>> For us, we always use pg_upgrade even for minor updates because it
>> feels safer to me. That being said, we rarely do minor updates and
>> just do majors because upgrading is just hard enough (lots of
>> testing!) we tend to wait and then jump further. Upgrading is known to
>> take a maintenance window; we just plan things that way. Your organization may have different needs.
>
>Yeah, but that way you're almost guaranteed to run an unsupported & vulnerable release for quite some time, until the
nextmajor one is ready )
If we ran into a true bug that affected us, we'd upgrade sooner. Thankfully, the
PG team is great about putting out quality software with a low bug rate. Running a
few minor versions back from the current is OK for us; we're always on a supported
major version (so we could upgrade to the current minor version if really required).
This is an organizational decision based on where it's better to spend time and effort.
OTOH, the better partitioning of v12 is a feature that will get us to upgrade
sooner. :)
As for security, we run in a very protected environment. If we are compromised,
it'll be by an inside person and there's really no tech defense against that.
Upgrading the Pg software isn't all that hard, we even have it automated.
The upgrade process for our application is what's so hard -- again, lots of
testing/man-hours required.
HTH,
Kevin
This e-mail transmission, and any documents, files or previous e-mail messages attached to it, may contain confidential
information.If you are not the intended recipient, or a person responsible for delivering it to the intended recipient,
youare hereby notified that any disclosure, distribution, review, copy or use of any of the information contained in or
attachedto this message is STRICTLY PROHIBITED. If you have received this transmission in error, please immediately
notifyus by reply e-mail, and destroy the original transmission and its attachments without reading them or saving them
todisk. Thank you.