SpiceDB | AuthZed

Features

SpiceDB is the most scalable and consistent Google Zanzibar-inspired database for storing and computing permissions data—use it to build global-scale fine grained authorization services.

Expressive APIs

Expressive gRPC and HTTP/JSON APIs for powering authorization logic in your client applications.

Distributed Graph

Distributed, parallel graph engine faithful to the architecture described in Google’s Zanzibar paper.

Prevents New Enemies

A flexible consistency model configurable per-request that includes resistance to the New Enemy Problem.

Configuration Language

Intuitive authorization configuration language — SpiceDB Schema — with CI/CD integrations for validation & testing.

Pluggable Storage

Support for in-memory, Spanner, CockroachDB, PostgreSQL, and MySQL relationship storage.

Deep Observability

Deep observability with Prometheus metrics, pprof profiles, structured logging, and OpenTelemetry tracing.

Latest Release

SpiceDB v1.43.0

vroldanbet released this 13 days ago

Release Notes

What's Changed

introduces depot runners by @vroldanbet in https://github.com/authzed/spicedb/pull/2297
feat: make build notification links clickable by @Verolop in https://github.com/authzed/spicedb/pull/2303
Bump golang from 1.24.0-alpine3.20 to 1.24.2-alpine3.20 in the docker group by @dependabot in https://github.com/authzed/spicedb/pull/2298
Bump the go-mod group with 26 updates by @dependabot in https://github.com/authzed/spicedb/pull/2299
fixes incorrect handling of definition deltas via Postgres Watch API by @vroldanbet in https://github.com/authzed/spicedb/pull/2305
enable tparallel to keep tests fast by @vroldanbet in https://github.com/authzed/spicedb/pull/2306
Add improved caveat filtering to the datastore relationship filter by @josephschorr in https://github.com/authzed/spicedb/pull/2309
bug-fix(schema): prevent schema write failures when migrating to caveated relation by @kartikaysaxena in https://github.com/authzed/spicedb/pull/2308
Remove panic from devcontext serve in favor of a warning by @josephschorr in https://github.com/authzed/spicedb/pull/2312
fix(memdb): check if closed by @miparnisari in https://github.com/authzed/spicedb/pull/2307
Fix handling of no columns in Spanner by @josephschorr in https://github.com/authzed/spicedb/pull/2319
Update Go to 1.23.8 to fix a reported vuln in Go by @josephschorr in https://github.com/authzed/spicedb/pull/2318
[typesystem] Remove typesystem package by @barakmich in https://github.com/authzed/spicedb/pull/2313
put error checks before accessing return values by @miparnisari in https://github.com/authzed/spicedb/pull/2317
Ensure the Postgres read-write tx uses the TX for the reader by @josephschorr in https://github.com/authzed/spicedb/pull/2321
Improved indexing part 2 by @josephschorr in https://github.com/authzed/spicedb/pull/2310
Add option to disable watch by @josephschorr in https://github.com/authzed/spicedb/pull/2323
Force indexes on Postgres and change subject sort order to match index by @josephschorr in https://github.com/authzed/spicedb/pull/2327
introduces a flag to relax postgres isolation level by @vroldanbet in https://github.com/authzed/spicedb/pull/2324
internal/datastore/pg: server-side loop for repair by @jzelinskie in https://github.com/authzed/spicedb/pull/2322
Force indexes on Spanner and change subject sort order to match index by @josephschorr in https://github.com/authzed/spicedb/pull/2326
postgres: optimize CheckRevision query by @vroldanbet in https://github.com/authzed/spicedb/pull/2328
document packages by @miparnisari in https://github.com/authzed/spicedb/pull/2316
Further optimize the cases when transaction metadata is written in CRDB by @josephschorr in https://github.com/authzed/spicedb/pull/2330
Add logical checks telemetry by @josephschorr in https://github.com/authzed/spicedb/pull/2325
Switch to larger depot instances for datastore consistency tests by @josephschorr in https://github.com/authzed/spicedb/pull/2331
Add a concept of a caveat TypeSet to allow overriding the types available to caveat processing by @josephschorr in https://github.com/authzed/spicedb/pull/2315
Simplify the registration in the caveats typeset by @josephschorr in https://github.com/authzed/spicedb/pull/2335
Add accessors for deserialization of a caveat using a custom typeset by @josephschorr in https://github.com/authzed/spicedb/pull/2336
Bump golang.org/x/net from 0.37.0 to 0.38.0 in the go_modules group by @dependabot in https://github.com/authzed/spicedb/pull/2332
add mutex analyzer by @miparnisari in https://github.com/authzed/spicedb/pull/2334
Bump the go_modules group across 2 directories with 1 update by @dependabot in https://github.com/authzed/spicedb/pull/2337
Fix logger for certmanager by @tstirrat15 in https://github.com/authzed/spicedb/pull/2338
amend mutex analyzer by @miparnisari in https://github.com/authzed/spicedb/pull/2339
amend mutex analyzer by @miparnisari in https://github.com/authzed/spicedb/pull/2340
Change PG and CRDB datastore drivers to use PGX cancelation by @josephschorr in https://github.com/authzed/spicedb/pull/2294
Add retries to MySQL test DB constructor by @josephschorr in https://github.com/authzed/spicedb/pull/2343
Minimal decoupling of validation file parsing and schema compilation by @tstirrat15 in https://github.com/authzed/spicedb/pull/2342
Switch the loader to use the passed-in typeset by @josephschorr in https://github.com/authzed/spicedb/pull/2344
Add missing type set pass, add test and rename all defaults by @josephschorr in https://github.com/authzed/spicedb/pull/2346
remove dependency on github.com/hashicorp/go-multierror by @miparnisari in https://github.com/authzed/spicedb/pull/2345
Fix labels on telemetry metric by @josephschorr in https://github.com/authzed/spicedb/pull/2348
Switch experimental column optimizations to be enabled by default by @josephschorr in https://github.com/authzed/spicedb/pull/2349
Disable test of readonly serve-test, as it is making the test server … by @josephschorr in https://github.com/authzed/spicedb/pull/2350
Use golangci-lint v2 for linting by @tstirrat15 in https://github.com/authzed/spicedb/pull/2301
add security policy by @miparnisari in https://github.com/authzed/spicedb/pull/2352
tighten github workflow scopes by @miparnisari in https://github.com/authzed/spicedb/pull/2353
fix regression in #2353 - add PR write permissions to labeler action by @miparnisari in https://github.com/authzed/spicedb/pull/2355
pin github actions by @miparnisari in https://github.com/authzed/spicedb/pull/2356
pin dockerfile images by @miparnisari in https://github.com/authzed/spicedb/pull/2357
add GCI linter for better organization of imports by @miparnisari in https://github.com/authzed/spicedb/pull/2354
add ssf badge by @miparnisari in https://github.com/authzed/spicedb/pull/2359
fix custom analyzers skipping all files by @miparnisari in https://github.com/authzed/spicedb/pull/2360
fix typo in goreleaser.windows.yml by @miparnisari in https://github.com/authzed/spicedb/pull/2361
Logging and metrics improvements after recent datastore changes by @josephschorr in https://github.com/authzed/spicedb/pull/2362
fix panic when running mage test
by @miparnisari in https://github.com/authzed/spicedb/pull/2363
wires query shape into the datastore QueryRels latency metric by @vroldanbet in https://github.com/authzed/spicedb/pull/2364
Allow schema watch in CRDB driver when watch is otherwise disabled by @josephschorr in https://github.com/authzed/spicedb/pull/2365
make consistency middleware return invalid revision error as gRPC InvalidArgument by @vroldanbet in https://github.com/authzed/spicedb/pull/2366
add query shape and fix observe closer in ReverseQueryRelationships by @vroldanbet in https://github.com/authzed/spicedb/pull/2367
postgres datastore: do not warn on context cancelation by @vroldanbet in https://github.com/authzed/spicedb/pull/2368
Set pgx CancelRequestContextWatcherHandler.CancelRequestDelay to fixcancelation delay by @vroldanbet in https://github.com/authzed/spicedb/pull/2369
Improve CRDB index forcing logic to be more fine-grain by @josephschorr in https://github.com/authzed/spicedb/pull/2376