Download Latest Version spicedb_1.56.0_windows_amd64.zip (24.9 MB)
Email in envelope

Get an email when there's a new version of spicedb

Home / v1.56.0
Name Modified Size InfoDownloads / Week
Parent folder
spicedb_1.56.0_windows_amd64.zip 2026-07-24 24.9 MB
2 2 weekly downloads
windows_checksums.txt 2026-07-24 99 Bytes
0
checksums.txt 2026-07-24 984 Bytes
0
spicedb_1.56.0_linux_amd64.deb 2026-07-24 24.3 MB
0
spicedb_1.56.0_linux_arm64.deb 2026-07-24 22.0 MB
0
spicedb_1.56.0_linux_amd64.rpm 2026-07-24 24.3 MB
0
spicedb_1.56.0_linux_arm64.apk 2026-07-24 22.9 MB
0
spicedb_1.56.0_linux_arm64.rpm 2026-07-24 22.0 MB
0
spicedb_1.56.0_linux_amd64.apk 2026-07-24 25.4 MB
0
spicedb_1.56.0_darwin_amd64.tar.gz 2026-07-24 24.9 MB
0
spicedb_1.56.0_darwin_arm64.tar.gz 2026-07-24 23.2 MB
0
spicedb_1.56.0_linux_amd64.tar.gz 2026-07-24 24.3 MB
0
spicedb_1.56.0_linux_arm64.tar.gz 2026-07-24 22.1 MB
0
README.md 2026-07-24 9.5 kB
0
v1.56.0 source code.tar.gz 2026-07-24 3.4 MB
0
v1.56.0 source code.zip 2026-07-24 4.2 MB
0
Totals: 16 Items   267.8 MB 2

Added

  • New metric check_permissionship_total for CheckPermission and CheckBulkPermissions that counts the number of requests that returned HAS_PERMISSION. Also, write_relationships_updates also includes BulkImport calls (https://github.com/authzed/spicedb/pull/3240)

Changed

Fixed

  • Fixed a nil pointer dereference panic in CheckBulkPermissions that could occur under concurrent load when a tracing-enabled check shared a singleflight dispatch with a non-tracing bulk check. Debug-enabled checks are no longer singleflighted together with non-debug checks. (https://github.com/authzed/spicedb/pull/3174)
  • Fixed a nil pointer dereference panic in the Postgres FDW (https://github.com/authzed/spicedb/pull/3235)
  • CockroachDB: deletes performed by CockroachDB's row-level TTL job for expired relationships are no longer emitted as DELETE events by the Watch API. On CockroachDB ≥ 24.1, SpiceDB sets the ttl_disable_changefeed_replication storage parameter on the relationship tables at startup (if it lacks ALTER TABLE privileges, it logs a warning with the statement to run manually); on older versions a startup warning is logged and TTL deletes continue to be emitted. Note that the parameter affects any changefeed over these tables — external changefeeds that want TTL deletes can opt back in with ignore_disable_changefeed_replication. Delete-only transactions also no longer write an internal transaction-metadata marker row, reducing write amplification. (https://github.com/authzed/spicedb/pull/3210)
  • When SpiceDB loses a connection to a CockroachDB node, every read happening in the server blocks for a short period of time (https://github.com/authzed/spicedb/pull/3181)
  • LSP: hover and go-to-definition now resolve identifiers on the right-hand side of arrow expressions (->, .any(...), .all(...)) (https://github.com/authzed/spicedb/pull/3157)
  • The in_cidr caveat now matches IPv4-mapped IPv6 addresses (e.g. ::ffff:10.1.2.3) against IPv4 CIDRs, the same as the dotted form (https://github.com/authzed/spicedb/pull/3184)
  • MySQL: MySQL deadlocks on WriteRelationships (https://github.com/authzed/spicedb/pull/3187)
  • Datastore: a hung datastore round-trip while computing the optimized revision can no longer wedge the server. The revision is computed under singleflight, which detaches the work from the caller's context (stripping its gRPC deadline); a stuck computation (e.g. a half-open connection silently dropped by a load balancer) therefore pinned the latency of every concurrent caller and inflated whole-system P99. The shared computation is now aggressively bounded (2s), with a direct, deadline-respecting retry outside singleflight on failure so a transient wedge does not fail the request. Applies to all datastores. (https://github.com/authzed/spicedb/pull/3142)
  • Postgres & CockroachDB: pooled connections that have gone idle are now liveness-pinged with a bounded timeout (default 5s) before being handed to a query, so a half-open connection is discarded and replaced instead of hanging the acquiring request. (https://github.com/authzed/spicedb/pull/3142)
  • Memory: If SpiceDB couldn't determine the memory available to it (such as can happen in AWS ECS), it assumed that its memory was unbounded. We changed how memory detection works to make conservative estimates in these cases and made some improvements to cache entry cost estimation. (https://github.com/authzed/spicedb/pull/3201, https://github.com/authzed/spicedb/pull/3247)
  • Datastore: raw datastore driver errors that could leak engine internals (such as SQLSTATE codes or opaque COPY wrappers) are no longer returned to clients. Unhandled Postgres, MySQL, and CockroachDB driver errors — including CockroachDB's transient retryable/resettable errors — are now surfaced as descriptive, engine-agnostic gRPC statuses (with the full error logged server-side), and an aborted bulk-import COPY now reports the underlying source error instead of the driver's opaque wrapper. (https://github.com/authzed/spicedb/pull/3202)

What's Changed

New Contributors

Full Changelog: https://github.com/authzed/spicedb/compare/v1.54.0...v1.56.0

Docker Images

This release is available at authzed/spicedb:v1.56.0, quay.io/authzed/spicedb:v1.56.0, ghcr.io/authzed/spicedb:v1.56.0

Source: README.md, updated 2026-07-24