Pin exact SQL service versions

Author: TonisOrmisson

.github/workflows/ci.yml

@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@v7
         with: &specification-checkout
           repository: OpenStatSpec/specification
-          ref: fef0dc6f4b17ff7141dad3f49d0524c63efbfed5
+          ref: e94ae8349d2b0dffe0c65e820b4b22b8c074b7b5
           path: openstatspec-specification
       - name: Checkout required SPSS engine
         uses: actions/checkout@v7
@@ -63,7 +63,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        postgres: ["17", "18"]
+        postgres: ["17.10", "18.4"]
     services:
       postgres:
         image: postgres:${{ matrix.postgres }}
@@ -77,6 +77,7 @@ jobs:
           --health-interval 10s --health-timeout 5s --health-retries 5
     env:
       OPENSTATSPEC_POSTGRES_URL: postgresql+psycopg://openstatspec:openstatspec@localhost:5432/openstatspec
+      OPENSTATSPEC_EXPECTED_POSTGRES_VERSION: ${{ matrix.postgres }}
     steps: &sql-test-steps
       - uses: actions/checkout@v7
       - name: Checkout OpenStatSpec specification fixtures
@@ -99,7 +100,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        mysql: ["8.4", "9.7"]
+        mysql: ["8.4.11", "9.7.2"]
     services:
       mysql:
         image: mysql:${{ matrix.mysql }}
@@ -114,6 +115,7 @@ jobs:
           --health-interval 10s --health-timeout 5s --health-retries 10
     env:
       OPENSTATSPEC_MYSQL_URL: mysql+pymysql://openstatspec:openstatspec@localhost:3306/openstatspec
+      OPENSTATSPEC_EXPECTED_MYSQL_VERSION: ${{ matrix.mysql }}
     steps: *sql-test-steps
 
   mariadb-integration:
@@ -122,7 +124,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        mariadb: ["11.4", "11.8", "12.3"]
+        mariadb: ["11.4.12", "11.8.8", "12.3.2"]
     services:
       mariadb:
         image: mariadb:${{ matrix.mariadb }}
@@ -137,6 +139,7 @@ jobs:
           --health-interval 10s --health-timeout 5s --health-retries 10
     env:
       OPENSTATSPEC_MARIADB_URL: mysql+pymysql://openstatspec:openstatspec@localhost:3306/openstatspec
+      OPENSTATSPEC_EXPECTED_MARIADB_VERSION: ${{ matrix.mariadb }}
     steps: *sql-test-steps
 
   dolt-integration:

.github/workflows/release.yml

@@ -47,7 +47,7 @@ jobs:
         uses: actions/checkout@v7
         with:
           repository: OpenStatSpec/specification
-          ref: fef0dc6f4b17ff7141dad3f49d0524c63efbfed5
+          ref: e94ae8349d2b0dffe0c65e820b4b22b8c074b7b5
           path: openstatspec-specification
       - name: Checkout required SPSS engine
         uses: actions/checkout@v7

CHANGELOG.md

@@ -2,6 +2,25 @@
 
 All notable changes to this reference implementation are documented here.
 
+## Unreleased
+
+### Changed
+
+- SQL server support now distinguishes conservative family claims from exact
+  CI evidence: PostgreSQL 17.x/18.x at 17.10/18.4, MySQL 8.4.x/9.7.x at
+  8.4.11/9.7.2, and MariaDB 11.4.x/11.8.x/12.3.x at
+  11.4.12/11.8.8/12.3.2. Each service job verifies the live normalized version.
+- Dolt remains independently pinned and service-tested at exact version 2.2.2.
+  SQLite retains its core `>=3.24.0,<4.0.0` and optional workflow
+  `>=3.35.0,<4.0.0` tiers. MSSQL remains unsupported and roadmap-only.
+
+### Specification basis
+
+- CI, release validation, and machine-readable capabilities use untagged
+  OpenStatSpec specification `main` commit
+  `e94ae8349d2b0dffe0c65e820b4b22b8c074b7b5`; the specification release value
+  is null until that commit is tagged.
+
 ## 0.2.0 — 2026-07-30
 
 This release extends the reference adapter while keeping imported source

README.md

@@ -50,12 +50,18 @@ derived datasets through a public catalog API. It uses a separate profile
 catalog and never presents SQL output as an imported source dataset.
 Workflow operations support SQLite only in this milestone and fail closed on
 PostgreSQL/MySQL/MariaDB; core import/export database support is unchanged.
+The core SQLite import/export profile accepts SQLite `>=3.24.0,<4.0.0`; the
+optional transformation workflow deliberately has the narrower
+`>=3.35.0,<4.0.0` runtime preflight. These independent tiers do not change the
+server-profile matrix. Microsoft SQL Server is not supported; its future
+dialect is scoped only in the specification's
+[MSSQL roadmap](https://github.com/OpenStatSpec/specification/blob/main/docs/mssql-dialect-roadmap.md).
 
 See [the SQL transformation workflow](docs/sql-transformation-workflow.md) for
 Python and CLI examples, migration behavior, hashing, atomicity, and the exact
 implemented capability boundary.
 
-## 0.2.0 support status
+## Current support status
 
 The adapter requires `openstatspec-pyspssio==0.5.1.post2` as its sole SPSS
 engine. Its import module remains `pyspssio`; the exact source commit is recorded
@@ -64,7 +70,17 @@ SAV/ZSAV export for the semantics exposed by that engine. SQLite is the local
 reference path.
 PostgreSQL, MySQL, MariaDB, and Dolt are each covered by separate service-backed CI
 conformance checks. Dolt support is an independent core profile pinned to 2.2.2;
-other Dolt versions and unknown MySQL-wire products fail closed. Use these explicit SQLAlchemy URLs:
+other Dolt versions and unknown MySQL-wire products fail closed.
+
+The supported family claims are broader than the deliberately exact CI
+evidence points: PostgreSQL 17.x/18.x is exercised at 17.10/18.4, MySQL
+8.4.x/9.7.x at 8.4.11/9.7.2, and MariaDB 11.4.x/11.8.x/12.3.x at
+11.4.12/11.8.8/12.3.2. Each service job checks the normalized live server
+version against its exact matrix entry before that run can count as evidence.
+Dolt remains a separate exact-version policy: its only claimed and CI-tested
+version is 2.2.2.
+
+Use these explicit SQLAlchemy URLs:
 
 - SQLite: `sqlite:///dataset.sqlite`
 - PostgreSQL: `postgresql+psycopg://user:password@host/database`

docs/release-readiness.md

@@ -1,4 +1,4 @@
-# 0.2.0 release readiness
+# Next release readiness
 
 This page records the expected release contract, not a publication event.
 Creating a version tag remains a separate maintainer action.
@@ -14,13 +14,13 @@ database contract.
 
 ## SQL profiles
 
-| Profile | Connection URL | Verification |
-| --- | --- | --- |
-| SQLite | `sqlite:///dataset.sqlite` | Python 3.11–3.14 local reference jobs |
-| PostgreSQL | `postgresql+psycopg://…` | PostgreSQL 17 and 18 service jobs |
-| MySQL | `mysql+pymysql://…` | MySQL 8.4 and 9.7 service jobs |
-| MariaDB | `mysql+pymysql://…` | MariaDB 11.4, 11.8, and 12.3 service jobs |
-| Dolt | `mysql+pymysql://…` | Exact Dolt 2.2.2 service job |
+| Profile | Connection URL | Claimed versions | Exact CI evidence |
+| --- | --- | --- | --- |
+| SQLite | `sqlite:///dataset.sqlite` | `>=3.24.0,<4.0.0` | Active Python 3.11–3.14 runner version |
+| PostgreSQL | `postgresql+psycopg://…` | 17.x and 18.x | 17.10 and 18.4 |
+| MySQL | `mysql+pymysql://…` | 8.4.x and 9.7.x | 8.4.11 and 9.7.2 |
+| MariaDB | `mysql+pymysql://…` | 11.4.x, 11.8.x, and 12.3.x | 11.4.12, 11.8.8, and 12.3.2 |
+| Dolt | `mysql+pymysql://…` | Exact 2.2.2 | Exact 2.2.2 |
 
 Separate service matrices test the shared MySQL/MariaDB profile contract while
 retaining distinct active-server identities and version claims. Dolt is an
@@ -29,6 +29,15 @@ independent core profile that fails closed unless the product version is exactly
 claim coverage for every server configuration. The machine-readable capability
 declaration reports both the theoretical profile boundaries and effective
 limits observed from the active connection.
+Every server service job compares the normalized live product version with its
+exact matrix entry, so a moved or mismatched image cannot substantiate the CI
+declaration. SQLite's optional Transformation Workflow retains its narrower
+`>=3.35.0,<4.0.0` live preflight alongside the core `>=3.24.0,<4.0.0` policy.
+Microsoft SQL Server remains unsupported and must not appear in runtime
+capabilities; future implementation requirements are documented in the
+specification's
+[MSSQL dialect roadmap](https://github.com/OpenStatSpec/specification/blob/main/docs/mssql-dialect-roadmap.md).
+
 
 ## Export-loss policy
 
@@ -53,14 +62,15 @@ machine-readable loss report with the export result.
    first and confirm that a clean environment can download it from PyPI. The
    main package has no fallback SPSS engine.
 2. Run `python -m pytest -m "not services"`.
-3. Confirm the GitHub Actions matrix is green for PostgreSQL 17/18, MySQL
-   8.4/9.7, MariaDB 11.4/11.8/12.3, and exact Dolt 2.2.2.
+3. Confirm the GitHub Actions matrix is green for exact PostgreSQL 17.10/18.4,
+   MySQL 8.4.11/9.7.2, MariaDB 11.4.12/11.8.8/12.3.2, and exact Dolt
+   2.2.2 service evidence.
 4. Build with `python -m build` and install the generated wheel in a clean
    environment.
 5. Confirm `openstatspec capabilities` reflects the intended support boundary.
-6. Confirm the `v0.2.0` tag matches package version `0.2.0`, and that CI and
-   release fixtures use specification release `v1.0.0-rc.1` at exact commit
-   `fef0dc6f4b17ff7141dad3f49d0524c63efbfed5`.
+6. Confirm the release tag matches the package version and that CI, release
+   fixtures, and capabilities use untagged specification `main` commit
+   `e94ae8349d2b0dffe0c65e820b4b22b8c074b7b5` with a null release value.
 7. Review this document, the README, and CHANGELOG for accurate scope.
 
 The tag-triggered release workflow repeats the non-service test suite, builds

docs/sav-profile.md

@@ -15,12 +15,25 @@ unencrypted .sav and .zsav files, and writes both formats through the same imple
 
 SQLite has a local reference fixture. PostgreSQL, MySQL, MariaDB, and Dolt have
 separate service-backed conformance checks in GitHub Actions that import,
-validate, and export the supported fixture. Dolt is an independent core profile
-pinned to exact server version 2.2.2 and detected over `mysql+pymysql` by active
-server identity; other Dolt versions and unknown MySQL-wire products fail closed.
-The core Dolt profile does not claim support for the separate Transformation
-Workflow. An import that exceeds a target's strict single-table column or row
-envelope fails before it creates a dataset.
+validate, and export the supported fixture. The family claims and exact CI
+points are PostgreSQL 17.x/18.x at 17.10/18.4, MySQL 8.4.x/9.7.x at
+8.4.11/9.7.2, and MariaDB 11.4.x/11.8.x/12.3.x at
+11.4.12/11.8.8/12.3.2. CI compares each live normalized server version with
+that exact evidence point.
+
+Dolt is an independent core profile pinned to exact server version 2.2.2 and
+detected over `mysql+pymysql` by active server identity; other Dolt versions
+and unknown MySQL-wire products fail closed. The core Dolt profile does not
+claim support for the separate Transformation Workflow. An import that exceeds
+a target's strict single-table column or row envelope fails before it creates a
+dataset.
+
+The core SQLite profile remains `>=3.24.0,<4.0.0`; only the optional
+Transformation Workflow requires `>=3.35.0,<4.0.0`. Microsoft SQL Server is
+not a supported profile. Its driver, SQL-difference, preflight, CI,
+conformance, security, and atomicity work is future scope in the
+specification's
+[MSSQL dialect roadmap](https://github.com/OpenStatSpec/specification/blob/main/docs/mssql-dialect-roadmap.md).
 
 ## Fidelity contract
 

src/openstatspec/sql/capabilities.py

@@ -15,8 +15,8 @@
 from .profiles import profile_for_url, validate_connection_url
 from ..core import UnsupportedOperationError
 
-SPECIFICATION_COMMIT = "fef0dc6f4b17ff7141dad3f49d0524c63efbfed5"
-SPECIFICATION_RELEASE: str | None = "v1.0.0-rc.1"
+SPECIFICATION_COMMIT = "e94ae8349d2b0dffe0c65e820b4b22b8c074b7b5"
+SPECIFICATION_RELEASE: str | None = None
 
 SERVER_POLICIES = {
     "sqlite": {
@@ -25,19 +25,19 @@
     },
     "mysql": {
         "claimed": ["MySQL 8.4.x", "MySQL 9.7.x"],
-        "ci": ["MySQL 8.4.x", "MySQL 9.7.x"],
+        "ci": ["MySQL 8.4.11", "MySQL 9.7.2"],
     },
     "dolt": {
         "claimed": ["Dolt 2.2.2"],
         "ci": ["Dolt 2.2.2"],
     },
     "mariadb": {
         "claimed": ["MariaDB 11.4.x", "MariaDB 11.8.x", "MariaDB 12.3.x"],
-        "ci": ["MariaDB 11.4.x", "MariaDB 11.8.x", "MariaDB 12.3.x"],
+        "ci": ["MariaDB 11.4.12", "MariaDB 11.8.8", "MariaDB 12.3.2"],
     },
     "postgresql": {
         "claimed": ["PostgreSQL 17.x", "PostgreSQL 18.x"],
-        "ci": ["PostgreSQL 17.x", "PostgreSQL 18.x"],
+        "ci": ["PostgreSQL 17.10", "PostgreSQL 18.4"],
     },
 }
 
@@ -155,7 +155,7 @@ def active_connection(database_url: str) -> dict[str, Any]:
         "product": profile_name,
         "transport": "mysql" if dialect in {"mysql", "mariadb"} else dialect,
         "driver": engine.dialect.driver,
-        "server_version": _normalized_version(raw_product_version),
+        "server_version": _normalized_version(profile_name, raw_product_version),
         "raw_server_version": raw_product_version,
         "raw_wire_version": raw_wire_version,
         "raw_product_version": raw_product_version,
@@ -422,5 +422,8 @@ def _version_tuple(raw_version: str) -> tuple[int, ...]:
     return tuple(int(part) for part in match.groups(default="0"))
 
 
-def _normalized_version(raw_version: str) -> str:
-    return ".".join(str(part) for part in _version_tuple(raw_version))
+def _normalized_version(profile: str, raw_version: str) -> str:
+    """Normalize a product version using that product's stable release width."""
+    version = _version_tuple(raw_version)
+    width = 2 if profile == "postgresql" else 3
+    return ".".join(str(part) for part in version[:width])

tests/test_cli.py

@@ -39,8 +39,8 @@ def test_cli_import_inspect_validate_and_export_emit_json(tmp_path, capsys) -> N
 def test_capability_matrix_is_public_and_cli_matches_engine_boundary(capsys) -> None:
     matrix = openstatspec.capability_matrix()
     assert matrix["specification_status"] == "release_candidate"
-    assert matrix["specification_release"] == "v1.0.0-rc.1"
-    assert matrix["specification_commit"] == "fef0dc6f4b17ff7141dad3f49d0524c63efbfed5"
+    assert matrix["specification_release"] is None
+    assert matrix["specification_commit"] == "e94ae8349d2b0dffe0c65e820b4b22b8c074b7b5"
     assert matrix["directions"] == ["import", "export", "semantic_round_trip"]
     assert matrix["active_connection"] is None
     assert matrix["engine"]["package"] == "openstatspec-pyspssio"