SpiceDB Files

Highlights

• Dispatched checks are now batched performed improving performance
• Protobuf serialization is now much faster by using vtprotobuf to avoid reflection
• Dispatch API is now compressed with Snappy
• Cache sizes can now be configured with percentages of free memory

Warning This release contains a change to the internal dispatch API, which means that v1.13.0 and v1.12.0 can not dispatch to each other during a rolling upgrade. To upgrade without downtime, run these as separate Kubernetes services, or disable dispatch before upgrading.

What's Changed

• Add an error case for redefining a type in schema by @josephschorr in https://github.com/authzed/spicedb/pull/810
• Add govulncheck to the linters by @josephschorr in https://github.com/authzed/spicedb/pull/813
• don't generate nsswitch.conf (base images have it now) by @ecordell in https://github.com/authzed/spicedb/pull/815
• Fix fallback for MySQL stats to fix test flake by @josephschorr in https://github.com/authzed/spicedb/pull/812
• replace custom pgxpool collector with opensource module by @vroldanbet in https://github.com/authzed/spicedb/pull/809
• dispatch: use Snappy S2 compression and vtprotobuf by @jzelinskie in https://github.com/authzed/spicedb/pull/821
• gomod: bump compress to v1.15.10 by @jzelinskie in https://github.com/authzed/spicedb/pull/822
• Disable GC in datastore drivers when in read-only mode by @josephschorr in https://github.com/authzed/spicedb/pull/811
• bump kuberesolver to pick up serviceaccount token refresh by @ecordell in https://github.com/authzed/spicedb/pull/817
• Ensure that internal errors are returned before dev errors by @josephschorr in https://github.com/authzed/spicedb/pull/823
• Use MarshalVT() and UnmarshalVT() everywhere by @jzelinskie in https://github.com/authzed/spicedb/pull/824
• internal/datastore: use proto.Marshal by @jzelinskie in https://github.com/authzed/spicedb/pull/825
• Add a test for writing and reading back a serialized namespace in the datastores by @josephschorr in https://github.com/authzed/spicedb/pull/826
• caveat in MemDB datastore by @vroldanbet in https://github.com/authzed/spicedb/pull/807
• forward cli flags GCMaxOperationTime and SplitAtUsersetCount to MySQL datastore by @vroldanbet in https://github.com/authzed/spicedb/pull/829
• Change all user-visible type errors into proper wrapped error structs by @josephschorr in https://github.com/authzed/spicedb/pull/831
• reduce e2e flakes by @ecordell in https://github.com/authzed/spicedb/pull/834
• Batch check improvements by @josephschorr in https://github.com/authzed/spicedb/pull/777
• Fix performance for large schema writes in V1Alpha1 by @josephschorr in https://github.com/authzed/spicedb/pull/837
• Fix chunking util to never call for an empty chunk by @josephschorr in https://github.com/authzed/spicedb/pull/840
• Change caching to sort order resource and subject IDs by @josephschorr in https://github.com/authzed/spicedb/pull/841
• Improve the WASM developer package interface by @josephschorr in https://github.com/authzed/spicedb/pull/828
• internal/dispatch: gofumpt 4.0 by @jzelinskie in https://github.com/authzed/spicedb/pull/845
• update cobrautil to latest commit by @vroldanbet in https://github.com/authzed/spicedb/pull/842
• pkg/cmd: support cache sizes in percentages of free memory by @jzelinskie in https://github.com/authzed/spicedb/pull/827
• Add building of WASM developer binary to releases by @samkim in https://github.com/authzed/spicedb/pull/833
• pkg/cache: implement metrics for noop cache by @jzelinskie in https://github.com/authzed/spicedb/pull/848
• introduce caveat support in WriteRelationships/ReadRelationships by @vroldanbet in https://github.com/authzed/spicedb/pull/838
• Start work for dispatch for caveats by adding MembershipSet by @josephschorr in https://github.com/authzed/spicedb/pull/849
• internal: add docker build tag to transitives by @jzelinskie in https://github.com/authzed/spicedb/pull/854
• docker: switch to chainguard base images by @jzelinskie in https://github.com/authzed/spicedb/pull/857
• Switch check dispatch to use the new MembershipSet by @josephschorr in https://github.com/authzed/spicedb/pull/855
• Dependabot updates for Oct 2022 by @josephschorr in https://github.com/authzed/spicedb/pull/867
• Dependabot updates for Oct 2022, Part 2 by @josephschorr in https://github.com/authzed/spicedb/pull/873
• Change check dispatching to support caveat expr evaluation by @josephschorr in https://github.com/authzed/spicedb/pull/865
• Dependabot updates for Oct 2022, Part 3 by @josephschorr in https://github.com/authzed/spicedb/pull/876
• Add caveats flag to disable writing by default on all datastores by @josephschorr in https://github.com/authzed/spicedb/pull/866

Full Changelog: https://github.com/authzed/spicedb/compare/v1.12.0...v1.13.0

Docker Images

This release is available at authzed/spicedb:v1.13.0, quay.io/authzed/spicedb:v1.13.0, ghcr.io/authzed/spicedb:v1.13.0