v0.2.0

Upgrading from v0.1.0

Please upgrade. This release includes security fixes. In v0.1.0, anyone who could upload a file could upload HTML that ran on your app's origin when opened. If an admin opened it from the dashboard, it could read the admin key. See #11 and #20 for the full list.

To upgrade: back up your data, replace the binary and restart. We tested this on a SQLite database made by v0.1.0: its documents, files and scheduled jobs all carried over. Upgrades on Postgres, MySQL and libSQL haven't been tested.

SQLite: one optional step. Your database keeps working as it is, but it won't use the new documents layout, or give space from deleted documents back to the disk, until you vacuum it once. Stop the server first. Vacuuming needs about as much free disk as your data takes up.

onebase vacuum --data ./onebase_data

onebase doctor tells you when it's worth running.

Behavior that's now stricter:

• A v.id("table") function argument now refuses an id from a different table.
• paginate() needs numItems to be a whole number of 0 or more. Larger pages are cut to 8192 documents with isDone: false, so keep paging until isDone is true.
• Uploaded files other than images, audio, video, PDFs and plain text now download instead of displaying in the browser.

What's Changed

• Add full-text search and optimistic updates; fix an auth race by @abdullah-bl in #2
• Limit concurrent libSQL transactions and retry HTTP 429 by @abdullah-bl in #4
• Fix frozen reads in dev mode; index subscriptions by what they read by @abdullah-bl in #1
• Add built-in auth: passwords, OAuth, sessions, email codes by @abdullah-bl in #3
• Add onebase deploy and .env file support by @abdullah-bl in #5
• Offline support for the JS client, and a Swift client for iOS/macOS by @abdullah-bl in #7
• Close the auth and deploy gaps left by the first review by @abdullah-bl in #6
• Site: brand as OneBase in the topbar and page titles by @abdullah-bl in #8
• Swift: per-user queued mutations; faster eq + range queries by @abdullah-bl in #9
• Add a Dockerfile and docker-compose.yml by @abdullah-bl in #10
• Fix four security issues from the audit by @abdullah-bl in #11
• Add vector search and a MySQL 8 driver by @abdullah-bl in #12
• Build and test on Bun 1.4.4 by @abdullah-bl in #13
• Add components and a rate limiter component by @abdullah-bl in #14
• Land table hooks, aggregate, component platform and work queue on main by @abdullah-bl in #18
• Add a convex-to-onebase migration skill and table-first ctx.db calls by @abdullah-bl in #19
• Fix the high and medium findings from the security audit by @abdullah-bl in #20
• SQLite group commit, space reclaiming, and function time limits by @abdullah-bl in #21
• Perf/sqlite group commit http by @abdullah-bl in #22
• Publish the Convex comparison, add skills, and move the Swift client out by @abdullah-bl in #23
• Cache repeated query results and fix two stale live-query bugs by @abdullah-bl in #24
• Publish the Convex comparison scripts by @abdullah-bl in #25
• Store documents in a rowid table by @abdullah-bl in #26
• Redesign the dashboard around what needs attention by @abdullah-bl in #27
• Make the group commit HTTP test independent of fetch timing by @abdullah-bl in #28
• Stop onebase dev restarting in a loop on its own database writes by @abdullah-bl in #29
• Add a migrations component by @abdullah-bl in #30
• Add a workflow component by @abdullah-bl in #32
• Add a RAG component by @abdullah-bl in #33
• Add an agent component by @abdullah-bl in #34
• Add presence and action-cache components by @abdullah-bl in #35
• Move example/ to examples/ and add five feature examples by @abdullah-bl in #31
• Fix the smaller issues from the component review by @abdullah-bl in #36
• Bump the version to 0.2.0 by @abdullah-bl in #37

Full Changelog: v0.1.0...v0.2.0