This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryUpdates Surfaces shipping in v1.15.0, Tests, and UUIDv7 across a mixed release.
Full changelog
Identity Graph (v2.0 headline feature)
A durable, queryable graph layer above run-local clusters. Stable entity_id (UUIDv7) per identity, source-record nodes, evidence edges, append-only event log, aliases.
SQLite default, Postgres optional. Resolve runs after dedupe clustering; idempotent on (run_name, kind, entity_id). Additive feature -- failure logs + skips, never blocks dedupe output.
Surfaces shipping in v1.15.0
- Python:
goldenmatch.identity.*+ root re-exports - CLI:
goldenmatch identity {list,show,resolve,history,conflicts,merge,split} - REST:
/api/v1/identities/... - Web: new "Identities" tab
- MCP: 6
identity_*tools - A2A: 6 skills (agent card: 12 -> 18)
- Postgres:
goldenmatch/db/migrations/identity_v1.sql+ 3 analytical views - DuckDB / Postgres extensions: 5 read-only UDFs/functions in
packages/rust/extensions/ - TS edge-safe core:
InMemoryIdentityStore+ query helpers (ships as[email protected]on npm)
Tests
- 47 new Python tests + 13 new TS tests + 9 new extensions tests
- Full Python sweep: 1984 passed, 60 skipped, 0 regressions
- CI green on all lanes incl.
duckdb_extensionsandrust_pgrxPG 15/16/17
Documentation
- Design:
docs/superpowers/specs/2026-05-12-identity-graph-design.md - DuckDB / extensions contract:
docs/superpowers/specs/2026-05-12-identity-graph-duckdb-contract.md
🤖 Generated with Claude Code
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About GoldenMatch
All releases →Related context
Related tools
Earlier breaking changes
- v3.1.0 `GOLDENMATCH_FRAME=polars` now requires the `[polars]` extra; raises error without it.
- vgoldencheck-v3.0.0 `inferred_type` emits neutral dtype vocabulary (str/int/uint/float/date/datetime/bool/other) instead of raw Polars dtypes.
- vgoldencheck-v3.0.0 'inferred_type' now emits a neutral dtype vocabulary instead of raw Polars dtype strings.
- vgoldencheck-v3.0.0 `scan_file`, `scan_dataframe`, and CLI `check` now run without Polars, using Arrow-native pyarrow.Table.
- v3.0.0 Result frames now return pyarrow.Table instead of Polars DataFrame.
Beta — feedback welcome: [email protected]