Fix supautils in authenticator session_preload_libraries (#2113)

* fix: assure supautils on session_preload_libraries in authenticator role

* fix: expected output

* fix: quoting

* fix: regress tests

* chore: bump versions to release

Author: samrose

ansible/vars.yml

@@ -10,9 +10,9 @@ postgres_major:
 
 # Full version strings for each major version
 postgres_release:
-  postgresorioledb-17: "17.6.0.065-orioledb"
-  postgres17: "17.6.1.108"
-  postgres15: "15.14.1.108"
+  postgresorioledb-17: "17.6.0.066-orioledb"
+  postgres17: "17.6.1.109"
+  postgres15: "15.14.1.109"
 
 # Non Postgres Extensions
 pgbouncer_release: 1.25.1

migrations/db/migrations/20260413000000_fix-authenticator-session-preload-libraries.sql

@@ -0,0 +1,8 @@
+-- migrate:up
+
+-- The original fix in 20220224211803 checked pg_available_extensions for
+-- supautils, but supautils is a preload library without a .control file,
+-- so it never appears in pg_available_extensions. That migration was a no-op.
+ALTER ROLE authenticator SET session_preload_libraries = supautils, safeupdate;
+
+-- migrate:down

nix/tests/expected/roles.out

@@ -60,11 +60,11 @@ select
 from pg_roles r
 where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections')
 order by rolname;
-          rolname           |                                    rolconfig                                    
-----------------------------+---------------------------------------------------------------------------------
+          rolname           |                                        rolconfig                                         
+----------------------------+------------------------------------------------------------------------------------------
  anon                       | {statement_timeout=3s}
  authenticated              | {statement_timeout=8s}
- authenticator              | {session_preload_libraries=safeupdate,statement_timeout=8s,lock_timeout=8s}
+ authenticator              | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s}
  dashboard_user             | 
  pg_checkpoint              | 
  pg_database_owner          | 

nix/tests/expected/z_multigres-orioledb-17_roles.out

@@ -57,11 +57,11 @@ select
 from pg_roles r
 where rolname not in ('pg_create_subscription', 'pg_maintain', 'pg_use_reserved_connections')
 order by rolname;
-          rolname           |                                    rolconfig                                    
-----------------------------+---------------------------------------------------------------------------------
+          rolname           |                                        rolconfig                                         
+----------------------------+------------------------------------------------------------------------------------------
  anon                       | {statement_timeout=3s}
  authenticated              | {statement_timeout=8s}
- authenticator              | {session_preload_libraries=safeupdate,statement_timeout=8s,lock_timeout=8s}
+ authenticator              | {"session_preload_libraries=supautils, safeupdate",statement_timeout=8s,lock_timeout=8s}
  dashboard_user             | 
  pg_checkpoint              | 
  pg_database_owner          |