v1.27.0-rc1

What's Changed

• Optimistic locking on Spanner read/write transactions by @jzelinskie in #1590
• .github: move to buildjet by @jzelinskie in #1591
• spanner: add missing calls to RowIterator.Stop by @vroldanbet in #1592
• Some improvements to tracing UX by @vroldanbet in #1595
• middleware/consistency: fix source of atLeast by @jzelinskie in #1597
• Revert Optimistic Locking in Spanner by @vroldanbet in #1599
• tracing ux: enriches traversal operations by @vroldanbet in #1596
• propagates gRPC errors in graph package by @vroldanbet in #1598
• Disable spanner gzip compression by @vroldanbet in #1601
• Add a map of revision parsing functions by engine kind by @josephschorr in #1604
• Add support for experimental secondary dispatching by @josephschorr in #1603
• Add a golden unit test for parser associativity by @josephschorr in #1605
• Have diff of namespaces and caveats report changes to comments by @josephschorr in #1606
• add singleflight check dispatch by @vroldanbet in #1607
• More spanner observability / Go Scheduler metrics by @vroldanbet in #1609
• fix grpc-health-probe flagged by trivy by @vroldanbet in #1613
• dispatch: singleflight expand by @jzelinskie in #1617
• datastore/proxy: add singleflight proxy by @jzelinskie in #1610
• do not open a new Spanner client for version checks by @vroldanbet in #1616
• Add schema watch support in Spanner datastore driver by @josephschorr in #1588
• log payloads, and add grpc duration as an integer by @vroldanbet in #1615
• Run postgres datastore tests with pgbouncer by @bradengroom in #1594
• MySQL: introduces an index to speed up Watch API calls by @vroldanbet in #1566
• Fix benchmark test for changes in ReadWriteTx by @josephschorr in #1623
• derive Spanner default gRPC connection count from GOMAXPROCS by @vroldanbet in #1622
• Ensure all datastores return an error if accessed after Close by @josephschorr in #1624
• Remove support for MySQL v5 by @josephschorr in #1625
• introduces flags to set min/max Spanner sessions by @vroldanbet in #1627
• Fix error redaction in MySQL driver by @josephschorr in #1628
• adds flags to enable block and mutex profiles by @vroldanbet in #1621
• do not create custom canceled graph error by @vroldanbet in #1629

Full Changelog: v1.26.0...v1.27.0-rc1

Docker Images

This release is available at authzed/spicedb:v1.27.0-rc1, quay.io/authzed/spicedb:v1.27.0-rc1, ghcr.io/authzed/spicedb:v1.27.0-rc1

v1.26.0

What's Changed

• Update gRPC and Go versions by @josephschorr in #1531
• *: go 1.21 API changes by @jzelinskie in #1532
• Inform Docker of the port that spicedb listens on by @drew-richardson in #1536
• crdb: better max retry errors (especially with retries disabled) by @ecordell in #1537
• Fix a panic in Postgres revision parsing for incompatible ZedTokens by @josephschorr in #1540
• Add better error messaging and tests for memdb serialization error by @josephschorr in #1547
• runs Postgres tests with all 4 latest versions by @vroldanbet in #1549
• Order onr comparisons by cardinality for short-circuiting by @bradengroom in #1553
• Bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.16.2 by @dependabot in #1554
• Bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.0.0-rc.5 to 2.0.1 by @dependabot in #1557
• Bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 by @dependabot in #1555
• Increase allowable timeout on memdb panic test by @josephschorr in #1561
• Add new index to postgres datastore by @vroldanbet in #1550
• Improve experience on pg serialization errors by @vroldanbet in #1552
• Compare tuples without stringifying by @bradengroom in #1562
• Use lo.Uniq function by @bradengroom in #1565
• include SpiceDB version in issue template by @vroldanbet in #1546
• Change BulkCheckPermission response to match order of the request by @josephschorr in #1564
• Extract the type system and reachability graph into pkg by @josephschorr in #1567
• Enable the experimental apis in the http gateway by @thewunder in #1571
• Update groupItems to use less memory by @bradengroom in #1568
• Fix benchmark test errors by @bradengroom in #1570
• Move to Go 1.21.3 to fix a reported Go vuln by @josephschorr in #1577
• Reenable -race on unit tests and fix tests by @josephschorr in #1575
• fix list formatting in crdb overlap doc by @ecordell in #1576
• Update go x/net library for Go http2 vuln by @josephschorr in #1581
• Add a test for inclusion of the @ sign in tuple strings by @josephschorr in #1580
• Switch health probe to v0.4.21 by @josephschorr in #1582
• Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 by @dependabot in #1583
• Configurable Spanner connection pool size, enable gzip by @ecordell in #1586
• spanner: split read/write, add connpool config by @jzelinskie in #1584
• middleware: add metric for tracking consistency by @jzelinskie in #1587

New Contributors

• @drew-richardson made their first contribution in #1536
• @bradengroom made their first contribution in #1553
• @thewunder made their first contribution in #1571

Full Changelog: v1.25.0...v1.26.0

Docker Images

This release is available at authzed/spicedb:v1.26.0, quay.io/authzed/spicedb:v1.26.0, ghcr.io/authzed/spicedb:v1.26.0

v1.26.0-rc2

What's Changed

• Update go x/net library for Go http2 vuln by @josephschorr in #1581
• Add a test for inclusion of the @ sign in tuple strings by @josephschorr in #1580
• Switch health probe to v0.4.21 by @josephschorr in #1582
• Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 by @dependabot in #1583
• Configurable Spanner connection pool size, enable gzip by @ecordell in #1586
• spanner: split read/write, add connpool config by @jzelinskie in #1584
• middleware: add metric for tracking consistency by @jzelinskie in #1587

Full Changelog: v1.26.0-rc1...v1.26.0-rc2

Docker Images

This release is available at authzed/spicedb:v1.26.0-rc2, quay.io/authzed/spicedb:v1.26.0-rc2, ghcr.io/authzed/spicedb:v1.26.0-rc2

v1.26.0-rc1

What's Changed

• Update gRPC and Go versions by @josephschorr in #1531
• *: go 1.21 API changes by @jzelinskie in #1532
• Inform Docker of the port that spicedb listens on by @drew-richardson in #1536
• crdb: better max retry errors (especially with retries disabled) by @ecordell in #1537
• Fix a panic in Postgres revision parsing for incompatible ZedTokens by @josephschorr in #1540
• Add better error messaging and tests for memdb serialization error by @josephschorr in #1547
• runs Postgres tests with all 4 latest versions by @vroldanbet in #1549
• Order onr comparisons by cardinality for short-circuiting by @bradengroom in #1553
• Bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.16.2 by @dependabot in #1554
• Bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.0.0-rc.5 to 2.0.1 by @dependabot in #1557
• Bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 by @dependabot in #1555
• Increase allowable timeout on memdb panic test by @josephschorr in #1561
• Add new index to postgres datastore by @vroldanbet in #1550
• Improve experience on pg serialization errors by @vroldanbet in #1552
• Compare tuples without stringifying by @bradengroom in #1562
• Use lo.Uniq function by @bradengroom in #1565
• include SpiceDB version in issue template by @vroldanbet in #1546
• Change BulkCheckPermission response to match order of the request by @josephschorr in #1564
• Extract the type system and reachability graph into pkg by @josephschorr in #1567
• Enable the experimental apis in the http gateway by @thewunder in #1571
• Update groupItems to use less memory by @bradengroom in #1568
• Fix benchmark test errors by @bradengroom in #1570
• Move to Go 1.21.3 to fix a reported Go vuln by @josephschorr in #1577
• Reenable -race on unit tests and fix tests by @josephschorr in #1575
• fix list formatting in crdb overlap doc by @ecordell in #1576

New Contributors

• @drew-richardson made their first contribution in #1536
• @bradengroom made their first contribution in #1553
• @thewunder made their first contribution in #1571

Full Changelog: v1.25.0...v1.26.0-rc1

Docker Images

This release is available at authzed/spicedb:v1.26.0-rc1, quay.io/authzed/spicedb:v1.26.0-rc1, ghcr.io/authzed/spicedb:v1.26.0-rc1

v1.25.0

Highlights

🚀 Watch-driven schema caching for CockroachDB (~23% heap & ~40% latency reductions)
🆕 Bulk Check API for batching checks
🔎 Tracing for Postgres garbage collection
📝 DotEnv for loading configuration
⼤ Schema size limit increased to 4MiB

What's Changed

• disable datastore hedging by default by @ecordell in #1491
• Fix flaky LR dispatch count test by @josephschorr in #1492
• introduce Bulk Check API by @vroldanbet in #1453
• *: refresh README/CONTRIBUTING by @jzelinskie in #1499
• postgres: adds tracing to revision GC by @vroldanbet in #1500
• switch to authzed/cel-go by @ecordell in #1501
• Load config from spicedb.env by @suttod in #1426
• Update authzed-go to increase allowed schema size by @josephschorr in #1506
• changes logging level for logger used during startup by @vroldanbet in #1508
• README: update fury instructions to add GPG by @jzelinskie in #1509
• chore: add github issue templates by @yordis in #1504
• introduces fix for dotenv log messages in cobrautil by @vroldanbet in #1510
• Implement an experimental (off by default) schema cache which updates using a SchemaWatch API by @josephschorr in #1460
• makes paginatedIterator.Close() idempotent by @vroldanbet in #1514
• Have invalid cursors return a proper error by @josephschorr in #1512
• README: swap to our DNS for rpm/debian packages by @jzelinskie in #1517
• Fixes for the watching schema cache by @josephschorr in #1519
• Bump golang from 1.20-alpine3.18 to 1.21-alpine3.18 by @dependabot in #1520

New Contributors

• @suttod made their first contribution in #1426
• @yordis made their first contribution in #1504

Full Changelog: v1.24.0...v1.25.0

Docker Images

This release is available at authzed/spicedb:v1.25.0, quay.io/authzed/spicedb:v1.25.0, ghcr.io/authzed/spicedb:v1.25.0

v1.25.0-rc4

What's Changed

• removes streaming bulk check API, which is not implemented by @vroldanbet in #1516
• Invert the flag for the new schema watching cache by @josephschorr in #1518

Full Changelog: v1.25.0-rc3...v1.25.0-rc4

Docker Images

This release is available at authzed/spicedb:v1.25.0-rc4, quay.io/authzed/spicedb:v1.25.0-rc4, ghcr.io/authzed/spicedb:v1.25.0-rc4

v1.25.0-rc3

What's Changed

• Revert "Add support for self keyword in schema for referencing a resource as a subject" by @vroldanbet in #1515

Full Changelog: v1.25.0-rc2...v1.25.0-rc3

Docker Images

This release is available at authzed/spicedb:v1.25.0-rc3, quay.io/authzed/spicedb:v1.25.0-rc3, ghcr.io/authzed/spicedb:v1.25.0-rc3

v1.25.0-rc2

What's Changed

• Update authzed-go to increase allowed schema size by @josephschorr in #1506
• changes logging level for logger used during startup by @vroldanbet in #1508
• README: update fury instructions to add GPG by @jzelinskie in #1509
• chore: add github issue templates by @yordis in #1504
• introduces fix for dotenv log messages in cobrautil by @vroldanbet in #1510
• Implement a schema cache which updates using a SchemaWatch API by @josephschorr in #1460
• makes paginatedIterator.Close() idempotent by @vroldanbet in #1514
• Have invalid cursors return a proper error by @josephschorr in #1512
• Add support for self keyword in schema for referencing a resource as a subject by @josephschorr in #1511

New Contributors

• @yordis made their first contribution in #1504

Full Changelog: v1.25.0-rc1...v1.25.0-rc2

Docker Images

This release is available at authzed/spicedb:v1.25.0-rc2, quay.io/authzed/spicedb:v1.25.0-rc2, ghcr.io/authzed/spicedb:v1.25.0-rc2

v1.25.0-rc1

What's Changed

• disable datastore hedging by default by @ecordell in #1491
• Fix flaky LR dispatch count test by @josephschorr in #1492
• introduce Bulk Check API by @vroldanbet in #1453
• *: refresh README/CONTRIBUTING by @jzelinskie in #1499
• postgres: adds tracing to revision GC by @vroldanbet in #1500
• switch to authzed/cel-go by @ecordell in #1501
• Load config from spicedb.env by @suttod in #1426

New Contributors

• @suttod made their first contribution in #1426

Full Changelog: v1.24.0...v1.25.0-rc1

Docker Images

This release is available at authzed/spicedb:v1.25.0-rc1, quay.io/authzed/spicedb:v1.25.0-rc1, ghcr.io/authzed/spicedb:v1.25.0-rc1

v1.24.0

Highlights

💯 Multiple prefixes (slashes) can now be used in object names!
📖 Extracted gRPC consistent load balancer into its own library
🐎 Reduced goroutines spawned during dispatch
🔢 More accurate dispatch tracking
📈 Improved tracing for PG/CRDB SQL queries

What's Changed

• fixes incorrect usage of backoff in GC by @vroldanbet in #1445
• update analyzers by @vroldanbet in #1446
• scan release images with trivy by @vroldanbet in #1434
• adds a lint:trivy command to mage by @vroldanbet in #1447
• Remove unused usersets splitting from datastore interface by @josephschorr in #1442
• Remove the old "dashboard" from SpiceDB by @josephschorr in #1452
• move as many tools as possible into the mage module by @ecordell in #1455
• Implement CEL best practices by @josephschorr in #1451
• add OTEL tracing to pgx Queries by @vroldanbet in #1449
• update prometheuspb module to new upstream domain by @rxu-plaid in #1462
• removes Spanner phased migrations by @vroldanbet in #1458
• goreleaser: cut individual brew versions by @jzelinskie in #1459
• internal/datastore/proxy: record zero relationships read by @jakedt in #1465
• magefiles: add buf format linter by @jzelinskie in #1466
• actually disable gateway server when disabled by @ecordell in #1467
• Move to Go 1.20.7 to fix vuln in go stdlib by @josephschorr in #1481
• Bump github.com/aws/aws-sdk-go from 1.44.307 to 1.44.314 by @dependabot in #1472
• Bump github.com/go-co-op/gocron from 1.30.1 to 1.31.0 by @dependabot in #1473
• Bump github.com/outcaste-io/ristretto from 0.2.2 to 0.2.3 by @dependabot in #1474
• Bump google.golang.org/api from 0.133.0 to 0.134.0 by @dependabot in #1475
• Remove trivy scanning of debug images by @josephschorr in #1484
• *: drop legacy proto library by @jzelinskie in #1470
• Clarify that development error positions are 1-indexed by @josephschorr in #1483
• Change how dispatches are counted in LookupResources by @josephschorr in #1463
• bump github.com/dalzilio/rudd by @ecordell in #1487
• Add integration tests for graceful shutdown of SpiceDB by @josephschorr in #1479
• Make sure to output logs for mage:test by @josephschorr in #1488
• Change MySQL definition columns to LONGBLOB in prep for supporting larger definitions by @josephschorr in #1480
• Fix MySQL WriteRelationships query by @trrrrrys in #1478
• all: support multiple slashes in object and caveat names by @jakedt in #1489
• .github: use 4-core runners for more jobs by @jzelinskie in #1482
• *: extract gRPC balancer into external library by @jzelinskie in #1469
• Significantly reduce the number of goroutines used in the checking stream by @josephschorr in #1490

New Contributors

• @rxu-plaid made their first contribution in #1462
• @trrrrrys made their first contribution in #1478

Docker Images

This release is available at authzed/spicedb:v1.24.0, quay.io/authzed/spicedb:v1.24.0, ghcr.io/authzed/spicedb:v1.24.0

Full Changelog: v1.23.1...v1.24.0