v1.13.0

Highlights

• Dispatched checks are now batched performed improving performance
• Protobuf serialization is now much faster by using vtprotobuf to avoid reflection
• Dispatch API is now compressed with Snappy
• Cache sizes can now be configured with percentages of free memory

Warning
This release contains a change to the internal dispatch API, which means that v1.13.0 and v1.12.0 can not dispatch to each other during a rolling upgrade. To upgrade without downtime, run these as separate Kubernetes services, or disable dispatch before upgrading.

What's Changed

• Add an error case for redefining a type in schema by @josephschorr in #810
• Add govulncheck to the linters by @josephschorr in #813
• don't generate nsswitch.conf (base images have it now) by @ecordell in #815
• Fix fallback for MySQL stats to fix test flake by @josephschorr in #812
• replace custom pgxpool collector with opensource module by @vroldanbet in #809
• dispatch: use Snappy S2 compression and vtprotobuf by @jzelinskie in #821
• gomod: bump compress to v1.15.10 by @jzelinskie in #822
• Disable GC in datastore drivers when in read-only mode by @josephschorr in #811
• bump kuberesolver to pick up serviceaccount token refresh by @ecordell in #817
• Ensure that internal errors are returned before dev errors by @josephschorr in #823
• Use MarshalVT() and UnmarshalVT() everywhere by @jzelinskie in #824
• internal/datastore: use proto.Marshal by @jzelinskie in #825
• Add a test for writing and reading back a serialized namespace in the datastores by @josephschorr in #826
• caveat in MemDB datastore by @vroldanbet in #807
• forward cli flags GCMaxOperationTime and SplitAtUsersetCount to MySQL datastore by @vroldanbet in #829
• Change all user-visible type errors into proper wrapped error structs by @josephschorr in #831
• reduce e2e flakes by @ecordell in #834
• Batch check improvements by @josephschorr in #777
• Fix performance for large schema writes in V1Alpha1 by @josephschorr in #837
• Fix chunking util to never call for an empty chunk by @josephschorr in #840
• Change caching to sort order resource and subject IDs by @josephschorr in #841
• Improve the WASM developer package interface by @josephschorr in #828
• internal/dispatch: gofumpt 4.0 by @jzelinskie in #845
• update cobrautil to latest commit by @vroldanbet in #842
• pkg/cmd: support cache sizes in percentages of free memory by @jzelinskie in #827
• Add building of WASM developer binary to releases by @samkim in #833
• pkg/cache: implement metrics for noop cache by @jzelinskie in #848
• introduce caveat support in WriteRelationships/ReadRelationships by @vroldanbet in #838
• Start work for dispatch for caveats by adding MembershipSet by @josephschorr in #849
• internal: add docker build tag to transitives by @jzelinskie in #854
• docker: switch to chainguard base images by @jzelinskie in #857
• Switch check dispatch to use the new MembershipSet by @josephschorr in #855
• Dependabot updates for Oct 2022 by @josephschorr in #867
• Dependabot updates for Oct 2022, Part 2 by @josephschorr in #873
• Change check dispatching to support caveat expr evaluation by @josephschorr in #865
• Dependabot updates for Oct 2022, Part 3 by @josephschorr in #876
• Add caveats flag to disable writing by default on all datastores by @josephschorr in #866

Full Changelog: v1.12.0...v1.13.0

Docker Images

This release is available at authzed/spicedb:v1.13.0, quay.io/authzed/spicedb:v1.13.0, ghcr.io/authzed/spicedb:v1.13.0