v1.4.0

Highlights

Warning
This change includes a security fix for a vulnerability introduced in v1.3.0. All users of v1.3.0 should update to this version.
See the security advisory for more information.

Changelog

Full Changelog: v1.3.0...v1.4.0

• Fixes for security advisory: 15bba2e
• Fix formatting by @josephschorr in #374
• Fix linter for many packages by @jzelinskie in #352
• Report CLI configurations errors to RunE by @bryanhuhta in #351
• Update to the latest branched version of ristretto by @josephschorr in #354

What's Changed

• balancer: protect rand source with a mutex by @ecordell in #353
• bump authzed-go to 0.4.1 by @ecordell in #371
• bump dependencies by @ecordell in #364
• bump dependencies by @ecordell in #368
• crdb: touch overlap key on namespace write by @ecordell in #357
• e2e: fill schema with many namespaces to span ranges by @ecordell in #349
• fix head command: flag named inconsistently by @ecordell in #369
• pkg/testutil: ensure types in RequireEqualEmptyNil by @jzelinskie in #355

Docker Images

This release is available at quay.io/authzed/spicedb:v1.4.0 and ghcr.io/authzed/spicedb:v1.4.0