SpiceDB Files

Highlights

• Major performance improvements to the Watch API for the Postgres datastore
• v1.CheckPermission is now uses an optimization when there are many subjects with the same relation
• Caveats (experimental) are now supported in the development API
• Dispatch concurrency limits are now configurable per request type (e.g. --dispatch-check-permission-concurrency-limit)

What's Changed

• HTTP gateway graceful termination by @vroldanbet in https://github.com/authzed/spicedb/pull/1001
• move off ristretto fork by @vroldanbet in https://github.com/authzed/spicedb/pull/1012
• Add brief sleeps to fix flaky test on macos by @josephschorr in https://github.com/authzed/spicedb/pull/1014
• Return a more descriptive error for watch when not enabled by @josephschorr in https://github.com/authzed/spicedb/pull/1009
• Fix memdb to always generate unique revision IDs by @josephschorr in https://github.com/authzed/spicedb/pull/1015
• Early iterator closing in dispatch by @josephschorr in https://github.com/authzed/spicedb/pull/1016
• Debug API improvements by @josephschorr in https://github.com/authzed/spicedb/pull/963
• Add configurable concurrency limits per dispatch type by @josephschorr in https://github.com/authzed/spicedb/pull/1010
• Switch the namespace cache to use estimated costs and no serialization by @josephschorr in https://github.com/authzed/spicedb/pull/1019
• internal/datastore: remove unused lock by @jzelinskie in https://github.com/authzed/spicedb/pull/1021
• Fix the flake in the estimated size test for nsdefs by @josephschorr in https://github.com/authzed/spicedb/pull/1023
• Fix metadata on ErrCannotWriteToPermission by @josephschorr in https://github.com/authzed/spicedb/pull/1025
• Add a metric for estimated check direct queries by @josephschorr in https://github.com/authzed/spicedb/pull/1024
• Remove old error message from CRDB test by @josephschorr in https://github.com/authzed/spicedb/pull/1036
• Add support for caveat name and context to tuple syntax by @josephschorr in https://github.com/authzed/spicedb/pull/1028
• Dependabot updates for Dec 2022 by @josephschorr in https://github.com/authzed/spicedb/pull/1037
• Adjust estimated query count metric to only count dispatch if it was necessary by @josephschorr in https://github.com/authzed/spicedb/pull/1030
• Link to annotated paper by @samkim in https://github.com/authzed/spicedb/pull/1044
• Move to golang 1.19.4 by @josephschorr in https://github.com/authzed/spicedb/pull/1049
• datastore/crdb: upgrade to v22.2.0 to get arm support by @jakedt in https://github.com/authzed/spicedb/pull/1042
• Add warning when PG max connection count is lower than min by @josephschorr in https://github.com/authzed/spicedb/pull/1052
• Improve the watch API performance and correctness for postgres by @jakedt in https://github.com/authzed/spicedb/pull/1039
• Add prom metric for number of batch check dispatches by @josephschorr in https://github.com/authzed/spicedb/pull/1048
• Add retries to the estimated size test to remove flakiness by @josephschorr in https://github.com/authzed/spicedb/pull/1053
• Debug supporting caveats by @josephschorr in https://github.com/authzed/spicedb/pull/1041
• Add support for tracking caveats in membership for development by @josephschorr in https://github.com/authzed/spicedb/pull/1047
• Fix revision checking in memdb to allow for past now by @josephschorr in https://github.com/authzed/spicedb/pull/1029
• Add another relationship parsing test by @josephschorr in https://github.com/authzed/spicedb/pull/1056
• Change confusing flag help output. by @ensonic in https://github.com/authzed/spicedb/pull/1043
• gomod: update cobraotel to support sample ratios by @jzelinskie in https://github.com/authzed/spicedb/pull/1058
• Fix concurrent access issue in reachable resources and add additional testing and a small perf improvement by @josephschorr in https://github.com/authzed/spicedb/pull/1061
• Fix debug tracing for batch dispatches by @josephschorr in https://github.com/authzed/spicedb/pull/1060
• improvements on context cancellation by @vroldanbet in https://github.com/authzed/spicedb/pull/1062
• Add test for dispatch metadata on all endpoints by @josephschorr in https://github.com/authzed/spicedb/pull/1066
• redesigns middlware options for RunnableServer v2 by @vroldanbet in https://github.com/authzed/spicedb/pull/1063
• datastore/proxy: add prom metrics to datastore operations by @jakedt in https://github.com/authzed/spicedb/pull/1069
• Add exponential backoff to the GC worker for datastores by @josephschorr in https://github.com/authzed/spicedb/pull/1068
• Add accessor in the dev package for V1 API by @josephschorr in https://github.com/authzed/spicedb/pull/1071
• Fix bug in reachable resources that was causing extra work by @josephschorr in https://github.com/authzed/spicedb/pull/1073
• Add a linter for improper use of panics and fix all found instances by @josephschorr in https://github.com/authzed/spicedb/pull/1054
• Add datastore GC command to synchronously run GC by @josephschorr in https://github.com/authzed/spicedb/pull/1067
• Add support for caveats in development package by @josephschorr in https://github.com/authzed/spicedb/pull/1064
• reference libraries through awesome spicedb by @vroldanbet in https://github.com/authzed/spicedb/pull/1076
• Dependabot updates for Jan 2023 by @josephschorr in https://github.com/authzed/spicedb/pull/1084
• Direct check performance improvements by @josephschorr in https://github.com/authzed/spicedb/pull/839

Docker Images

This release is available at:

• authzed/spicedb:v1.16.0
• quay.io/authzed/spicedb:v1.16.0
• ghcr.io/authzed/spicedb:v1.16.0
• authzed/spicedb:v1.16.0-debug
• quay.io/authzed/spicedb:v1.16.0-debug
• ghcr.io/authzed/spicedb:v1.16.0-debug

New Contributors

• @ensonic made their first contribution in https://github.com/authzed/spicedb/pull/1043

Full Changelog: https://github.com/authzed/spicedb/compare/v1.15.0...v1.16.0