Skip to content

Evoke v0.2.6 (Beta 1 Patch)

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Oct 00:38
v0.2.6
60df51f

Evoke 0.2.6 (Beta 1 Patch)

This release fixes #1:
ordinary application roles could search administrator-owned semantic indexes
but could not INSERT or UPDATE indexed text on a cold backend.

Fix

Only the fixed internal model-contract lookup uses the verified administrator
index owner's restricted security context. The caller's identity is restored
on both success and error. Table privileges, RLS, application triggers, and
administrator-only raw model-path APIs retain their existing security boundary.
Applications do not need superuser or extra grants on private Evoke functions.

Packages

  • Linux x86-64 ZIP packages for PostgreSQL 17 and 18, with SHA-256 files.
  • PostgreSQL 18 Linux amd64 Docker image and portable Docker archive.
  • ONNX Runtime 1.29.0 and the frozen Beta 1 default model are unchanged.
docker pull ghcr.io/intelligent-internet/evoke:pg18-v0.2.6

The pg18 and latest container aliases point to the same verified image.
The previous v0.2.5 tag and release assets are not replaced.

Upgrade From Published 0.2.5

Stop PostgreSQL before replacing a loaded Evoke shared library. Install the
complete matching package on the primary and every physical standby, then
restart. As an administrator, run this in each Evoke database on the primary:

ALTER EXTENSION evoke UPDATE TO '0.2.6';

The install catalog is byte-identical to published 0.2.5; this patch update
only advances the extension version. Existing index OIDs, relation files,
function ACLs, and data remain unchanged. No REINDEX is required. Physical
standbys replay the catalog change through WAL; host files must still be
installed separately. Existing Docker volumes are not upgraded by init scripts.

See the upgrade guide.
This path does not apply to experimental catalogs, legacy ii42 packages,
or unsupported physical formats.

Validation

  • Python product regression: 685 passed, 1 platform-dependent skip on macOS.
  • Isolated PostgreSQL 18 upgrade: public and search_ext; unchanged index
    OIDs/relfilenodes, function ACLs, query results, and valid/ready indexes.
  • Freshly built library: ordinary-role semantic-write privilege smoke passed
    in both schemas, including fresh logins and error-path identity restoration.
  • Public release CI validates PostgreSQL 17/18, Docker startup, package
    contents and checksums before publishing and promoting the release.

Full details: Changelog.

Assets 8
Loading