René's URL Explorer Experiment


Title: Column names in ON CONFLICT DO UPDATE SET clause not validated · Issue #4291 · sqlc-dev/sqlc · GitHub

Open Graph Title: Column names in ON CONFLICT DO UPDATE SET clause not validated · Issue #4291 · sqlc-dev/sqlc

X Title: Column names in ON CONFLICT DO UPDATE SET clause not validated · Issue #4291 · sqlc-dev/sqlc

Description: Version 1.30.0 What happened? Bug: sqlc does not validate column names in ON CONFLICT DO UPDATE SET clause Description sqlc fails to validate column names in ON CONFLICT ... DO UPDATE SET clauses against the table schema. This allows inv...

Open Graph Description: Version 1.30.0 What happened? Bug: sqlc does not validate column names in ON CONFLICT DO UPDATE SET clause Description sqlc fails to validate column names in ON CONFLICT ... DO UPDATE SET clauses a...

X Description: Version 1.30.0 What happened? Bug: sqlc does not validate column names in ON CONFLICT DO UPDATE SET clause Description sqlc fails to validate column names in ON CONFLICT ... DO UPDATE SET clauses a...

Opengraph URL: https://github.com/sqlc-dev/sqlc/issues/4291

X: @github

direct link

Domain: github.com


Hey, it has json ld scripts:
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Column names in ON CONFLICT DO UPDATE SET clause not validated","articleBody":"### Version\n\n1.30.0\n\n### What happened?\n\n # Bug: sqlc does not validate column names in ON CONFLICT DO UPDATE SET clause\n\n  ## Description\n\n  sqlc fails to validate column names in `ON CONFLICT ... DO UPDATE SET` clauses against the table schema. This allows invalid queries to be generated that will only fail at runtime when executed against the database.\n\n  ## Steps to Reproduce\n\n  1. Create a schema file (`migrations/schema.sql`):\n  ```sql\n  CREATE TABLE IF NOT EXISTS cart_items\n  (\n      owner_id       VARCHAR(255)                        NOT NULL,\n      product_id     UUID                                NOT NULL,\n      price_amount   DECIMAL                             NOT NULL,\n      price_currency VARCHAR(3)                          NOT NULL,\n      created_at     TIMESTAMP DEFAULT CURRENT_TIMESTAMP NOT NULL,\n      PRIMARY KEY (owner_id, product_id)\n  );\n\n  CREATE INDEX idx_cart_items_owner ON cart_items (owner_id);\n\n  2. Create a query file (query.sql) with an invalid column name in the SET clause:\n  -- name: AddItem :exec\n  INSERT INTO cart_items (owner_id, product_id, price_amount, price_currency)\n  VALUES ($1, $2, $3, $4)\n  ON CONFLICT (owner_id, product_id) DO UPDATE\n      SET price_amount1 = EXCLUDED.price_amount1, price_currency = EXCLUDED.price_currency;\n\n  Note: The column is price_amount (exists), but the query references price_amount1 (does not exist)\n\n  3. Create sqlc.yaml:\n  version: \"2\"\n  sql:\n    - engine: \"postgresql\"\n      schema: \"migrations/schema.sql\"\n      queries: \"query.sql\"\n      gen:\n        go:\n          package: \"querytest\"\n          out: \"generated\"\n\n  4. Run sqlc generate\n\n  Expected Behavior\n\n  sqlc should report an error similar to:\n  query.sql:5:15: column \"price_amount1\" of relation \"cart_items\" does not exist\n\n  This matches the behavior when running the same query through PostgreSQL directly.\n\n  Actual Behavior\n\n  sqlc generates code successfully without any errors, embedding the invalid SQL:\n  const addItem = `... SET price_amount1 = EXCLUDED.price_amount1 ...`\n\n  The generated Go code compiles successfully, but the query will fail at runtime with a database error.\n\n  Root Cause\n\n  sqlc does not validate column names in ON CONFLICT ... DO UPDATE SET clauses against the table schema. The validation code path is missing:\n\n  - OnConflictClause is parsed correctly by the PostgreSQL engine\n  - But it's never validated in the compiler phase\n  - Column validation happens in internal/compiler/output_columns.go for SELECT/WHERE clauses, but not for ON CONFLICT clauses\n  - The validate.InsertStmt() function in internal/sql/validate/insert_stmt.go only validates column count vs value count, not SET clause columns\n\n  Files Affected\n\n  - internal/compiler/analyze.go - No validation for ON CONFLICT\n  - internal/sql/validate/insert_stmt.go - Missing ON CONFLICT SET column validation\n  - internal/compiler/output_columns.go - Missing ON CONFLICT SET clause handling\n\n  Workaround\n\n  Until this is fixed, ensure column names in ON CONFLICT DO UPDATE SET clauses are manually verified against the schema.\n\n  Environment\n\n  - sqlc version: v1.30.0 (confirmed on latest main)\n  - Database engine: PostgreSQL\n  - Go version: 1.25.0+\n\n### Relevant log output\n\n```shell\n\n```\n\n### Database schema\n\n```sql\n\n```\n\n### SQL queries\n\n```sql\n\n```\n\n### Configuration\n\n```yaml\n\n```\n\n### Playground URL\n\n_No response_\n\n### What operating system are you using?\n\nmacOS\n\n### What database engines are you using?\n\nPostgreSQL\n\n### What type of code are you generating?\n\nGo","author":{"url":"https://github.com/nikolayk812","@type":"Person","name":"nikolayk812"},"datePublished":"2026-02-08T15:41:39.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/4291/sqlc/issues/4291"}

route-pattern/_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format)
route-controllervoltron_issues_fragments
route-actionissue_layout
fetch-noncev2:755f45ae-f0e1-bf02-23cf-9f5a96930ba7
current-catalog-service-hash81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114
request-id92E6:2144F:978AEC:D7C4F0:6A5109F5
html-safe-noncea141e5a6006f7ee63b4a1afe32f6be1d4509ae0077b96fcadd4728123e3da21f
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5MkU2OjIxNDRGOjk3OEFFQzpEN0M0RjA6NkE1MTA5RjUiLCJ2aXNpdG9yX2lkIjoiMTYxMTYzNTUyODQxMDY2MzQxMyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmace02b687a1f30362d8b7b275263028f0e82e8fe6d58d0f74dc29151472d419595
hovercard-subject-tagissue:3912965347
github-keyboard-shortcutsrepository,issues,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/issues_fragments/issue_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/sqlc-dev/sqlc/4291/issue_layout
twitter:imagehttps://opengraph.githubassets.com/4474d0b8ac9e08b503acf53e05173a0746b95927ed599e45417a3a1ac4a78ee7/sqlc-dev/sqlc/issues/4291
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/4474d0b8ac9e08b503acf53e05173a0746b95927ed599e45417a3a1ac4a78ee7/sqlc-dev/sqlc/issues/4291
og:image:altVersion 1.30.0 What happened? Bug: sqlc does not validate column names in ON CONFLICT DO UPDATE SET clause Description sqlc fails to validate column names in ON CONFLICT ... DO UPDATE SET clauses a...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamenikolayk812
hostnamegithub.com
expected-hostnamegithub.com
Noneb076e100febaa00374cd89239f915d00dd3187f7c68b12bc2b7688181305344d
turbo-cache-controlno-preview
go-importgithub.com/sqlc-dev/sqlc git https://github.com/sqlc-dev/sqlc.git
octolytics-dimension-user_id136738596
octolytics-dimension-user_loginsqlc-dev
octolytics-dimension-repository_id193160679
octolytics-dimension-repository_nwosqlc-dev/sqlc
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id193160679
octolytics-dimension-repository_network_root_nwosqlc-dev/sqlc
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release2d129404fc45ea64edb1b98567c53e55b395536f
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/sqlc-dev/sqlc/issues/4291#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fsqlc-dev%2Fsqlc%2Fissues%2F4291
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fsqlc-dev%2Fsqlc%2Fissues%2F4291
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fissues_fragments%2Fissue_layout&source=header-repo&source_repo=sqlc-dev%2Fsqlc
Reloadhttps://github.com/sqlc-dev/sqlc/issues/4291
Reloadhttps://github.com/sqlc-dev/sqlc/issues/4291
Reloadhttps://github.com/sqlc-dev/sqlc/issues/4291
Please reload this pagehttps://github.com/sqlc-dev/sqlc/issues/4291
sqlc-dev https://github.com/sqlc-dev
sqlchttps://github.com/sqlc-dev/sqlc
Notifications https://github.com/login?return_to=%2Fsqlc-dev%2Fsqlc
Fork 1.1k https://github.com/login?return_to=%2Fsqlc-dev%2Fsqlc
Star 18k https://github.com/login?return_to=%2Fsqlc-dev%2Fsqlc
Code https://github.com/sqlc-dev/sqlc
Issues 597 https://github.com/sqlc-dev/sqlc/issues
Pull requests 106 https://github.com/sqlc-dev/sqlc/pulls
Discussions https://github.com/sqlc-dev/sqlc/discussions
Actions https://github.com/sqlc-dev/sqlc/actions
Projects https://github.com/sqlc-dev/sqlc/projects
Security and quality 0 https://github.com/sqlc-dev/sqlc/security
Insights https://github.com/sqlc-dev/sqlc/pulse
Code https://github.com/sqlc-dev/sqlc
Issues https://github.com/sqlc-dev/sqlc/issues
Pull requests https://github.com/sqlc-dev/sqlc/pulls
Discussions https://github.com/sqlc-dev/sqlc/discussions
Actions https://github.com/sqlc-dev/sqlc/actions
Projects https://github.com/sqlc-dev/sqlc/projects
Security and quality https://github.com/sqlc-dev/sqlc/security
Insights https://github.com/sqlc-dev/sqlc/pulse
#4366https://github.com/sqlc-dev/sqlc/pull/4366
Column names in ON CONFLICT DO UPDATE SET clause not validatedhttps://github.com/sqlc-dev/sqlc/issues/4291#top
#4366https://github.com/sqlc-dev/sqlc/pull/4366
📚 postgresqlhttps://github.com/sqlc-dev/sqlc/issues?q=state%3Aopen%20label%3A%22%3Abooks%3A%20postgresql%22
💻 darwinhttps://github.com/sqlc-dev/sqlc/issues?q=state%3Aopen%20label%3A%22%3Acomputer%3A%20darwin%22
🔧 golanghttps://github.com/sqlc-dev/sqlc/issues?q=state%3Aopen%20label%3A%22%3Awrench%3A%20golang%22
bugSomething isn't workinghttps://github.com/sqlc-dev/sqlc/issues?q=state%3Aopen%20label%3A%22bug%22
https://github.com/nikolayk812
nikolayk812https://github.com/nikolayk812
on Feb 8, 2026https://github.com/sqlc-dev/sqlc/issues/4291#issue-3912965347
📚 postgresqlhttps://github.com/sqlc-dev/sqlc/issues?q=state%3Aopen%20label%3A%22%3Abooks%3A%20postgresql%22
💻 darwinhttps://github.com/sqlc-dev/sqlc/issues?q=state%3Aopen%20label%3A%22%3Acomputer%3A%20darwin%22
🔧 golanghttps://github.com/sqlc-dev/sqlc/issues?q=state%3Aopen%20label%3A%22%3Awrench%3A%20golang%22
bugSomething isn't workinghttps://github.com/sqlc-dev/sqlc/issues?q=state%3Aopen%20label%3A%22bug%22
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.