v0.18.0

What's Changed

• fix(http): retry conflicting GraphQL mutations by @iverc in #1280
• fix(ffi): close major Go compatibility gaps by @iverc in #1261
• fix(db): preserve stale update conflict type by @iverc in #1290
• perf(index): shard full-text corpus statistics by @iverc in #1283
• feat: Integrate PR train by @iverc in #1284
• chore(ci): update Go compatibility baseline by @iverc in #1304
• chore(embedded): make SourceHub support opt-in by @iverc in #1303
• bench: add block, CRDT, DAG merge, HTTP, and P2P benchmarks with a Go wire-format parity gate by @edjroz in #1301
• fix(defra-version): re-run build script when git HEAD moves by @edjroz in #1312
• fix(db-merge): iterative doc-identity ancestry walk — deep DAGs overflowed small stacks by @noahsaso in #1316
• fix(db-merge): retry rate-limited replay nacks with backoff instead of abandoning the document by @noahsaso in #1317
• chore: Update CLAUDE.md by @edjroz in #1322
• perf: Make LIMIT n cost n, not the collection by @edjroz in #1311
• fix(crypto): derive block encryption from the DAG instead of a process-global store by @edjroz in #1313
• ci: parallelize studio jobs via host pinning + cancel superseded PR runs by @jackzampolin in #1324
• ci: cancel superseded main runs and PR CI on close by @jackzampolin in #1350
• fix(ci): create $CACHE_DIR before the cache-miss branch writes into it by @vertexclique in #1360
• fix(p2p): drain pending-DAG sweeps on shutdown so the store unlocks by @vertexclique in #1357
• fix(p2p): report failed and timed-out document syncs instead of returning Ok by @edjroz in #1314
• Patch Wasmtime and ruint security advisories by @jackzampolin in #1320
• fix(db): make branchable mutation provenance atomic by @iverc in #1354
• build: add a documented justfile with a no-sudo setup target by @vertexclique in #1358
• fix(wasm): use web-time so opening a transaction does not panic in the browser by @vertexclique in #1362
• fix(storage): mark OPFS files dirty on write, not only on open by @vertexclique in #1363
• ci: run the wasm test suite in a headless browser by @vertexclique in #1364
• fix(embedded): track the libp2p host task so shutdown releases the store by @vertexclique in #1370
• ci: add cargo-machete gate and drop dead db reqwest by @edjroz in #1368
• refactor: replace serde_cbor with ciborium across the workspace by @vertexclique in #1372
• fix(document): unify NormalValue::Bytes JSON as lowercase hex by @edjroz in #1366
• Run embedded queries with signed node provenance by @jackzampolin in #1373
• fix(query): test REST GraphQL escaper against production with JSON string rules by @edjroz in #1367
• ci: simplify repository auth and restore fast macOS tests by @jackzampolin in #1374
• fix(storage): HeadstoreDocKey::parse — harden binary short-id decoding by @edjroz in #1371
• perf(wasm): remove Tokio from dependency graph by @iverc in #1375
• fix(release): pin SourceHub dependency to reachable revision by @jackzampolin in #1379

New Contributors

• @edjroz made their first contribution in #1301
• @vertexclique made their first contribution in #1360

Full Changelog: v0.17.4...v0.18.0