[codex] add credcheck extension overlay

.github/workflows/upstream-sync.yml

@@ -34,12 +34,27 @@ jobs:
           echo "changed_count=$changed_count" >> "$GITHUB_OUTPUT"
           echo "changed_csv=$changed_csv" >> "$GITHUB_OUTPUT"
 
+      - name: Configure signed commits
+        if: steps.sync.outputs.changed_count != '0'
+        env:
+          SIGNING_KEY: ${{ secrets.COMMIT_SIGNING_KEY }}
+        run: |
+          set -euo pipefail
+          install -d -m 700 ~/.ssh
+          printf '%s\n' "$SIGNING_KEY" > ~/.ssh/commit_signing_key
+          chmod 600 ~/.ssh/commit_signing_key
+          git config --global gpg.format ssh
+          git config --global user.signingkey ~/.ssh/commit_signing_key
+          git config --global commit.gpgsign true
+
       - name: Create PR
         id: cpr
         if: steps.sync.outputs.changed_count != '0'
         uses: peter-evans/create-pull-request@v6
         with:
           commit-message: "chore(upstream): sync portable PostgreSQL releases (${{ steps.sync.outputs.changed_csv }})"
+          author: "4mGLn <127629+4mGLn@users.noreply.github.com>"
+          committer: "4mGLn <127629+4mGLn@users.noreply.github.com>"
           title: "chore(upstream): sync portable PostgreSQL releases (${{ steps.sync.outputs.changed_csv }})"
           body: |
             This PR was created automatically.

README.md

@@ -23,6 +23,7 @@ Third-party extensions are built and released as separate overlay archives:
 - `pg_partman`
 - `pg_cron`
 - `pgvector`
+- `credcheck`
 
 Each overlay archive is intended to be extracted over the matching base package for the same PostgreSQL version and target.
 

ci/postgresql-release-config.json

@@ -64,6 +64,14 @@
     }
   },
   "separate_extensions": {
+    "credcheck": {
+      "repo": "https://github.com/HexaCluster/credcheck.git",
+      "ref": "v5.0",
+      "notes": [
+        "Requires shared_preload_libraries = 'credcheck'.",
+        "Enable with CREATE EXTENSION credcheck;"
+      ]
+    },
     "pg_cron": {
       "repo": "https://github.com/citusdata/pg_cron.git",
       "ref": "v1.6.7",