v0.2.6

What's Changed

What's Changed

• fix(logging): omit credentials from database startup URLs by @doctorvk in #2142
• fix(fhirpath): quantity = is empty for non-commensurable units; declare exponent boundary cases by @smunini in #2174
• ci: stop the cleanup job reaping Extended CI's live containers by @smunini in #2138
• fix(security): keep secrets out of logs, --help, errors and Debug output by @smunini in #2150
• perf(mongodb): stage transaction Bundle creates and send them in chunks by @dougc95 in #2144
• perf(rest): stream json, csv and fhir outputs of $sql-run for ViewDefinition subjects by @eterceros in #2162
• perf(sof): cast SQLite resources.data to TEXT before json_* calls by @eterceros in #2163
• perf(sof): use split_part for PostgreSQL getReferenceKey tail extraction by @eterceros in #2164
• fix(deps): bump rustls-webpki, webpki-roots and neo4rs to clear RustSec advisories by @eterceros in #2191
• perf(sof): SQLite truthy_predicate evaluates the filter expression once by @eterceros in #2165
• perf(sof): feed SQL View node tables lazily from the owned QueryResult by @eterceros in #2166
• perf(export): encode view export text shards as rows arrive by @eterceros in #2167
• perf(rest): trim freed heap after SQL Query $sql-run and export jobs by @eterceros in #2168
• perf(sof): batch rows over the runner channel and coalesce ndjson chunks by @eterceros in #2169
• perf(persistence): bind repeated operands with $let in the MongoDB emitter by @eterceros in #2170
• ci: derive DOCKER_HOST_IP from DOCKER_HOST, drop the secret by @smunini in #2190
• fix(sof): keep each unionAll branch's column type instead of guessing (#1947) by @mauripunzueta in #2183
• fix(observability): bound the dashboard snapshot cache (#2186) by @smunini in #2187
• perf(sof): bound the MongoDB SoF cursor batch size and decode rows from raw BSON by @eterceros in #2172
• ci(fhirpath): list the 25 upstream isSemanticChecks tests as known failures by @eterceros in #2196
• perf(persistence/pg): drop pre-LIMIT live-resource EXISTS from the fast-path page by @eterceros in #2199
• perf(persistence/pg): add idx_search_date_recent_end (schema v49 -> v50) by @eterceros in #2201
• perf(elasticsearch): bound and back off the contained-document sweep so a write burst stops causing a retry storm by @eterceros in #2203
• perf(persistence/pg): cache that no search row has a NULL last_updated, so newest-first date searches skip the eligibility probe by @eterceros in #2205
• perf(postgres): optional short TTL for the SearchParameter overlay fingerprint probe on writes by @eterceros in #2210
• ci(bench): name the load rows after the product, always list crud/search, record who holds the memory by @eterceros in #2215
• fix(hts): keep public terminology IDs and instance operations consistent by @doctorvk in #2175
• fix(mongodb): share index access and delay sparse-page fallback by @doctorvk in #2198
• Fix/2137 hts create semanticsfix(hts): assign POST IDs and support create through PUT by @doctorvk in #2176
• fingerprint invalidates stale missing_params by @bomanaps in #2181
• chore(pysof): remove stale, unused crates/pysof/Cargo.lock by @eterceros in #2193
• fix(persistence/mongodb): set missing_fp in the bundle_creates test fixture by @smunini in #2229
• feat(sof): persist SQL query ValueSet/ConceptMap dependencies on PostgreSQL, MongoDB, S3 and composites by @mauripunzueta in #2188
• perf(mongodb): drive missing-metadata counts from a selective positive filter by @mauripunzueta in #2206
• fix(fhirpath): pass new upstream fhir-test-cases from 2026-10-23 by @smunini in #2230
• perf(mongodb): skip unchanged missing_params writes on $reindex (#2005) by @mauripunzueta in #2207
• feat(docker/auth0): Helios login branding for Auth0 Universal Login by @mauripunzueta in #2218
• fix(mongodb): repair main's Mongo tests, pin testcontainers to mongo:7.0, retry catalog-change aborts by @smunini in #2231
• fix(security): clear RUSTSEC-2026-0385/0387 from the audit job by @smunini in #2232
• perf(mongodb): measure missing_params cost; HFS_MONGODB_MISSING_METADATA opt-out (#2006) by @mauripunzueta in #2209
• feat(reindex): metadata-only mode to backfill MongoDB missing_params (#2008) by @mauripunzueta in #2213
• perf(mongodb): classify metadata-backed :missing parameters once per query by @mauripunzueta in #2211
• perf(persistence/sqlite): covering search indexes and bounded first-page probe (schema v41 -> v46) by @eterceros in #2214
• perf(persistence/postgres): cap default pools to a shared half of the server's max_connections by @eterceros in #2217
• fix(fhirpath): return empty for memberOf() and %terminologies on empty input by @mauripunzueta in #2221
• fix(s3): stop the _type export pre-pass reading every object sequentially (#2140) by @mauripunzueta in #2224
• fix(bulk-submit): resume deferred reindex after restart on PostgreSQL and MongoDB by @mauripunzueta in #2219
• fix(sqlite): serialize restore_deleted and retry lost PUT races (#2111) by @mauripunzueta in #2223
• ci: raise Test Rust job timeout to 180 minutes [skip ci] by @smunini in #2238
• missing=true in conditional criteria by @bomanaps in #2236
• fix(audit): bounded write queue, transient retry and loss metrics (#2234) by @smunini in #2237
• fix(persistence): batch the async composite sync worker, one send per write (#1545, step a) by @mauripunzueta in #2220
• fix(postgres): restore index-only composite search after #1886 (#1952) by @mauripunzueta in #2222
• test(subscriptions): fix tracing-interest flake in observer_ingress_sheds test (#2235) by @smunini in #2239

Full Changelog: v0.2.5...v0.2.6