Release 2.2

Bug fix:

• •

  Fixed Live Queries document issue

Security advisories:

• •

  Unauthorized Data Exposure via LIVE Query Subscriptions

Bug fixes:

• •

  Ensure session variables are attached to DEFINE API execution context

• •

  The standard index should not fail if a value already exists

Bug fixes:

• •

  TIKV client update to 0.3.0-surreal.3

• •

  Implements DNS resolution on Context::check_allowed_net

Workflow improvements:

• •

  Added support for log files, json log format, and advanced log span filtering

• •

  Improved metrics consistency

• •

  Added support for Docker container timezone customisation

• •

  Ensured errors are caught when checking permissions for LQ

• •

  Ensured NS/DB is set; Ensure transaction is committed or cancelled

Security advisories:

• •

  Bypass of deny-net flags via DNS resolution

Workflow improvements:

• •

  Improved metrics consistency

• •

  Reject resolution of IP addresses resolving to denied IP address when doing HTTP request

Workflow improvements:

• •

  Improved import memory usage

• •

  Context cancellation check in prepare mock

• •

  Changed default RocksDB configuration options

Bug fixes:

• •

  Fixed escape issue on index specification

• •

  [Fixed invalid "*" value for SURREAL_CAPS_ALLOW_ARBITRARY_QUERY | ALLOW_EXPERIMENTAL](https://github.com/surrealdb/surrealdb/pull/5890)

• •

  Fixed select broken with index on count / where

Bug fixes:

• •

  Check limit to string::replace with regular expressions

• •

  Fixes long running FOR loops, adds script timeouts, improves HTTP redirect security, and optimises task yielding for better performance

• •

  Implements SURREAL_FILE_ALLOWLIST

• •

  Improve error handling on value conversion (RPC / HTTP/SQL endpoint) (#5647)

• •

  Introduces Regex size limit configuration (#5638)

• •

  Backport Allocation tracking - 2.2.x (#5662)

• •

  Add memory limit threshold check to all statements (#5704) (#5736)

• •

  Add deal-store datasets to the upgrade test (#5738)

• •

  Update branch name and pin Rust version for clippy and tests (#5768)

Security Advisories:

• •

  Uncaught exception in Net module leads to database crash

• •

  Server-takeover via SurrealQL injection on backup import

• •

  Memory exhaustion via nested functions and scripts

• •

  Local file read of 2-column TSV files via analyzers

• •

  Memory exhaustion via string::replace using regex

• •

  No JavaScript script function default timeout could facilitate DoS

• •

  CPU exhaustion via custom functions result in total DoS

• •

  Bypass of deny-net flags via redirect results in SSRF

Features:

• •

  Allowed configuring experimental features in Rust SDK and CLI

• •

  Introduced CLI Export customisation

Bug fixes:

• •

  Ensured idiom fetching uses the LQ context

• •

  Refactored capabilities to reduce allocations

• •

  Ensured crates integrity

• •

  Improved DEFINE API implementation

• •

  Fixed DEFINE API stored key

• •

  Improved array::fill

• •

  Ensured NONE values are maintained in arrays

Features:

• •

  Added shortest path queries

• •

  Added support for graph clauses

• •

  Added object::is_empty() function

• •

  Added variable support for shortest path queries

• •

  Added support of keys only logic with index iterators

• •

  Added SURREAL_COUNT_BATCH_SIZE env variable

• •

  Added type::is::range() method and idiom .is_range() method

• •

  Added support for memory threshold limits

• •

  Added environment variables to disable tracing and metrics

• •

  Added support for datetimes for rand::time function

• •

  Added support of compound indexes on AND queries

• •

  Enabled allocation tracking

• •

  Added DEFAULT ALWAYS clause

• •

  Implemented FETCH for live queries

Bug fixes:

• •

  Fixed Index is corrupted - TreeNode out of bounds

• •

  Enabled ANSI code support on Windows

• •

  Fixed (-$param) failed bug in Parser

• •

  Fixed index_hnsw bench

• •

  Allowed escape characters inside mathematical angle bracket escaped idents

• •

  Fixed allocator on Windows

• •

  Fixed parse buffer not properly growing

• •

  Reintroduced id selection behaviour

• •

  Fixed design for live queries cache

• •

  Fixed array::transpose() not adding NONE at non-existent indexes when transposing arrays of varying length

• •

  Fixed concurrent index creation with overwrite

• •

  Ensure INSERT IGNORE does not throw error

Optimisations:

• •

  Introduced language testing suite

• •

  Added cross-transaction caching to database and table statements

• •

  Disallow mismatched field types

• •

  Skip processing documents when START is specified

• •

  Added minor optimisations for SELECT count() FROM table GROUP ALL queries

• •

  Implemented priority queue for queries with ORDER and LIMIT

• •

  Improved error messages for HTTP database functions

• •

  Reworked query streaming and error reporting

• •

  Disabled PARALLEL option

• •

  Added file URL handling and tests for store initialisation

• •

  Added default limit for max open files with rocksdb storage engine

• •

  Removed -log trace from Docker instructions

• •

  Increased Rust memory allocation, parallelism information and RocksDB block cache size

• •

  Added initial support for improved retryable transaction errors

• •

  Simplified field processing logic

• •

  Optimised transaction multi-get function interface

• •

  Optimised RocksDB key-value gets

• •

  Added stdout and stderr log splitting

• •

  Added tests for other SDKs in CI

• •

  Moved all experimental features to experimental capabilities

• •

  Streamlined FoundationDB features

• •

  Improved RocksDB block cache configuration

• •

  Remove naive concurrency rate limiter in WebSocket

• •

  Added dedicated threadpool for storage engine operations

• •

  Skip strategy down to scanner for START queries

• •

  Allow chaining path operations

• •

  Implement support for RPC protocol versioning

• •

  Switch to tokio::mpsc from async_channel in WebSocket

• •

  Allow configurable background flush syncing

SurrealKV:

• •

  Expose surrealkv config options as env variable

• •

  Enable data durability configuration on RocksDB and SurrealKV

Workflow improvements:

• •

  Fixed nightly version prefix

• •

  Added Tx::count(), Tr::count(), and kvs::count() methods

• •

  Fixed make check and cargo make ci-check-wasm commands

• •

  Made all count/group use transaction::count method

• •

  Documented core as internal only and remove doc(hidden)

• •

  Added support for minimum number of tokio worker threads

• •

  Removed development panic backtrace on transaction drop

• •

  Fixed clippy warnings

• •

  Added Compute args for idiom methods

• •

  Ensured Windows builds have a default allocator

• •

  Optimised Options and Auth core engine internals

• •

  Added error logging for make sql and make repl

• •

  Added Goodbye message to terminal before exiting

• •

  Improved Issue templates

• •

  Fixed GitHub issue labeling

Experimental:

• •

  Changed bearer key storage and verification to only use hashes

• •

  Implement refresh tokens for record users

• •

  Added functions to GraphQL

• •

  Added Record references to GraphQL

Breaking changes:

• •

  array::transpose() now adds NONE at non-existent indexes when arrays vary in length.