chore(mise): add vendir and yq

See merge request !800

fix(ci): gate canonical-only jobs for security fork support

See merge request !798

fix(ci): set git remote URL with Vault token

See merge request !801

docs(adr): add workhorse query pattern (ADR 008)

See merge request !730

fix(tests): run dedup tests in forked databases for isolation

Closes #308

See merge request !795

fix(indexer): use batch() instead of fetch() for filtered consumers

Closes #423

See merge request !803

revert(indexer): revert batch() change in consume_pending

See merge request !804

fix(compiler): deterministic cursor ordering and path finding entity filter

See merge request !802

fix: require GitLab client config at server startup

See merge request !813

fix(compiler): add path tie-breaker to path finding ORDER BY

See merge request !812

fix: virtual column resolution for all query types

See merge request !811

fix: deterministic path finding cursor ordering leading to flaky tests

See merge request !815

feat: add GitLab connectivity probe to webserver /ready endpoint

See merge request !814

chore(deps): bump clickhouse crate from 0.14 to 0.15

See merge request !817

chore(compiler): add query_cache_share_between_users setting

See merge request !818

revert: "fix(compiler): add query_cache_share_between_users setting"

See merge request !820

chore(testing): integration tests for GitalyContentService::resolve_batch

Closes #377

See merge request !816

feat(server): query stats from X-ClickHouse-Summary + query pipeline dashboard

See merge request !821

fix(test): stabilize flaky cursor pagination determinism test

See merge request !826

fix(server): sanitize error messages and stop leaking compiled SQL

See merge request !749

feat(utils): generic NodeBatch builder for Arrow RecordBatch construction

See merge request !822

feat(ontology): add local_entities and local_exclude_properties settings

See merge request !823

feat(ontology): add name field to local_db edge table config

See merge request !829

feat(query-engine): duckDB pipeline with enforce pass and PipelineOutput::from_batches

See merge request !830

feat(cli): local DuckDB query pipeline with proper stage architecture

See merge request !832

feat(cli): local hydration with DuckDB execution

See merge request !835

fix(ontology): standardize APPROVED_BY edge to User-is-source direction

See merge request !834

feat(cli): local filesystem content resolver for virtual columns

See merge request !836

feat(code-graph): add as-record-batch trait for code graph node types

See merge request !837

docs: fix minor typos in design docs

See merge request !838

feat(cli): persist graph index to DuckDB

See merge request !729

docs: data sources documentation

See merge request !600

chore(cli): write lock retry, read-only queries, manifest in DuckDB

See merge request !839

## [0.23.0](v0.22.0...v0.23.0) (2026-04-09)

### Features

* add GitLab connectivity probe to webserver /ready endpoint ([322c34d3](322c34d3)) by Michael Usachenko
* **cli:** local DuckDB query pipeline with proper stage architecture ([bfe74970](bfe74970)) by Michael Usachenko
* **cli:** local filesystem content resolver for virtual columns ([074a3db3](074a3db3)) by Michael Usachenko
* **cli:** local hydration with DuckDB execution ([7f2ba99f](7f2ba99f)) by Michael Usachenko
* **cli:** persist graph index to DuckDB ([97b92127](97b92127)) by Michael Angelo Rivera
* **code-graph:** add as-record-batch trait for code graph node types ([ede7fe27](ede7fe27)) by Michael Usachenko
* **ontology:** add local_entities and local_exclude_properties settings ([dd18daed](dd18daed)) by Michael Usachenko
* **ontology:** add name field to local_db edge table config ([b544b52a](b544b52a)) by Michael Usachenko
* **query-engine:** duckDB pipeline with enforce pass and PipelineOutput::from_batches ([d584979c](d584979c)) by Michael Usachenko
* **server:** query stats from X-ClickHouse-Summary + query pipeline dashboard ([9408e273](9408e273)) by Michael Usachenko
* **utils:** generic NodeBatch builder for Arrow RecordBatch construction ([ff96956c](ff96956c)) by Michael Usachenko

### Fixes

* **ci:** gate canonical-only jobs for security fork support ([7d6ce1b2](7d6ce1b2)) by Michael Angelo Rivera
* **ci:** set git remote URL with Vault token ([7ab6bd4a](7ab6bd4a)) by Bohdan Parkhomchuk
* **compiler:** add path tie-breaker to path finding ORDER BY ([22179b06](22179b06)) by Michael Usachenko
* **compiler:** deterministic cursor ordering and path finding entity filter ([62a24a48](62a24a48)) by Michael Usachenko
* deterministic path finding cursor ordering leading to flaky tests ([6c16c459](6c16c459)) by Michael Usachenko
* **indexer:** use batch() instead of fetch() for filtered consumers ([14a2810a](14a2810a)) by Bohdan Parkhomchuk
* **ontology:** standardize APPROVED_BY edge to User-is-source direction ([164ca529](164ca529)) by Lyle Kozloff
* require GitLab client config at server startup ([36390faf](36390faf)) by Michael Usachenko
* **server:** sanitize error messages and stop leaking compiled SQL ([ea35c44d](ea35c44d)) by Michael Usachenko
* **tests:** run dedup tests in forked databases for isolation ([91c79250](91c79250)) by Michael Usachenko
* **test:** stabilize flaky cursor pagination determinism test ([0f0377df](0f0377df)) by Dmitry Gruzd
* virtual column resolution for all query types ([e4fa2e61](e4fa2e61)) by Michael Usachenko

### Other

* **adr:** add workhorse query pattern (ADR 008) ([d2e77a08](d2e77a08)) by Michael Angelo Rivera
* **cli:** write lock retry, read-only queries, manifest in DuckDB ([7fca313b](7fca313b)) by Michael Usachenko
* **compiler:** add query_cache_share_between_users setting ([a741cace](a741cace)) by Michael Usachenko
* data sources documentation ([05d162c2](05d162c2)) by Phillip Wells
* **deps:** bump clickhouse crate from 0.14 to 0.15 ([2a0beb41](2a0beb41)) by Michael Usachenko
* fix minor typos in design docs ([10d67c02](10d67c02)) by Bob Singh
* **mise:** add vendir and yq ([5936da83](5936da83)) by Bohdan Parkhomchuk
* **testing:** integration tests for GitalyContentService::resolve_batch ([f0eec8dd](f0eec8dd)) by Michael Usachenko