v1.47.1

Highlights

• CVE Fix: Fixed a bug that would result in missing resources in LookupResources when certain permission structures are present. Checks were unaffected. in 8c2edbe
• Continuing work on a Query Planner for SpiceDB in #2639, #2669
• Performance improvements for WriteSchema in #2697
• Performance improvements for ReadRelationships in #2632

What's Changed

• chore: add docker compose setup with grafana dashboard by @miparnisari in #2616
• feat: support nested recursive iterators by @barakmich in #2639
• chore: change nil references to be their own object type in schema v2 by @josephschorr in #2651
• feat: Add a builder pattern to the schema v2 library and fix how caveats are converted by @josephschorr in #2649
• feat: disable tracing of health check requests by @ivanauth in #2614
• fix: do not warn if requestid middleware errors due to ErrIllegalHeaderWrite by @miparnisari in #2654
• feat: Add a property-based schema and relationship generator by @josephschorr in #2652
• ci: run benchmarks on every PR and fail if worse than Main by @miparnisari in #2610
• ci: fix when benchmarks run for Main by @miparnisari in #2661
• fix: ensure resolved references in schema v2 are updated when flattening by @josephschorr in #2662
• chore: remove flaking requestidmiddleware test by @tstirrat15 in #2660
• test: fix "websocket url timeout reached" flakes by @tstirrat15 in #2666
• chore: remove NodeID middleware and replace with static function by @miparnisari in #2664
• Lint fixes part 10 by @tstirrat15 in #2655
• feat: add internal flag for running CheckPermission with a query plan by @barakmich in #2663
• chore: upgrade go to latest version to fix CVE by @tstirrat15 in #2671
• test: fix flaky TestErrCtx and TestContextError by @miparnisari in #2670
• Lint fixes part 12 by @tstirrat15 in #2668
• fix: properly rewrite errors for watch api, part 2 by @miparnisari in #2656
• chore: Change query package to use new schema v2 accessor methods by @josephschorr in #2659
• chore: add chunk bytes library in prep for singleton schema work by @josephschorr in #2627
• perf: Have read relationships use dynamic index forcing by @josephschorr in #2632
• Lint fixes part 11 by @tstirrat15 in #2667
• ci: update dependabot rules by @miparnisari in #2675
• chore: fix new govet issues by @tstirrat15 in #2678
• chore: enable govet by @tstirrat15 in #2683
• chore(deps): bump the github-actions group across 1 directory with 12 updates by @dependabot[bot] in #2672
• chore(deps): bump the go-mod group across 4 directories with 37 updates by @dependabot[bot] in #2681
• ci: update test matrix for CRDB by @miparnisari in #2665
• chore(deps): bump github.com/opencontainers/runc from 1.2.3 to 1.2.8 in the go_modules group across 1 directory by @dependabot[bot] in #2687
• chore: update grafana dashboard, .gitattributes, github actions by @miparnisari in #2693
• fix: data races that occur when functions do not clone pointer object… by @miparnisari in #2629
• feat: add test for nodechain by @kartikaysaxena in #2686
• chore: enable gocritic by @tstirrat15 in #2682
• fix: concurrent write to map in Spanner's Watch by @miparnisari in #2694
• Fix for selection of sort order when an index hint does not exist or does not have a preferred sort order by @josephschorr in #2695
• test: disable revision heartbeat in PG revision tests by @josephschorr in #2676
• test: remove timeouts in flaky tests by @miparnisari in #2696
• perf: have DeleteNamespaces skip rel deletes when invoked from WriteSchema by @josephschorr in #2697
• test: create mage target to run e2e tests by @miparnisari in #2698
• feat: add some initial optimizer functions to run atop query plans by @barakmich in #2669
• chore: unflake sleeper tests using synctest by @tstirrat15 in #2699
• ci: automate generation and publishing of docs by @miparnisari in #2688
• ci: fix #2688 by @miparnisari in #2701
• chore: add docs command to be used by mage by @miparnisari in #2703
• chore(deps): bump golang from 1.25.3-alpine to 1.25.4-alpine in the docker group by @dependabot[bot] in #2690
• chore: introduce mockgen by @miparnisari in #2705
• fix: set missing fields in postgresRevision.MarshalBinary by @ostafen in #2708
• fix: schema/relationship generator does not conform to regex by @vroldanbet in #2702
• fix: duplicate metrics error with read replicas (#2518) by @miparnisari in #2707
• fix: relationship generator has unbounded length by @vroldanbet in #2711
• build(deps): migrate to github.com/ccoveille/go-safecast v2 by @ccoVeille in #2685
• chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #2716
• Fix lint issues by @tstirrat15 in #2721

New Contributors

• @ostafen made their first contribution in #2708
• @ccoVeille made their first contribution in #2685

Full Changelog: v1.47.0...v1.47.1

Docker Images

This release is available at authzed/spicedb:v1.47.1, quay.io/authzed/spicedb:v1.47.1, ghcr.io/authzed/spicedb:v1.47.1