All rules

Safety

postgresql/no-update-without-from-binding

Disallow `UPDATE ... FROM` without a `WHERE` (Cartesian product).

  • Type problem
  • Recommended error
  • Fixable no

Why this matters

An `UPDATE ... FROM other_table` without a `WHERE` joins every row of the target with every row of the source, then keeps the last assignment per target row. The result is almost never what the author meant. Plain `UPDATE` (no `FROM`) is out of scope — see `require-where-in-update`.

Examples

Incorrect

Incorrect
UPDATE t SET x = u.x FROM u;

Correct

Correct
UPDATE t SET x = u.x FROM u WHERE t.id = u.t_id;

Configure it

// eslint.config.js
import postgresql from "eslint-plugin-postgresql";

export default [
  {
    files: ["**/*.sql"],
    languageOptions: {
      parser: postgresql.configs.recommended.languageOptions.parser,
    },
    plugins: { postgresql },
    rules: {
      "postgresql/no-update-without-from-binding": "error",
    },
  },
];

Options

This rule has no options.

Try this rule

Edit the SQL — only no-update-without-from-binding is enabled.

Pre-filled with the first incorrect example. Toggle off in the rule shelf to see how the diagnostic disappears.

0 errors 0 warnings parse 0ms · rules 0ms
Diagnostics

No issues found.

2 rules enabled.

Rule under test no-update-without-from-binding — plus no-syntax-error as a safety net.
eslint-plugin-postgresql

An ESLint plugin that lints .sql files with real PostgreSQL grammar and a curated set of best-practice rules.

© 2026 eslint-plugin-postgresql contributors Built on libpg-query · PostgreSQL 17