Graphus v0.0.3

Graphus v0.0.3

Version: 0.0.3
Date: 2026-06-30
Tag: v0.0.3

Summary

Graphus v0.0.3 is a small, focused release of Graphus, the Label Property Graph (LPG)
database server written in Rust for extreme load and concurrency. It contains 8 changes
since v0.0.2 and introduces no breaking changes: the public
Cypher, Bolt, and REST contracts are unchanged, so v0.0.3 is a drop-in upgrade from
v0.0.2.

The theme of this release is client access and distribution — making Graphus easier to
reach, learn, and deploy: a REST login endpoint that issues Bearer tokens, first-class
usage documentation with runnable Go client examples for all three interfaces, and official
Docker Hub image publishing with conformant :latest + :vX.Y.Z tags.

Throughout, the four inviolable guarantees held:

• 100% ACID — full transactional reliability under power loss, faults, and crashes.
• 100% openCypher TCK — 3914 / 3914 scenarios passing.
• 100% Bolt protocol — byte-for-byte interoperability with the Neo4j driver ecosystem.
• 100% PackStream — exact wire-level serialization.

Highlights

• POST /auth/login REST endpoint. Exchange a username + password for a short-lived
  HS256 Bearer JWT, so the authenticated REST WebAPI is usable from any HTTP client without
  distributing the server's jwt_secret. Credentials are verified with Argon2 (the same
  path as Bolt LOGON); failed attempts are rate-limited per account, and unknown-user and
  wrong-password failures return an identical 401.
• Usage documentation + Go client examples. New guides under docs/ cover
  getting started, the REST WebAPI, Bolt over TCP/UDS, security and RBAC, and every
  configuration key. Runnable Go client programs under
  examples/clients-go/ demonstrate all three interfaces: REST,
  Bolt-over-TCP via the official Neo4j Go driver, and Bolt-over-UDS via a dependency-free
  raw client.
• Official Docker Hub image publishing. A new GitHub Actions workflow
  (.github/workflows/dockerhub.yml) builds the multi-architecture (linux/amd64 +
  linux/arm64) image and publishes it to Docker Hub — alongside the existing GHCR
  workflow — on a published GitHub Release or a manual dispatch. Every publish carries
  conformant tags only: :latest plus a :vX.Y.Z version, never a commit-sha or
  branch tag. A community-standard repository overview ships in
  docker/dockerhub-overview.md.
• CI action modernization. All GitHub Actions across ci.yml, docker.yml, and
  nightly-fuzz.yml were bumped to their latest major versions (Node 24 runtimes),
  keeping the pipeline on maintained, security-patched actions.

Added

• POST /auth/login REST endpoint (username + password → short-lived HS256 Bearer JWT),
  with per-account rate limiting and uniform 401 on failure.
• Usage documentation under docs/ (getting started, REST WebAPI, Bolt over TCP/UDS,
  security and RBAC, configuration).
• Go client examples under examples/clients-go/ for REST, Bolt-over-TCP (official Neo4j
  Go driver), and Bolt-over-UDS (dependency-free raw client).
• Docker Hub image publishing workflow with conformant :latest + :vX.Y.Z tagging, plus
  a Docker Hub repository overview document.

Changed

• All CI GitHub Actions updated to their latest major versions across ci.yml,
  docker.yml, and nightly-fuzz.yml.

Compatibility

v0.0.3 is a drop-in upgrade from v0.0.2 — no public Cypher, Bolt, or REST API contract
changed. The four inviolable guarantees (ACID, openCypher TCK, Bolt, PackStream) remain at
100%.

Upgrading

# Docker Hub (multi-arch: linux/amd64 + linux/arm64)
docker pull flaviocfo/graphus:v0.0.3             # or :latest

See docs/getting-started.md for first-run instructions and
the docker/dockerhub-overview.md overview for the full
container usage reference.