docs(release): prepare v1.17.0

.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "gosqlx",
       "source": "./plugins/gosqlx",
       "description": "Validate, format, lint, analyze and security-scan SQL with GoSQLX (MCP tools, skills, slash commands, a SQL reviewer agent and a .sql validation hook).",
-      "version": "1.16.0",
+      "version": "1.17.0",
       "category": "development",
       "tags": ["sql", "database", "linting", "formatting", "security", "mcp"],
       "homepage": "https://gosqlx.dev",

.github/lighthouse/README.md

@@ -14,6 +14,7 @@ Budgets are the measured value plus roughly 20-30% headroom for CI variance.
 | `/` | 0.63, 0.80, 0.80 | 339 KB | 114 KB | 18 KB | 2.90 MB (2.4 MB is non-script/non-font assets) |
 | `/compare/` | 0.87, 0.89, 0.89 | 329 KB | 114 KB | 18 KB | 0.49 MB |
 | `/playground/` (CI median, 2026-10-20, PR #825) | - | 420 KB | - | - | - |
+| `/playground/` (CI median, 2026-10-29, PR #877) | - | - | - | - | 3.60 MB (mostly the GoSQLX WASM module) |
 
 The other audited routes (`/playground/`, `/docs/`, `/docs/getting-started/`, `/benchmarks/`, `/changelog/`) share the
 same layout chunks; their per-route numbers are in the uploaded Lighthouse artifacts. The local run was cut short by
@@ -27,10 +28,11 @@ a full disk, so only `/` and `/compare/` were measured locally.
 | accessibility, seo | error | 0.95 |
 | best-practices | warn | 0.85 |
 | resource-summary script / font / stylesheet / total | error | 420 KB / 150 KB / 25 KB / 3.6 MB |
-| resource-summary script, `/playground/` only | error | 480 KB |
+| resource-summary script / total, `/playground/` only | error | 480 KB / 4.2 MB |
 
 `/playground/` loads the CodeMirror editor and the GoSQLX highlighting bridge, so it gets its own script budget
-via `assertMatrix` (the measured 420 KB plus ~15% headroom). Every other route keeps the shared 420 KB budget, and
+via `assertMatrix` (the measured 420 KB plus ~15% headroom). It also loads the GoSQLX WASM module, which grows
+with the parser, so its total budget is the measured 3.60 MB (v1.17.0) plus ~15% headroom. Every other route keeps the shared 420 KB budget, and
 the two matrix entries are otherwise identical: change an assertion in both when editing thresholds.
 
 Re-measure and update this table whenever the budgets are changed.

.github/lighthouse/lighthouserc.json

@@ -25,7 +25,7 @@
             "resource-summary:script:size": ["error", { "maxNumericValue": 480000, "aggregationMethod": "median" }],
             "resource-summary:font:size": ["error", { "maxNumericValue": 150000, "aggregationMethod": "median" }],
             "resource-summary:stylesheet:size": ["error", { "maxNumericValue": 25000, "aggregationMethod": "median" }],
-            "resource-summary:total:size": ["error", { "maxNumericValue": 3600000, "aggregationMethod": "median" }]
+            "resource-summary:total:size": ["error", { "maxNumericValue": 4200000, "aggregationMethod": "median" }]
           }
         }
       ]

CLAUDE.md

@@ -8,7 +8,7 @@ GoSQLX is a **production-ready**, **race-free**, high-performance SQL parsing SD
 
 **Requirements**: Go 1.26+ (upgraded from 1.23 to fix stdlib vulnerabilities; `mark3labs/mcp-go` requires 1.23)
 
-**Production Status**: ✅ Validated for production deployment (v1.6.0+, current: v1.16.0)
+**Production Status**: ✅ Validated for production deployment (v1.6.0+, current: v1.17.0)
 - Thread-safe with zero race conditions (20,000+ concurrent operations tested)
 - 1.38M+ ops/sec sustained, 1.5M peak with memory-efficient object pooling
 - ~80-85% SQL-99 compliance (window functions, CTEs, set operations, MERGE, etc.)

cmd/gosqlx/cmd/doc.go

@@ -367,7 +367,7 @@
 //
 // Version information:
 //
-//	Version = "1.16.0" - Current CLI version
+//	Version = "1.17.0" - Current CLI version
 //
 // # Dependencies
 //

cmd/gosqlx/cmd/root.go

@@ -31,6 +31,14 @@ import (
 // This version tracks feature releases and compatibility.
 // Format: MAJOR.MINOR.PATCH (Semantic Versioning 2.0.0)
 //
+// Version 1.17.0 includes:
+//   - Real-world dialect corpus: 2,813 statements across 8 dialects checked for parse, format and round trip
+//   - Dialect-faithful formatting: Oracle / lines, U& identifiers, T-SQL GO comments, lower-case keywords
+//   - Transpiler fixes: SQL Server set-operation LIMIT to OFFSET/FETCH, nested operator rewrites
+//   - ScanSQL hardening against comment, quoting and dollar-quote bypasses; analyze and lint report its findings
+//   - LSP hardening: spec textDocumentSync key, malformed-message and didChange safety, -32601 for unknown methods
+//   - A GO line inside a SQL Server statement is now a parse error
+//
 // Version 1.16.0 includes:
 //   - SQL syntax highlighting (pkg/highlight) for API, CLI (gosqlx highlight), LSP, WASM and playground
 //   - Dialect-aware LSP (diagnostics, formatting, completion, didChangeConfiguration)

cmd/gosqlx/doc.go

@@ -24,7 +24,7 @@
 //
 // # Version
 //
-// Current version: 1.16.0
+// Current version: 1.17.0
 //
 // # Architecture
 //