v1.11.0

Warning
This release contains a change to the internal dispatch API, which means that v1.10.0 and v1.11.0 can not dispatch to each other during a rolling upgrade. To upgrade without downtime, run these as separate Kubernetes services, or disable dispatch before upgrading.

Highlights

• Check requests can now be traced using the zed CLI using zed permission check --explain
• serve-testing now supports HTTP
• Performance improvements for LookupResources, WriteSchemas, and dispatch in general
• The Watch API is disabled automatically if CRDB datatstores don't support Change Feeds

What's Changed

• Have WASM development package return updated validation YAML by @josephschorr in #710
• Add a flag for disabling stat writes by @ecordell in #711
• Add ability to trace a check request by @josephschorr in #703
• Implement support for batch reachability by @josephschorr in #691
• Add issue links to readme by @samkim in #694
• Concurrency limit by @jakedt in #713
• Add ability to enable the REST gateway for the test server by @josephschorr in #714
• remove rangefeed config from crdb migrations by @ecordell in #707
• Depbot updates for Aug 1 by @josephschorr in #721
• Depbot updates for Aug 1 - part 2 by @josephschorr in #727
• Depbot updates for Aug 1 - part 3 by @josephschorr in #732
• Fix bounds on check test by @josephschorr in #728
• switch crdb watch feature detection to only require CONTROLCHANGEFEED by @ecordell in #722
• Skip checking of permissions for relationships in WriteSchema by @josephschorr in #734

Full Changelog: v1.10.0...v1.11.0

Docker Images

This release is available at authzed/spicedb:v1.11.0, quay.io/authzed/spicedb:v1.11.0, ghcr.io/authzed/spicedb:v1.11.0