SpiceDB Files

Highlights

• Cloud Spanner is now supported as a backend datastore (beta) 🎉
• Better error messages for invalid schemas
• Several performance and resource usage improvements
• An edge case that caused LookupResources to return incomplete results for certain schemas was diagnosed and fixed (big thanks to @NickyHeuperman for reporting!)

What's Changed

• Fix deletion of empty namespaces in CRDB datastore by @josephschorr in https://github.com/authzed/spicedb/pull/377
• .github: add CodeQL lint workflow by @jzelinskie in https://github.com/authzed/spicedb/pull/378
• Better usage metrics on non-permissions endpoints by @jakedt in https://github.com/authzed/spicedb/pull/381
• Attempt to avoid failed crdb range splits in e2e by @ecordell in https://github.com/authzed/spicedb/pull/380
• internal/middleware: add tests for usagemetrics by @jzelinskie in https://github.com/authzed/spicedb/pull/382
• introduce gRPC health-check for serve-testing by @vroldanbet in https://github.com/authzed/spicedb/pull/383
• allow gateway backend to be overridden by @jakedt in https://github.com/authzed/spicedb/pull/384
• Fix parsing of assertions YAML to handle all errors by @josephschorr in https://github.com/authzed/spicedb/pull/387
• Add a config object for spicedb servers, control graceful stop of all services by @ecordell in https://github.com/authzed/spicedb/pull/376
• increase max offset for crdb cluster in e2e tests by @ecordell in https://github.com/authzed/spicedb/pull/389
• spicedb config: pluggable authentication by @ecordell in https://github.com/authzed/spicedb/pull/390
• bump dependencies by @ecordell in https://github.com/authzed/spicedb/pull/402
• Avoid logging with testing.T after test has finished by @ecordell in https://github.com/authzed/spicedb/pull/395
• support buffconn for grpc server config by @ecordell in https://github.com/authzed/spicedb/pull/392
• add universal consistency middleware by @ecordell in https://github.com/authzed/spicedb/pull/391
• Move the bulk of the dev API impl into its own package by @josephschorr in https://github.com/authzed/spicedb/pull/406
• Add more context to schema parse errors by @josephschorr in https://github.com/authzed/spicedb/pull/408
• Validation file package improvements by @josephschorr in https://github.com/authzed/spicedb/pull/409
• Update authzed-go to bring in the API validation regex fixes by @josephschorr in https://github.com/authzed/spicedb/pull/410
• testserver: use middleware to inject the correct per-token datastore by @ecordell in https://github.com/authzed/spicedb/pull/404
• Change validationfile parsing to be YAML based by @josephschorr in https://github.com/authzed/spicedb/pull/413
• Ensure development package works without context changes by @josephschorr in https://github.com/authzed/spicedb/pull/416
• Small error fixes and improvements in validationfile by @josephschorr in https://github.com/authzed/spicedb/pull/415
• build(deps): bump golang.org/x/tools from 0.1.8 to 0.1.9 by @dependabot in https://github.com/authzed/spicedb/pull/403
• Add line and column info to expected relations validation errors by @josephschorr in https://github.com/authzed/spicedb/pull/418
• Fix version command by @bryanhuhta in https://github.com/authzed/spicedb/pull/420
• Add retries with a newly acquired connection by @samkim in https://github.com/authzed/spicedb/pull/298
• Implement Cloud Spanner datastore by @jakedt in https://github.com/authzed/spicedb/pull/414
• internal/datastore: singlefight revision updates by @jzelinskie in https://github.com/authzed/spicedb/pull/426
• Add a non-caching namespace manager by @ecordell in https://github.com/authzed/spicedb/pull/423
• Add command line flags for setting the sizes of caches by @josephschorr in https://github.com/authzed/spicedb/pull/428
• Fix handling of removing allowed wildcards on relations by @josephschorr in https://github.com/authzed/spicedb/pull/431
• don't allocate max_int length slices by @ecordell in https://github.com/authzed/spicedb/pull/430
• build(deps): bump github.com/aws/aws-sdk-go from 1.42.44 to 1.43.8 by @dependabot in https://github.com/authzed/spicedb/pull/433
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.28.0 to 0.29.0 by @dependabot in https://github.com/authzed/spicedb/pull/437
• build(deps): bump go.opentelemetry.io/otel/trace from 1.3.0 to 1.4.1 by @dependabot in https://github.com/authzed/spicedb/pull/436
• export function to get head revision for a datastore engine by @ecordell in https://github.com/authzed/spicedb/pull/444
• Fix support for pipes in object IDs by @josephschorr in https://github.com/authzed/spicedb/pull/446
• Have errors raised by the type system from schema construction in the devcontext be properly contextualized by @josephschorr in https://github.com/authzed/spicedb/pull/448
• Dependabot March 4, 2022 by @josephschorr in https://github.com/authzed/spicedb/pull/450
• Dependabot March 4, 2022 part 2 by @josephschorr in https://github.com/authzed/spicedb/pull/456
• README updates by @josephschorr in https://github.com/authzed/spicedb/pull/445
• Allow renovatebot by @ecordell in https://github.com/authzed/spicedb/pull/460
• bump gofumpt to 1.3.0 and fix new formatting issues by @ecordell in https://github.com/authzed/spicedb/pull/462
• Configure Renovate by @renovate in https://github.com/authzed/spicedb/pull/459
• Update renovate.json by @ecordell in https://github.com/authzed/spicedb/pull/466
• Add warnings for namespaces definitions using v0-only constructs by @josephschorr in https://github.com/authzed/spicedb/pull/461
• lookup: fall back to a slow path (list all + check) when necessary by @ecordell in https://github.com/authzed/spicedb/pull/471
• Remove Clone call on metadata filtering on namespaces by @josephschorr in https://github.com/authzed/spicedb/pull/468
• Add test for writing empty schemas by @josephschorr in https://github.com/authzed/spicedb/pull/473
• Add trace log for auth interceptor used by @josephschorr in https://github.com/authzed/spicedb/pull/474
• Have the check warning only apply to relations, not permissions by @josephschorr in https://github.com/authzed/spicedb/pull/475

New Contributors

• @vroldanbet made their first contribution in https://github.com/authzed/spicedb/pull/383
• @renovate made their first contribution in https://github.com/authzed/spicedb/pull/459

Full Changelog: https://github.com/authzed/spicedb/compare/v1.4.0...v1.5.0

Docker Images

This release is available at quay.io/authzed/spicedb:v1.5.0 and ghcr.io/authzed/spicedb:v1.5.0