Version 7.2.5 - Server Chat and ChatGPT Account Connection

Published: 2026-08-13 | Stela Augustínová

We are pleased to announce DbGate version 7.2.5. This release expands DbGate’s AI capabilities with Server Chat and direct ChatGPT account connection in the desktop application. It also fixes two reported regressions and adds several layers of security hardening around files, remote downloads, plugins, and generated scripts.

Ask Questions Across an Entire Database Server

Server Chat is a new Premium feature for AI-assisted querying at the connection level. While Database Chat works with one selected database, Server Chat can discover the databases available through a connection, inspect the relevant schemas, and help answer questions that span more than one database.

This is useful for servers that separate data by customer, region, environment, or application. Instead of opening each database and building a query manually, you can describe the result you need in natural language. Server Chat can identify the relevant databases and tables, generate the appropriate SQL, and present it for confirmation before execution.

The feature supports PostgreSQL, MySQL, MariaDB, and supported SQL Server editions. It can run a server-level query where the database engine permits it, or target a specific database when that is the safer or more appropriate scope. Generated database-scoped queries can also be opened in a regular SQL editor for further inspection and refinement.

Connect Your ChatGPT Account to DbGate Desktop

Premium users can now connect a ChatGPT account directly from the AI settings in the DbGate desktop application. Once connected, OpenAI Codex becomes available as an AI provider for DbGate’s assisted querying workflows.

The connection uses a browser-based sign-in flow, so you do not need to copy an API key into DbGate. The desktop application securely stores the resulting credentials, refreshes the connection when required, and lets you disconnect the account from the same settings screen.

After signing in, you can select from the Codex models available in DbGate, including more advanced models such as Sol that are not normally available through DbGate’s standard AI provider integrations. You can use these models with streaming responses and tool-assisted database exploration within chat, giving desktop users another straightforward way to bring advanced AI assistance into their database workflow.

Exact Bigint Values in SQLite and LibSQL

SQLite and LibSQL integer values larger than JavaScript’s safe-integer range are now preserved without rounding. Previously, a value such as 1254071346418286654 could be displayed as 1254071346418286600, losing information before it reached the data grid.

Besides displaying the wrong value, that conversion could make filters fail because the rounded number no longer matched the value stored in the database. DbGate now keeps large integers in a precision-safe representation while continuing to handle smaller integers as regular numbers.

NPM Installation Fix for PostgreSQL Support

Version 7.2.4 could fail when installing dbgate-serve from NPM because the PostgreSQL plugin referenced dbgate-pg-dumper@7.2.4, a package version that does not exist. The release versioning process now keeps dbgate-pg-dumper on its own valid version instead of rewriting it to match the main DbGate release.

This restores the expected NPM installation flow for deployments using the PostgreSQL plugin.

Security Hardening for Server Deployments

DbGate 7.2.5 includes a set of defense-in-depth improvements for operations that interact with external input or the server file system:

Export files and generated previews are restricted to DbGate-managed data directories. Path checks also account for symbolic links so an apparently valid export path cannot escape its permitted location.
Remote text and JSON Lines downloads accept only approved source types and validate network destinations, preventing requests to local or private services and blocking local file reads.
Plugin package names are validated before loading, while plugin command dispatch now requires the appropriate permission and accepts only explicitly defined function handlers.
User-controlled comments and schedule directives are sanitized when DbGate generates JavaScript, ensuring that line terminators cannot break out of a comment and inject executable code.

These changes are especially important for shared and web-based DbGate installations, where connections, imports, exports, and automation can be used by multiple people.

Complete Changelog

7.2.5

ADDED: Server Chat for AI-assisted querying across PostgreSQL, MySQL, MariaDB, and supported SQL Server editions (Premium)
ADDED: ChatGPT account connection for using Codex models in the desktop application (Premium)
FIXED: SQLite and LibSQL bigint values now preserve their precision
FIXED: NPM installation failure caused by a dbgate-pg-dumper version mismatch
FIXED: Restricted export file writes to managed directories and prevented symlink-based path escapes
FIXED: Prevented SSRF and local file reads in remote text and JSON Lines downloads
FIXED: Validated plugin package names and command dispatch to prevent unsafe plugin operations
FIXED: Sanitized generated script comments and directives to prevent code injection