v1.10.0

Upgrade Notes

Warning
This is release includes migrations for Postgres and MySQL datastores that adds a column to the namespace table.

Highlights

• Enabled the ability to safely use Postgres read replicas
• Added a webassembly interface for devtools
• Fixed namespaces not being garbage collected for Postgres & MySQL datastores
• Added health checking and Watch service to HTTP API
• Added seamless TLS certificate rotation

What's Changed

• Return an error instead of calling panic() when debug.ReadBuildInfo() is unavailable by @lmt-swallow in #658
• watch TLS certs for changes by @ecordell in #656
• expose /healthz endpoint when using the http gateway by @ecordell in #661
• *: add NOTICE by @jzelinskie in #662
• examples: move k8s deployment into examples by @jzelinskie in #667
• Add log of the connection state for dispatcher IsReady check by @josephschorr in #664
• Depbot updates for July 5 by @josephschorr in #676
• Depbot updates for July 5, part 2 by @josephschorr in #682
• Bump cloud.google.com/go/spanner from 1.33.0 to 1.34.0 by @dependabot in #678
• Bump github.com/aws/aws-sdk-go from 1.44.47 to 1.44.48 by @dependabot in #683
• fix cert rotation test flake by @ecordell in #685
• Postgres datastore: make read tx REPEATABLE_READ by @williamdclt in #674
• Enable Watch API in REST gateway by @josephschorr in #686
• Add a WebAssembly interface for invoking the SpiceDB dev package by @josephschorr in #663
• Add retries to MySQL stats test, which can occasionally get back empty stats by @josephschorr in #689
• pkg/cmd: document use of application default credentials with spanner by @kirbyquerby in #690
• Prevent release version errors from blocking SpiceDB startup by @josephschorr in #697
• examples: mv https://github.com/authzed/examples by @jzelinskie in #698
• Increase the testing timeout to 30m by @josephschorr in #702
• Add a fallback into the MySQL driver for rel count by @josephschorr in #701
• Garbage collect namespaces by @jzelinskie in #673
• Add a dispatch test that verifies delete preconditions across datastores by @josephschorr in #704
• Further fixes to memdb to not panic post-close by @josephschorr in #708

New Contributors

• @lmt-swallow made their first contribution in #658
• @williamdclt made their first contribution in #674
• @kirbyquerby made their first contribution in #690

Full Changelog: v1.9.0...v1.10.0

Docker Images

This release is available at authzed/spicedb:v1.10.0, quay.io/authzed/spicedb:v1.10.0, ghcr.io/authzed/spicedb:v1.10.0