On November 12, 2026, PostgreSQL 14 receives its final update. After that, the PostgreSQL project will no longer fix security issues in this version. One week later, on November 19, PostgreSQL 19 is due to ship, after being originally planned for late September or early October. If your company runs a customer portal, an ERP add-on or a custom business application on PostgreSQL, now is the time to check which version you are using.
What is changing
PostgreSQL 14 reaches end of life. Each major version is maintained for five years. Version 14 was released in September 2021. The regular update date on November 12, 2026 brings the last 14.x release; after that there will be no more bug fixes or security patches. Versions 15 to 18 remain supported, although version 15 already ends in November 2027.
PostgreSQL 19 arrives later, but more thoroughly tested. Release Candidate 1 has been available since October 15, RC2 follows on November 12, and the final release is planned for November 19. The reason for the delay is remarkable. As The Register reports, AI-assisted code reviews uncovered many additional defects during the beta phase, mostly harmless edge cases that would otherwise probably have surfaced years later. At the same time, some new features turned out to have deeper design flaws. The developers therefore pulled eight to ten larger features, including SQL/PGQ graph queries, which are now targeted for PostgreSQL 20.
What made it into version 19 is especially interesting for operations:
- REPACK (CONCURRENTLY) reorganizes tables and frees disk space without blocking reads and writes.
- Parallel autovacuum for indexes and a new scoring system that decides which tables are maintained first.
- Logical replication without a restart when
wal_levelis set toreplica, plus replication of sequence values. - Various performance improvements, such as faster foreign-key checks.
What this means for your business
A database without security updates is a risk you don't notice right away. The application keeps running as before, but if a vulnerability in version 14 becomes known, it will stay open. For internet-facing portals and systems holding personal data, that sits poorly with GDPR requirements and, if your company is in scope, with NIS2.
Two things matter for your planning:
- A major version change is not a routine update. It is done with
pg_upgrade, via dump and restore, or through logical replication, and it needs a maintenance window and testing. - Version 19 changes some behavior. According to the release notes,
standard_conforming_stringsis now always on, so old dumps created with a different setting will no longer load correctly. JIT is off by default, RADIUS authentication has been removed, and MD5 passwords now trigger warnings. If you run large analytical queries or still use MD5, check this beforehand.
In our view, the sensible move is to upgrade PostgreSQL 14 now to version 17 or 18. Both are mature and supported until 2029 and 2030 respectively. Version 19 is a good choice for new projects; for existing systems it is wise to wait for the first maintenance releases.
One more note: some Linux distributions ship PostgreSQL in their own packages with their own support commitments. Check where your installation comes from and what that vendor promises.
Recommended next steps
- Take stock:
SELECT version();shows the running version. Don't forget databases in Docker containers, on Proxmox VMs and at hosting providers. - Choose a target: For existing systems, usually PostgreSQL 17 or 18.
- Check dependencies: Does your application (for example your Django version or database driver) support the target version? Are all extensions available?
- Back up and test: Take a full backup, then do a dry run with
pg_upgrade --checkon a copy. - Plan a maintenance window: Run the upgrade, test the application, watch your monitoring.
- Make it routine: Put updates and version changes on a fixed maintenance schedule so the next end of life (version 15 in November 2027) doesn't catch you off guard.
How Sadeem helps
We operate PostgreSQL for our clients in data centers in Germany and the EU, with updates, backups and monitoring from a single team. We identify which of your databases still run PostgreSQL 14, plan the upgrade including testing and a rollback option, and adapt your application where needed, whether it is built on Django, Node.js or .NET. If you'd like to know where you stand, book a free initial consultation.
