Repository navigation
nightly
Pre-release
Pre-release
Changelog
New Features
- 05c28fb feat(api): EN-2825 make bigint encoding type-based (#2331)
- 96c748b feat(auth)!: align granular scope names with action-resource order (#2310)
- d8a1a23 feat(ledger): add operator-controlled drain barrier (#2428)
- d5c288b feat(ledger): add snapshot donor fallback (#2379)
- 0172709 feat(numscript): expose read-only source analysis (#2390)
- 34ab25b feat(operator): enforce adjacent RC upgrades (#2338)
Bug fixes
- b5712c1 Revert "fix(cluster): preserve uint64 node identities (EN-2904) (#2250)" (#2340)
- 26bafb8 fix(analysis): count distinct overflowed segment values once (#2271)
- 387a6ed fix(antithesis): make insufficient-funds probe retry-safe (#2395)
- 2a97806 fix(antithesis): require durable restore completion (#2386)
- 103ed05 fix(api): keep caller attribution failures internal (#2352)
- 4ecc53e fix(attributes): reject key tag collisions before cache publication (#2319)
- 56168ae fix(auth): accept granular scopes covered by an Ed25519 key's allowlist (EN-2949) (#2257)
- edf0484 fix(auth): reject duplicate Ed25519 key IDs (EN-2918) (#2294)
- 9545c96 fix(auth): stop forwarding auth-disabled caller snapshots (#2324)
- b5c2b75 fix(backup): reject manifest-inconsistent export segments (EN-1846) (#2373)
- 21de4a3 fix(bootstrap): confine checkpoint downloads to staging (#2314)
- 9a4bb29 fix(bootstrap): retain node ownership after stop timeout (#2285)
- 3ba93fd fix(cache): EN-3027 wait for commit before rotation (#2345)
- 0ff1570 fix(checker): EN-2968 verify ledger policy projections (#2332)
- df1a7b9 fix(checker): EN-2971 report malformed projection keys (#2322)
- 24d447d fix(checker): disable WAL for temporary audit replay (#2388)
- 1390556 fix(ci): pull MinIO from the Formance ghcr mirror (#2302)
- 1b7810e fix(cli): EN-2841 verify mutation response signatures (#2408)
- f191021 fix(cluster): EN-2904 preserve uint64 node identities (#2341)
- 8b7ede4 fix(cluster): preserve uint64 node identities (EN-2904) (#2250)
- f941f5f fix(config): reject overflowing byte sizes (EN-2924) (#2287)
- ee3474a fix(events): omit removed sinks from sink statuses (EN-2938) (#2263)
- 846c8f8 fix(events): scope sink construction to leadership (EN-2921) (#2286)
- 424c586 fix(events): stop following HTTP sink redirects (EN-2917) (#2254)
- 26fb8ad fix(grpcprotocol): freeze service protocol revision at 40 during RC (#2298)
- 4357c0d fix(health): reject invalid polling intervals (EN-2922) (#2293)
- c9d745d fix(http): EN-3103 classify bulk element errors like single requests (#2346)
- ccb75c9 fix(http): decode account address and name path segments once (EN-2914) (#2253)
- 4f23c70 fix(http): reject mistyped revert options (EN-2936) (#2258)
- f73e3b7 fix(http): reject null bulk elements with 400 (#2295)
- e6a750f fix(http): reject unknown ledger mode on create (EN-2934) (#2264)
- 6c120c4 fix(http): reject unknown query parameters (EN-3040) (#2398)
- fe10ff6 fix(indexes): report read index disk usage in IndexFileSize (#2325)
- 29b5ec9 fix(ledger): align gRPC retry attempts with election budget
- 351f057 fix(ledger): derive Bloom lifecycle from committed cluster config (#2374)
- 43a2653 fix(ledger): preserve Databricks global sequence range (#2426)
- 3d73377 fix(ledgerctl): EN-3043 show batch signature in audit output (#2353)
- c10abf4 fix(ledgerctl): bind verified response signatures to visible logs (#2377)
- 8beb725 fix(ledgerctl): follow the cursor in queries execute --all (#2252)
- c8cac44 fix(ledgerctl): isolate subcommand environment flags
- dc3e4a8 fix(ledgerctl): reject prompts when stdin is not a terminal (#2396)
- 32583e6 fix(mirror): preserve out-of-order PostgreSQL source commits (#2316)
- 1feb41f fix(node): EN-3028 preserve historical removal barriers (#2362)
- 33aa836 fix(node): elect and resync when the newest logs are out of sync (EN-2967) (#2301)
- 5d26d01 fix(node): join leader-ready callbacks on shutdown (EN-2920) (#2291)
- 617b1dc fix(node): preserve WAL suffix on snapshot Ready (#2381)
- 07544ff fix(operator): EN-2976 retry completed backup result reads (#2326)
- fa9db81 fix(operator): make ledger targets immutable (#2315)
- 4d15e72 fix(operator): resume PVC cleanup after persisted scale-down (#2424)
- 5737334 fix(operator): retain TLS certificates during disable rollouts (#2305)
- bdc7d76 fix(query): cap prepared-query list pages (EN-2906) (#2249)
- 99efcf4 fix(readstore): cap index inspection page size (EN-2946) (#2273)
- 2a38da7 fix(restore): verify checkpoint object size and sha256 on download (EN-2942) (#2277)
- 4adf67b fix(schemathesis): filter invalid HTTP header values (#2330)
- 7e24b7f fix(server): reject unsupported hash algorithms (EN-2925) (#2292)
- c0e3be0 fix: EN-2960 preserve nested ClickHouse account metadata (#2320)
- 2ec70b6 fix: EN-2970 derive checker boundaries from verified replay (#2409)
- 2c02a11 fix: EN-3161 validate CLI posting amount bounds (#2400)
- ed8870e fix: EN-3162 normalize cache rotation defaults before replication (#2401)
- c7796aa fix: EN-3163 make account metadata failures deterministic (#2399)
- 068e419 fix: EN-3164 prevent ReadIndex context reuse after restart (#2402)
- 3f4acc2 fix: EN-3165 redact HTTP sink credentials in CLI output (#2403)
- 5db45a4 fix: EN-3227 reset offline bootstrap staging (#2420)
- 4aded2b fix: retain membership outcomes across slow WAL persistence (#2380)
Other work
- 8263f5c Add renovate.json (#2284)
- a4fb0d0 build(nix): use the upstream Go 1.27.3 package
- 9cd4252 perf(scripts): inherit TMPDIR so validation test results stay cached (#2246)
- ebb5a53 refactor(antithesis): decouple scenario randomness and driver inputs (#2361)
- 07456e5 refactor(checker): split integrity check into ordered phases (#2237)
- e745536 refactor(cli): remove manual learner promotion command (#2385)
- 10e31dd refactor(cli): remove manual learner registration command (#2378)
- 1268df9 refactor(fsm): clarify proposal apply phases (#2232)
- eca9a60 refactor(indexbuilder): separate processLogs checkpoint and progress phases (#2238)
- 7bb0b74 refactor(state): separate WriteSet merge phases (#2236)
- 487e53a test(antithesis): integrate Hegel and strengthen workload checks (#2356)
- 56846b0 test(antithesis): strengthen sentinel Raft coverage (#2364)
- ce91070 test(membership): run the membership service tests in synctest bubbles (#2415)
- 76f4548 test(restore): cover concurrent finalization ownership (EN-2010) (#2375)
- c503527 test(schemathesis): upgrade to v4 and remove query body override (#2328)
- acc27e6 test(wal): shrink etcd WAL segments in test binaries (#2417)
- 9c7f07e test: EN-2845 guard ledgerctl command contracts (#2432)
- 1576dbd test: run time-dependent unit tests in synctest bubbles (#2405)