This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+12 more
ReleasePort's take
Light signalYantrikDB v0.7.14 includes LICENSE in source distributions, resolving PyPI PEP 639 rejection. Bugfixes improve examples, benchmarks, macOS compatibility, and test stability.
Why it matters: PyPI PEP 639 compliance now met. Update if your deployment pulls sdist distributions from PyPI for YantrikDB.
Summary
AI summarySource distribution now includes LICENSE and publishes alongside wheels.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
sdist includes LICENSE file, resolving PyPI PEP 639 rejection sdist includes LICENSE file, resolving PyPI PEP 639 rejection Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
compactor test asserts delta_len contract, fixing intermittent flakes compactor test asserts delta_len contract, fixing intermittent flakes Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
examples and benchmarks use correct imports and signatures examples and benchmarks use correct imports and signatures Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
macOS build includes linker flag for pyo3 compatibility macOS build includes linker flag for pyo3 compatibility Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Low |
Compactor test asserts delta length contract instead of fragile cold_len timeout Compactor test asserts delta length contract instead of fragile cold_len timeout Source: granite4.1:30b@2026-05-22-audit Confidence: low |
— |
Full changelog
TL;DR
Multi-issue release.
Primary: v0.7.12 + v0.7.13 wheels published fine, but the sdist was rejected by PyPI's PEP 639 validation (LICENSE missing from sdist root). v0.7.14 fixes this — the source distribution will publish alongside wheels for the first time since v0.7.11.
Plus closes 3 tracked issues: #18, #19, #22.
What's fixed
sdist publish path (primary)
PR #21 (v0.7.12) switched the publish workflow from PyO3/maturin-action@v1 upload to pypa/gh-action-pypi-publish@release/v1, which strictly validates PEP 639 license metadata. The repo-root LICENSE file wasn't being included in maturin's sdist (which roots at crates/yantrikdb-python/), so the sdist upload was rejected:
400 License-File LICENSE does not exist in distribution file yantrikdb-0.7.12.tar.gz
Wheels uploaded fine (each wheel has its own metadata). But:
- Users on unsupported platforms (FreeBSD, exotic archs) fell back to sdist, which didn't exist →
pip installfailed - Supply-chain auditors needing sdists were blocked
Fix: crates/yantrikdb-python/LICENSE — copied from repo root so maturin's sdist includes it. From v0.7.14 onward, PyPI gets both wheels AND sdist.
#18 — examples + benches compile drift (closed)
Two cleanups so cargo build --all-targets works:
- Stale crate name —
crates/yantrikdb-core/benches/engine_bench.rsandcrates/yantrikdb-core/examples/profile_recall.rsimported viayantrikdb_core::; the crate is actually namedyantrikdb. Updated 6 import lines. - Stale call signatures — 8
db.recall(...)call sites inengine_bench.rswere passing 9 args;recall()takes 11 since v0.7.6 addeddomain+sourceparams. Added 2Noneto each call. 1db.stats()call inprofile_recall.rswas missing thenamespacearg.
CI workflow updated: cargo clippy runs with --all-targets again (was restricted to --lib --tests --bins while examples + benches were broken).
#19 — macOS native linker flags (closed)
New crates/yantrikdb-python/build.rs emits -undefined dynamic_lookup on macOS targets so stock cargo build works without external tooling. pyo3's extension-module feature deliberately doesn't link libpython; macOS's default linker rejects the resulting cdylib without this flag. maturin injects the flag when building wheels, but stock cargo build didn't.
CI test.yml updated: removed --exclude yantrikdb-python from the cargo build step (still excluded from cargo test — pyo3 extension-module + cargo test = link error on ALL platforms, since no Python interpreter exists at test-link time; pytest is the right surface).
#22 — compactor flake (closed)
compactor_drains_delta_periodically was asserting cold_len >= 200 within N seconds. Two problems:
- The wall-clock budget (4s → 12s) was always tight on slower CI runners (macOS-14 ARM, Windows). Intermittent timeouts.
cold_lensemantics aren't quite what the test assumed — entries can be in cold's HNSW rebuild buffer rather than its accounted length, showingcold=0even when the compactor has drained delta.
Fix: assert the real contract — delta_len < half-cap within 30s — instead of the fragile cold_len + wall-clock proxy. The contract a CALLER cares about is "writes don't pile up unboundedly in delta," not "exactly N items show up exactly here within K seconds."
What's NOT in this release (deferred)
| Issue | Why deferred |
|-------|--------------|
| #16 — clippy 73-warning cleanup | 2–4 hours focused work, dedicated PR for review |
| #17 — pylint W codes cleanup | 1–2 hours, dedicated PR |
| #20 — pyo3 0.28 FromPyObject + Bound idiom cleanup | Multi-file binding changes, dedicated PR |
Bundling these into v0.7.14 would have made the PR too big to review or roll back safely. Each will get its own focused PR.
Verification
Full local CI sweep all green before push:
cargo fmt --all -- --check: PASSflake8 src/ tests/ --select=E9,F63,F7,F82: 0 issuespylint src/yantrikdb tests/ --disable=C,R,W --enable=E,F: exit 0cargo clippy --all-targets --all-features --workspace --exclude yantrikdb-python -- --cap-lints warn: clean warningscargo test --workspace --exclude yantrikdb-python: 1422 (default) / 1411 (slim)pytest tests/: 220 passedmaturin develop --release: builds + installs cleanly
CI on PR #25 (commit 15f6ae6): 3 of 3 required checks GREEN. Windows + Linux test runners passed. macos-14 had a dtolnay/rust-toolchain rustup-init install flake at the toolchain-install step (cargo was still the installer shim at build time) — known GitHub Actions runner-side flake, not a regression from this release's changes. Will rerun macos-14 separately for clean signal.
Coordination
- PR #25 (commit
15f6ae6) onorigin/main— all 4 fixes bundled. - Closed: #18, #19, #22.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About YantrikDB
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]