dgraph

v25.3.5 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 1mo NoSQL & Document

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

database distributed go knowledge-graph

ReleasePort's take

Light signal

editorial:auto 1mo

The v25.3.5 release rejects incremental backups that have a regressed read timestamp and upgrades the Go runtime to version 1.26.4.

Why it matters: Rejecting incremental backups with a regressed read_ts prevents data inconsistency; upgrading the Go runtime to 1.26.4 applies security patches and bug fixes for all deployments.

Summary

AI summary

Updates backup, deps, and chore across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Dependency	Low	Upgrade Go runtime to version 1.26.4. Upgrade Go runtime to version 1.26.4. Source: llm_adapter@2026-06-11 Confidence: high	—
Bugfix	Medium	Reject incremental backups with regressed read_ts. Reject incremental backups with regressed read_ts. Source: llm_adapter@2026-06-11 Confidence: high	—
Refactor	Low	Remove unused buildvars.ComposeBuildDir variable. Remove unused buildvars.ComposeBuildDir variable. Source: llm_adapter@2026-06-11 Confidence: high	—
Refactor	Low	Disable scheduled Jepsen test runs in CI. Disable scheduled Jepsen test runs in CI. Source: llm_adapter@2026-06-11 Confidence: high	—

Full changelog

What's Changed

fix(backup): reject incremental backups whose read_ts has regressed by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9707
chore(deps): Upgrade go 1.26.4; add a openvex for false positive CVE report by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9735
chore: remove unused buildvars.ComposeBuildDir Var by @mlwelles in https://github.com/dgraph-io/dgraph/pull/9704
chore(ci): disable scheduled jepsen test runs by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9729
docs(changelog): backfill v25.3.1-v25.3.4 and v24.1.6-v24.1.9 entries by @mlwelles in https://github.com/dgraph-io/dgraph/pull/9705

Full Changelog: https://github.com/dgraph-io/dgraph/compare/v25.3.4...v25.3.5

Breaking Changes

Removed unused buildvars.ComposeBuildDir variable

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track dgraph

Get notified when new releases ship.

About dgraph

high-performance graph database for real-time use cases

All releases →