Skip to content

[7.0.0]

Choose a tag to compare

@atripathi-aerospike atripathi-aerospike released this 30 Sep 19:42
· 7 commits to master since this release
85099cb

Release Date: September 30, 2026

Known issue: npm install aerospike@7.0.0 tries to compile the native addon from source and fails because nan is not installed. The published 7.0.0 tarball included binding.gyp. Install 7.0.1 instead (npm install aerospike@7.0.1). Workaround: npm install aerospike@7.0.0 --ignore-scripts. The @aerospike/prebuild-* packages stay at 7.0.0. See the 7.0.1 release notes.

See Incompatible API Changes for details about breaking changes.

String operations, extended error details, and indexDataType.INTEGER require Aerospike Server 8.2.0+.

Breaking Changes

  • CVE-2026-63662: C client 7.6.1 bounds-checks msgpack deserialization and rejects nested list/map (CDT) values deeper than 64 (MSGPACK_MAX_DEPTH). This matches the server stored-value bound. Reads and writes of deeper nesting now fail instead of unpacking. [AER-6957]
  • Platform-scoped native prebuilds ship as @aerospike/prebuild-{platform}-{arch} optional dependencies. The main aerospike package no longer bundles all prebuilds. Native load uses platform-keyed resolution (optional prebuild package or local prebuilds/). [CLIENT-5213]
  • Aerospike.indexDataType.NUMERIC is deprecated. Use Aerospike.indexDataType.INTEGER for integer secondary indexes on server 8.2.0+. [CLIENT-4358]

New Features

  • Add support for string operations (aerospike/strings) and string expressions (exp.string) for Aerospike Server 8.2.0+: length, substring, find/contains, case, trim/pad, regex, base64, conversions, append / prepend, snip / snipStart, and related helpers. [CLIENT-5375]
  • Add list join / joinSeparator and bitwise b64Encode / b64EncodeFrom / b64EncodeRange (and matching expressions). [CLIENT-5375]
  • Improve error actionability: AerospikeError.subcode, BasePolicy.errorDetailVerbosity, plus Aerospike.errorDetailVerbosity and Aerospike.subcode modules (Aerospike Server 8.2.0+).
  • Add Aerospike.indexDataType.INTEGER for integer secondary indexes (server 8.2.0+). Client#createIntegerIndex and Client#createExpIntegerIndex now use INTEGER. [CLIENT-4358]

Improvements

  • Bump aerospike-client-c to stage @ 8f997f9c (7.6.2; includes 7.6.1 string ops / extended errors, CLIENT-5378, CLIENT-5454, AER-6957, CLIENT-5495 TLS conn-recover leak on cluster teardown).
  • Export strings.writeFlags.UPDATE_ONLY for string modify operations.

Bug Fixes

  • Address CVE-2026-63662: reject overly nested CDT msgpack instead of unpacking uninitialized / unbounded data. [AER-6957]
  • Fix TLS connection-recover leak on cluster teardown (C client 7.6.2). [CLIENT-5495]

Full Changelog: v6.7.1...v7.0.0