Tags give the ability to mark specific points in history as being important
-
v0.8.23
protectedRelease: Geode v0.8.2394d74328 · ·geode v0.8.23 SONNY-738 hardening release: the v0823 line (with SONNY-2675 strict grouped HAVING) and the r12 line (review rounds 12-19) reconciled into one. - fix(execution): write statements accepted only in allowlisted shapes; a failed statement changes nothing and ROLLBACK undoes every change (SONNY-3139..3148, 3166, 3182, 3348, 3059) - fix(eval): checked integer/decimal arithmetic; bounded parser and evaluator (SONNY-2769, 3133, 3181, 3244) - fix(storage): MERGE matches by exact value; graph/session/transaction lifetime races closed (SONNY-2806, 3028..3038, 3180, 3312..3350) - fix(cli): honor inline TLS certificate options - fix(ci): target the k8s runner pool by its amd64 tag (SONNY-2928) - fix(test): mark the FLE lifecycle test key as an allowed gitleaks fixture - fix(ci): trust the checkout in the release jobs' git - fix(ci): pin the release and apt jobs to amd64 runners - fix(ci): bump the pinned Alpine OpenSSL packages to 3.5.9-r0 - fix(release): numeric USER and exec-form HEALTHCHECK in release Dockerfiles - chore(release): integrate reviewed dependency updates (SONNY-4829)
-
v0.8.20
protectedRelease: Geode v0.8.20dc774f61 · ·v0.8.20 — QUIC stream semantics: refuse unbound sibling streams (SONNY-1835), opt-in idle-sibling reap (SONNY-1837), per-stream CANCEL releasing the write lock (SONNY-1841)
-
v0.8.19
protectedRelease: Geode v0.8.19df99983c · ·v0.8.19 — engine metrics correctness, QUIC teardown safety, resident node-cache UAF fix (SONNY-1979), CI/test hardening
-
v0.8.18
protectedRelease: Geode v0.8.18f5bceb64 · ·v0.8.18 — CI-only re-cut of 0.8.17 (cross-build shards on the dedicated fleet, zig -j2)
-
v0.8.16
protecteda4c5b08f · ·v0.8.16: engine release on grpc-zig v0.1.10 Re-pins the whole devnw/zig dependency spine onto grpc-zig v0.1.10 (SONNY-1568 per-connection reader threads) via the zig-tool sync-diamond cascade, which re-released 18 intermediate libraries: otel v0.1.20, dns v0.1.20, audit v0.1.15, auth v0.1.15, fle v0.1.13, gql v0.1.15, quic v0.1.41, geode-client-zig v0.3.9, wal v0.1.15, graph-storage v0.4.3, hnsw v0.1.12, mcp v0.1.15, raft v0.1.16, repl v0.1.17, rtree v0.1.12, timeseries v0.1.14, timeseries-storage v0.2.13, vulkan v0.1.15 Ships the reviewed SONNY-1218/1229/1318/1326/1330/1560/1574/1219 fixes: tenant scope on engine-direct reads and graph execution, the UNION read-only gate, exact-index persist accounting, gRPC flow control, and the QUIC connection lifecycle. Known limitation: server-initiated connection close codes are named on the SENDING side only. The peer cannot read the code until the vendored quic layer stops discarding it on receive (T-8).
-
v0.8.14
protectedRelease: Geode v0.8.149b404809 · ·v0.8.14 — ENG-5008: glibc amd64 packages restored The v0.8.13 amd64 .deb shipped a musl-linked binary no glibc host could exec. This release splits the gnu/musl goreleaser build ids so package and image consumers select unambiguously, adds the verify-packages smoke-test gate in front of apt publishing, and stops enabling geode.service on fresh installs.
-
v0.8.8
protected79e04da4 · ·release v0.8.8 - fix(storage): materialize graph for write locks — closes the ENG-3914 RC-3 cross-path MERGE duplicate + global/adapter lock-order deadlock - fix(transport): Debug QUIC poll-worker default 1 -> 4 - fix(auth): reentrancy-aware store-lock probe (ENG-3979) + geode.auth.user_import - fix(storage): cold-store edge-body hydration; fail-closed DETACH (ENG-3983) - fix(vector): NULL-propagation + dim-pin lifecycle (re-pin on overwrite, release on delete) - fix(eval): 42883 propagation for nested unknown functions, datetime/valueType dispatch, float comparisons (gap-0005) - fix(cli): serve --help description line
-
v0.8.5
protectedRelease: Geode v0.8.54264ccba · ·Release v0.8.5 Fixes the eight confirmed bugs from the blog-post validation sweep (docs/@BUGS_731.md), all against v0.8.4: GQL engine — chained MATCH no longer loses scope (inline node property predicates were dropped, matching globally); a var-length hop chained to a further hop now honours its quantifier; node/edge equality compares by id instead of unstable pointers, so `a <> b` filters; length(path) carried through a WITH projection returns the real length instead of 0; count(DISTINCT ...) returns a count instead of NULL, and the ISO set quantifier is accepted on every aggregate, not just count(); the documented vector functions distance/similarity/euclidean/manhattan/knn are registered and accept list literals, and an unresolved function now raises 42883 instead of silently evaluating to NULL. Auth — ALTER USER ... SET PASSWORD durably clears password_reset_required, so the server's own documented recovery path no longer locks the account out permanently; the status-only ack no longer surfaces as "query execution failed" after the write committed. The offline CLI, the wire path and the GEODE_ADMIN_PASSWORD seed now share one password policy (the CLI's old rule was mutually exclusive with the server's). Docker/CLI — the shipped HEALTHCHECK works by default: it probes the unauthenticated /health endpoint instead of an authenticated query using a TLS flag release builds refuse, so it no longer re-trips the per-IP auth rate limiter forever. Fixes a MetricsServer request-line use-after-invalidate that made /health 404 on segment-split requests, and a leak of the decoded HELLO response on every `geode auth login`.
-
v0.8.4
protectedRelease: Geode v0.8.4ebb5e240 · ·Release v0.8.4 Fixes apt publishing: removes the geode-local apt-publish override that ran 'aws s3 sync apt-repo/ --delete' and wiped the entire R2 pool once the catalog stopped artifacting the full pool (v0.8.3). Now uses the catalog's append-only apt-pool-new sync. Also carries the v0.8.3 goreleaser/skopeo GitLab-registry fix.