This release includes 4 security fixes for security teams reviewing exposed deployments.
Published 5d
NoSQL & Document
✓ No known CVEs patched
This release patches 4 known CVEs
Topics
agent-memory
ai-agents
columnar
crdt
database
distributed
+13 more
edge
embedded
graph
kv-store
local
local-first
multi-model
nosql
offline-first
llm
sql
timeseries
vector
Affected surfaces
auth
rbac
Summary
AI summaryUpdates pgwire, server, and fix across a mixed release.
Full changelog
What's Changed
- fix(server): source server_version from CARGO_PKG_VERSION by @mkhairi in https://github.com/NodeDB-Lab/nodedb/pull/114
- Vector multi-dtype storage, SQL CREATE INDEX, and physical plan refactor by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/115
- fix: gate Linux-only runtime paths by @habibtalib in https://github.com/NodeDB-Lab/nodedb/pull/128
- fix(tenant): accept tenant name in DROP/ALTER/PURGE TENANT by @emanzx in https://github.com/NodeDB-Lab/nodedb/pull/132
- feat: add temporal query support across engines by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/144
- Fix tenant drop ghost rows and id allocation race by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/145
- docs: update for transactions, distributed execution, and protocol changes by @laksamanakeris in https://github.com/NodeDB-Lab/nodedb/pull/174
- fix(security): enforce SQL authorization across transports by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/177
- fix(security): preserve credential integrity across auth lifecycle by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/178
- fix(security): bind OIDC providers to trusted tenants by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/179
- fix(security): prevent external superuser assertions by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/180
- fix(security): preserve UTF-8 SQL parser offsets by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/181
- fix(control): native gateway session txn_id for in-txn SQL reads by @pizofreude in https://github.com/NodeDB-Lab/nodedb/pull/182
- docs: cover v0.4.0 — atomic cross-shard transactions, CRDT collections, sparse vectors by @laksamanakeris in https://github.com/NodeDB-Lab/nodedb/pull/183
- fix(pgwire): improve libpq and ActiveRecord compatibility by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/184
- fix(pgwire): bypass cache for data-dependent point plans by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/185
- Fix DROP USER ownership reassignment and wire version reset by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/186
- Fix ownership and CRDT scoping by database by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/187
- fix(native): dispatch txn commit batch to the owning vshard by @laksamanakeris in https://github.com/NodeDB-Lab/nodedb/pull/196
- Fix issues #188–#193 by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/197
- fix(auth): materialize trust superuser identity by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/198
- Fix stale state after collection drop and re-create by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/203
- Fix cluster harness superuser identity and single-node tenant teardown storage reclaim by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/205
New Contributors
- @mkhairi made their first contribution in https://github.com/NodeDB-Lab/nodedb/pull/114
- @habibtalib made their first contribution in https://github.com/NodeDB-Lab/nodedb/pull/128
- @laksamanakeris made their first contribution in https://github.com/NodeDB-Lab/nodedb/pull/174
- @pizofreude made their first contribution in https://github.com/NodeDB-Lab/nodedb/pull/182
Full Changelog: https://github.com/NodeDB-Lab/nodedb/compare/v0.2.1...v0.4.0
Security Fixes
- fix(security): enforce SQL authorization across transports
- fix(security): preserve credential integrity across auth lifecycle
- fix(security): bind OIDC providers to trusted tenants
- fix(security): prevent external superuser assertions
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About NodeDB
All releases →Related context
Beta — feedback welcome: [email protected]