out paths and the rows they leave behind

2026-08-29 23:42:41 +02:00

subscription.go

feat(subscriptions): enforce one subscription row per user and entity

2026-08-29 23:42:41 +02:00

task_assignees_permissions.go

…

task_assignees_test.go

fix(tasks): hide assignee email addresses

2026-08-31 18:37:03 +02:00

task_assignees.go

fix(tasks): hide assignee email addresses

2026-08-31 18:37:03 +02:00

task_attachment_permissions.go

…

task_attachment_test.go

fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock

2026-08-16 17:57:52 +02:00

task_attachment.go

fix(images): bound decode and resize dimensions

2026-08-31 18:37:03 +02:00

task_collection_filter_test.go

fix(filters): keep date filter boundaries inside the driver's year range

2026-09-05 20:24:08 +02:00

task_collection_filter.go

fix(filters): keep date filter boundaries inside the driver's year range

2026-09-05 20:24:08 +02:00

task_collection_sort_test.go

…

task_collection_sort.go

feat: filter tasks by creator username (#2916)

2026-08-31 10:48:39 +00:00

task_collection_test.go

feat: filter tasks by creator username (#2916)

2026-08-31 10:48:39 +00:00

task_collection.go

feat: filter tasks by creator username (#2916)

2026-08-31 10:48:39 +00:00

task_comment_permissions.go

refactor: drop redundant link share branch in comment permissions

2026-08-04 13:40:11 +02:00

task_comments_test.go

…

task_comments.go

…

task_created_notification_test.go

feat(notifications): notify subscribers when a task is created

2026-08-27 15:41:58 +02:00

task_delete_cron_test.go

…

task_delete_cron.go

…

task_duplicate_test.go

fix(projects): sub-resource permission checks no longer get the un-archive exception

2026-08-20 11:58:06 +02:00

task_duplicate.go

fix(projects): sub-resource permission checks no longer get the un-archive exception

2026-08-20 11:58:06 +02:00

task_overdue_reminder_test.go

…

task_overdue_reminder.go

…

task_position_test.go

fix: lock project views before writing task positions on create

2026-09-05 12:30:42 +02:00

task_position_view_test.go

fix(tasks): validate position target views

2026-08-31 18:37:03 +02:00

task_position.go

fix: lock views before repairing task positions

2026-09-05 12:30:42 +02:00

task_relation_authz_test.go

…

task_relation_permissions.go

fix(tasks): authorize both sides of relation deletion

2026-08-31 18:37:03 +02:00

task_relation_test.go

fix(tasks): authorize both sides of relation deletion

2026-08-31 18:37:03 +02:00

task_relation.go

…

task_reminder_test.go

fix(notifications): include the project prefix in task identifiers (#3538)

2026-08-18 16:38:00 +00:00

task_reminder.go

fix(notifications): include the project prefix in task identifiers (#3538)

2026-08-18 16:38:00 +00:00

task_search_bench_test.go

…

task_search_favorites_access_test.go

fix(tasks): require access for favorites

2026-08-31 18:37:03 +02:00

task_search_subtask_access_test.go

fix(tasks): restrict subtask expansion by access

2026-08-31 18:37:03 +02:00

task_search_test.go

…

task_search.go

fix(tasks): require access for favorites

2026-08-31 18:37:03 +02:00

task_unread_statuses.go

…

tasks_permissions.go

…

tasks_test.go

feat(tasks): subscribe task creator to their own task

2026-08-27 22:00:32 +02:00

tasks.go

fix: lock project views before writing task positions on update and delete

2026-09-05 12:30:42 +02:00

team_members_permissions.go

fix(security): reject link shares at team, bot and webhook permission checks

2026-08-04 13:40:11 +02:00

team_members_test.go

…

team_members.go

…

team_sync.go

…

teams_permissions_test.go

…

teams_permissions.go

fix(security): reject link shares at team, bot and webhook permission checks

2026-08-04 13:40:11 +02:00

teams_test.go

fix(teams): preserve members across list responses (#3486)

2026-08-20 15:32:23 +00:00

teams.go

fix(teams): preserve members across list responses (#3486)

2026-08-20 15:32:23 +00:00

time_tracking_filter.go

fix(filters): keep date filter boundaries inside the driver's year range

2026-09-05 20:24:08 +02:00

time_tracking_test.go

…

time_tracking.go

perf(projects): filter accessible projects through the memo

2026-08-29 22:51:44 +02:00

unsplash.go

…

user_delete_test.go

…

user_delete.go

…

user_list_test.go

fix(labels): share labels between all bots of the same owner

2026-08-29 23:29:46 +02:00

user_project_test.go

…

user_project.go

fix(sharing): restrict team attachment visibility

2026-08-31 18:37:03 +02:00

user_settings.go

…

users.go

…

webhooks_permissions.go

fix(projects): sub-resource permission checks no longer get the un-archive exception

2026-08-20 11:58:06 +02:00

webhooks_test.go

…

webhooks.go

fix(security): reject link shares in Webhook.ReadAll

2026-08-04 13:40:11 +02:00