fix: Correct pg_sslmode default from verify-full to prefer

[claudespice]

Summary

• The pg_sslmode parameter documentation incorrectly states the default is verify-full
• The actual default is prefer, matching standard libpq/tokio-postgres behavior
• When no sslmode is specified, the client tries TLS but falls back to plaintext

Details

For the replication (CDC) path, SslMode::from_str_or_default() explicitly defaults to Prefer in crates/data_components/src/postgres_replication/config.rs. For the read path, no sslmode default is set in the ParameterSpec, so the underlying tokio-postgres library applies its own default of prefer.

Changes

• Moved (default) label from verify-full to prefer in the pg_sslmode parameter table
• Fixed across all versioned docs (1.5.x–1.11.x) and vNext (8 files total)

Reference

Verified against spiceai/spiceai at trunk — postgres_replication/config.rs:88-96

[github-actions]

✅ Pull with Spice Passed

Passing checks:

• ✅ Title meets minimum length requirement (10 characters)
• ✅ Has at least one of the required labels: area/blog, area/docs, area/cookbook, dependencies
• ✅ No banned labels detected
• ✅ Has at least one assignee: lukekim

[github-actions]

🔍 Pull with Spice Failed

Passing checks:

• ✅ Title meets minimum length requirement (10 characters)
• ✅ Has at least one of the required labels: area/blog, area/docs, area/cookbook, dependencies
• ✅ No banned labels detected

Failed checks:

• ❌ At least one assignee is required for this pull request.

Please address these issues and update your pull request.

[github-actions]

🔍 Pull with Spice Failed

Passing checks:

• ✅ Title meets minimum length requirement (10 characters)
• ✅ Has at least one of the required labels: area/blog, area/docs, area/cookbook, dependencies
• ✅ No banned labels detected

Failed checks:

• ❌ At least one assignee is required for this pull request.

Please address these issues and update your pull request.

[github-actions]

🚀 deployed to https://1692aca1.spiceai-org-website.pages.dev