v1.5.0

Highlights

• Cloud Spanner is now supported as a backend datastore (beta) 🎉
• Better error messages for invalid schemas
• Several performance and resource usage improvements
• An edge case that caused LookupResources to return incomplete results for certain schemas was diagnosed and fixed (big thanks to @NickyHeuperman for reporting!)

What's Changed

• Fix deletion of empty namespaces in CRDB datastore by @josephschorr in #377
• .github: add CodeQL lint workflow by @jzelinskie in #378
• Better usage metrics on non-permissions endpoints by @jakedt in #381
• Attempt to avoid failed crdb range splits in e2e by @ecordell in #380
• internal/middleware: add tests for usagemetrics by @jzelinskie in #382
• introduce gRPC health-check for serve-testing by @vroldanbet in #383
• allow gateway backend to be overridden by @jakedt in #384
• Fix parsing of assertions YAML to handle all errors by @josephschorr in #387
• Add a config object for spicedb servers, control graceful stop of all services by @ecordell in #376
• increase max offset for crdb cluster in e2e tests by @ecordell in #389
• spicedb config: pluggable authentication by @ecordell in #390
• bump dependencies by @ecordell in #402
• Avoid logging with testing.T after test has finished by @ecordell in #395
• support buffconn for grpc server config by @ecordell in #392
• add universal consistency middleware by @ecordell in #391
• Move the bulk of the dev API impl into its own package by @josephschorr in #406
• Add more context to schema parse errors by @josephschorr in #408
• Validation file package improvements by @josephschorr in #409
• Update authzed-go to bring in the API validation regex fixes by @josephschorr in #410
• testserver: use middleware to inject the correct per-token datastore by @ecordell in #404
• Change validationfile parsing to be YAML based by @josephschorr in #413
• Ensure development package works without context changes by @josephschorr in #416
• Small error fixes and improvements in validationfile by @josephschorr in #415
• build(deps): bump golang.org/x/tools from 0.1.8 to 0.1.9 by @dependabot in #403
• Add line and column info to expected relations validation errors by @josephschorr in #418
• Fix version command by @bryanhuhta in #420
• Add retries with a newly acquired connection by @samkim in #298
• Implement Cloud Spanner datastore by @jakedt in #414
• internal/datastore: singlefight revision updates by @jzelinskie in #426
• Add a non-caching namespace manager by @ecordell in #423
• Add command line flags for setting the sizes of caches by @josephschorr in #428
• Fix handling of removing allowed wildcards on relations by @josephschorr in #431
• don't allocate max_int length slices by @ecordell in #430
• build(deps): bump github.com/aws/aws-sdk-go from 1.42.44 to 1.43.8 by @dependabot in #433
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.28.0 to 0.29.0 by @dependabot in #437
• build(deps): bump go.opentelemetry.io/otel/trace from 1.3.0 to 1.4.1 by @dependabot in #436
• export function to get head revision for a datastore engine by @ecordell in #444
• Fix support for pipes in object IDs by @josephschorr in #446
• Have errors raised by the type system from schema construction in the devcontext be properly contextualized by @josephschorr in #448
• Dependabot March 4, 2022 by @josephschorr in #450
• Dependabot March 4, 2022 part 2 by @josephschorr in #456
• README updates by @josephschorr in #445
• Allow renovatebot by @ecordell in #460
• bump gofumpt to 1.3.0 and fix new formatting issues by @ecordell in #462
• Configure Renovate by @renovate in #459
• Update renovate.json by @ecordell in #466
• Add warnings for namespaces definitions using v0-only constructs by @josephschorr in #461
• lookup: fall back to a slow path (list all + check) when necessary by @ecordell in #471
• Remove Clone call on metadata filtering on namespaces by @josephschorr in #468
• Add test for writing empty schemas by @josephschorr in #473
• Add trace log for auth interceptor used by @josephschorr in #474
• Have the check warning only apply to relations, not permissions by @josephschorr in #475

New Contributors

• @vroldanbet made their first contribution in #383
• @renovate made their first contribution in #459

Full Changelog: v1.4.0...v1.5.0

Docker Images

This release is available at quay.io/authzed/spicedb:v1.5.0 and ghcr.io/authzed/spicedb:v1.5.0