tabularis
/blog/#security

7 posts tagged with #security

Aug 3, 2026, 19:001 min read#security

Installing Tabularis from the AUR, the Careful Way

After the malware wave that hit 200+ AUR packages, the Arch team temporarily disabled package adoption. Our tabularis-bin package is unaffected and still on the AUR, but a few of you asked how to install without going through an AUR helper. Here's how to build straight from our GitHub repo — and what to check in any PKGBUILD before you run it.

Read article

More in #security

Release v0.16.0

v0.16.0: A Hosted Plugin Registry, Kubernetes Your Way, and Backups That Encrypt Themselves

v0.16.0 gives the plugin ecosystem real infrastructure: a hosted registry at registry.tabularis.dev, a searchable driver catalogue inside New Connection, and one-click deep-link installs — plus kubectl/kubeconfig overrides for Kubernetes tunnels, automatic encrypted connection backups to a folder or WebDAV, run-statement-at-cursor in the editor, AWS RDS IAM authentication for MySQL, and Elasticsearch and Cloudflare D1 drivers.

Release v0.15.0

v0.15.0: Bring Your Connections With You — Imports, Nested Groups, and Encrypted Exports

v0.15.0 is the connections release: import saved connections from DBeaver, Beekeeper Studio, TablePlus, DataGrip and Sequel Ace, organize them in nested folders, act on many at once, and export them encrypted — plus ENUM dropdown editing on MySQL and PostgreSQL, an MCP safety fix for EXPLAIN ANALYZE, and Windows that finally stops flashing console windows.

Where Tabularis Keeps Its Secrets: Thank You, 1Password

An open-source project accumulates secrets like signing keys, certificates and deploy tokens, and they end up pasted across GitHub repo settings with no real story for rotation or audit. 1Password gives open-source projects a free plan, we qualified for it, and it's good enough to deserve a genuine thank-you. Here's why 1Password is a great secret manager for developers, and how we plan to move Tabularis' CI secrets into one vault and pull them into GitHub Actions with op:// references.

Your Database GUI Shouldn't Need an Account

A database client is the most credential-dense application on a developer's machine. Routing any part of it through a vendor account inverts the trust model — and you usually find out why that matters on the day the vendor pivots.

Release v0.13.0

v0.13.0: Kubernetes Tunnels, a Quick Navigator, and MCP That Reaches Your Plugins

v0.13.0 adds first-class Kubernetes port-forward tunnels alongside SSH, a Cmd+P Quick Navigator for jumping to any table in any database, MCP access to plugin-driven connections, a closed multi-statement bypass in the MCP safety gates, Codex as an MCP install target, DML tabs in Generate SQL, a configurable display timezone, self-healing query history, and MySQL SSL modes that are actually honored.

Release v0.6.0

Passwords in the Keychain, Queries in Three Languages

v0.6.0 integrates system keychain storage for credentials and ships the full UI in English, Italian, and Spanish.