This release cycle focuses on SpiceDB correctness and operability: case-sensitive identifiers on MySQL, more reliable Watch checkpoints, and a security fix for permission checks that use caveats.
Under concurrent load, some permission checks on schemas that combine caveats with intersections (&) or exclusions (-) could return a full permission when the correct answer was a conditional one. See GHSA-4vrg-r928-h5vv to check whether your schema is affected. We recommend upgrading.
On MySQL, object and subject IDs are now case-sensitive, matching every other SpiceDB datastore. Previously, IDs that differed only in letter case (for example, Foo and foo) could collide.
Upgrade note: this migration rebuilds the relationships table and can lock it for a long time on large datasets. Run the upgrade in a low-traffic window, or apply it with an online schema-change tool.
zed backup create now supports streaming to stdout. When no path is given, the backup is written to the current directory and the saved path is printed.