Changelog

Complete version history and release notes for Geode graph database.

Current Status (February 2026)

Version: v0.1.3+ (Production Ready)

Geode has achieved production-ready status with comprehensive compliance and testing:

  • ✅ 95.9% Test Coverage (3395/3540 tests passing)
  • ✅ 100% GQL compliance (see conformance profile)
  • ✅ 1,735 CANARY Markers tracking 2,190+ requirements (81.4% tested)
  • ✅ Enterprise Features complete (TDE, audit, vector search, cloud backup, enhanced RLS)
  • ✅ All Development Phases complete (Phases 2-7)

Version History

[v0.1.3-patch] - February 2026

Status: Patch release - Critical bug fixes, security remediation, and stability improvements

This patch addresses thread safety, memory safety, and platform-specific issues discovered during production hardening across Geode core, client libraries, and test infrastructure.

Bug Fixes

Thread Safety & Concurrency:

  • Fixed non-thread-safe PRNG in generateTimeBasedId that was accessed concurrently, causing data races and duplicate node IDs
  • Relaxed flaky graph persistence test assertion caused by race conditions in shared global singletons during concurrent execution
  • Updated grpc-zig dependency to support concurrent connections, preventing “Connection reset by peer” errors with thread-per-connection fix

Memory Safety:

  • Fixed double-free in protobuf DecimalValue serialization where both coeff and orig_repr pointed to the same memory
  • Fixed segfault from dangling self-referential pointer in InitContext (GAP-0426) — stack copy invalidated self-referential pointer causing segfault after ~10 queries
  • Resolved CLI memory leaks, type conversion gaps, and test runner float comparison — ArenaAllocator for JSON, RealLit/DoubleLit eval, tolerance-based numeric comparison (test results improved from 82.9% to 95.5%)

Platform-Specific:

  • Fixed gRPC segfault on aarch64 under rapid sequential writes (#479) with write-all I/O wrappers for TLS and plaintext connections
  • Fixed segfault on aarch64 by skipping SSL_shutdown in sslClose when peer disconnects abruptly

CI & Testing:

  • Resolved CI GQL compliance timeouts and flaky unit test — increased CLI query timeout from 10s to 30s, reduced QUIC poll interval
  • Excluded vendored zig packages from feature flag check and modernized typing
Security
  • Removed .env file containing hardcoded plaintext credentials and applied gap analysis remediations
Infrastructure
  • Pre-populated Zig package cache for Docker builds to enable reproducible builds without network-dependent git fetching
Client Libraries

Python Client (v0.3.19):

  • Added read_next() to GrpcTransport for multi-message streaming — gRPC queries previously returned empty rows because only the first message was read
  • Fixed certificate CN preference over config server_name for skip_verify override — self-signed cert CN now takes priority
  • Extracted cert CN for gRPC ssl_target_name_override — hostname override must match certificate’s CN
Testing
  • Increased GQL compliance spec timeout to 30s for CI environments
  • Added geodetestlab spec for rapid sequential writes regression (#479) — 29 tests covering bulk MERGE/CREATE, relationship chains, and mixed operations

[v0.1.3] - Production Ready Release (January 2026)

Status: Production Ready - All major features complete

This release marks Geode’s transition to production-ready status with comprehensive enterprise features and 100% GQL compliance.

All Major Features Completed (October-December 2025)

Enterprise & Security:

  • Enhanced Row-Level Security (RLS) with policy evaluation and optimization
  • Advanced user authentication (RBAC/ABAC with MFA support)
  • KMS provider system for enterprise key management
  • Audit logging with JSON format and rotation
  • Transparent Data Encryption (TDE) with AES-256-GCM

Advanced Query & Optimization:

  • Cost-based query optimizer with statistics integration
  • Distributed query coordination with federation-aware optimization
  • Materialized views with 3 refresh strategies (immediate, deferred, manual)
  • Query rewriting for automatic materialized view usage
  • IndexOptimizer with logarithmic cost scaling

Machine Learning & Analytics:

  • ML graph embeddings (Node2Vec, GraphSAGE, DeepWalk)
  • Real-time analytics with streaming pattern detection
  • Anomaly detection and trend analysis
  • Time-series integration with in-memory optimization
  • Vector operations with HNSW indexing and 6 distance metrics

Storage & Performance:

  • S3 cloud backup with Digital Ocean Spaces integration
  • Memory-mapped operations for efficient I/O
  • Enhanced transaction isolation (SSI, phantom read prevention)
  • WAL replay for incremental backup recovery
  • Page cache optimization for read-heavy workloads

Architecture & Infrastructure:

  • Unified CLI architecture (eliminated subprocess spawning)
  • REPL QUIC integration with real-time interactive shell
  • ISO/IEC 39075:2024 compliance (see conformance profile)
  • SIMD acceleration for vector operations
  • Support for up to 65,535 vector dimensions
Completed Development Phases

All 7 TODO.md phases completed (~13,554+ lines of production code):

  1. Phase 2: Parser Extensions - Map literals, deep nesting (8+ levels)
  2. Phase 3: Set Operations - UNION/INTERSECT/EXCEPT (22/22 tests passing)
  3. Phase 4: Transaction Isolation - Phantom read prevention, SSI, 6 isolation levels
  4. Phase 5: Distributed Coordination - 10,451 lines of distributed systems code
  5. Phase 6: Materialized Views - 3 refresh strategies with dependency tracking
  6. Phase 7: Graph Algorithms - 20-90% performance improvements
Breaking Changes

CLI Architecture:

  • REMOVED: geodec and geoded binaries (unified into single geode binary)

  • MIGRATION: Replace all geodec/geoded calls with geode subcommands

    # Old
geodec query "MATCH (n) RETURN n"

# New
geode query "MATCH (n) RETURN n"

Server-Only Mode:

  • All CLI operations now require connection to QUIC server
  • No standalone execution mode
  • MIGRATION: Ensure geode serve is running before CLI commands

Test Infrastructure:

  • Removed mock data and simulations from test harness
  • All tests now execute against real server implementation
  • IMPACT: Test execution requires running server instance
New Features

Query Language:

  • Map literal syntax: {key: value, nested: {a: 1}}
  • Deep nesting support (8+ levels validated)
  • Reserved keywords as parameter names ($count, $name, etc.)
  • IF NOT EXISTS support in parameter clauses
  • Time-series value access: timeseries.value() GQL function

Data Types:

  • VectorF32: Single-precision floating-point vectors with SIMD
  • VectorI32: Integer vectors for discrete data
  • Network types: IPv4/IPv6, CIDR, MAC (<1μs parsing)
  • Geographic types: Point, LineString, Polygon with R-tree indexing
  • Cryptographic types: Hash, digital signatures, encryption keys
  • Temporal types: DateTime with timezone, intervals, duration arithmetic

Indexing:

  • HNSW index for vector similarity search
  • R-tree spatial index for geographic queries
  • BM25 full-text search index
  • Bloom filter index for membership testing
  • Composite indexes with multi-column support
  • Automatic index selection via cost-based optimizer

Backup & Recovery:

  • Full and incremental backup modes
  • S3-compatible cloud storage support
  • AES-256-GCM encryption for backup files
  • Point-in-time recovery (PITR)
  • Automated backup scheduling with cron
  • WAL replay for incremental recovery

Monitoring & Observability:

  • Prometheus metrics endpoint (port 9090)
  • Health check endpoints (/health, /ready, /live)
  • Structured JSON logging
  • Component-specific log levels
  • Audit log rotation and compression
  • Query performance profiling
Architecture Improvements
  • I/O: Memory-mapped operations for efficient storage access
  • Vector Distance: SIMD-accelerated distance calculations
  • Graph Algorithms: Optimized implementations across major algorithms
  • Index Lookups: Logarithmic scaling with cost-based selection
  • Cache Hit Rate: Optimized page cache for read-heavy workloads
  • Connection Pooling: Workload-dependent throughput
Bug Fixes
  • Fixed stdin handling in test runner (critical issue resolved October 2025)
  • Fixed multi-statement execution in CLI (session management workflows)
  • Fixed backup compression to use real ZStandard (not shim implementation)
  • Fixed graph centrality unused headers (deferred advanced metrics to future release)
  • Fixed reserved keyword handling as parameter names
  • Fixed IF NOT EXISTS clause support in various contexts
Security

Encryption:

  • TDE for data at rest with AES-256-GCM
  • TLS 1.3 for all network connections
  • Backup encryption with GEODE_TDE_KEY support
  • Key rotation support via KMS providers

Authentication & Authorization:

  • Multi-factor authentication (TOTP)
  • Certificate-based authentication (mTLS)
  • Password policies (length, complexity, expiration)
  • Enhanced RLS with policy expression compilation
  • RBAC/ABAC with fine-grained permissions
Deprecations

None. This is a major release with no deprecations.

Migration Guide

From Pre-v0.1.3 Versions:

  1. Update CLI Usage:

    # Replace geodec/geoded with unified geode binary
which geodec && echo "Remove geodec from PATH"
which geoded && echo "Remove geoded from PATH"

# Use new unified binary
./zig-out/bin/geode --version

  2. Start Server First:

    # All CLI operations require server
geode serve --listen 0.0.0.0:3141

# Then in another terminal
geode shell
geode query "RETURN 1"

  3. Update Backup Scripts:

    # Old (may have used shim compression)
geode backup --dest /backups/

# New (real ZStandard compression)
geode backup --dest s3://bucket/prefix --compression gzip

  4. Enable TDE for Backups:

    # Set encryption key
export GEODE_TDE_KEY='your-256-bit-hex-key'

# Backups now automatically encrypted
geode backup --dest s3://bucket/

  5. Update Configuration Files:

    # Add new security settings
security:
  enable_tde: true
  enable_audit: true
  auth:
    enabled: true
    mfa:
      enabled: true

[v0.1.2] - Grey Cardinal Compliance (October 2025)

Focus: Gap closure and compliance improvements

Added

  • Backup Encryption: Implemented AES-256-GCM encryption for backup files (GAP-005)

    • Requires GEODE_TDE_KEY environment variable
    • Automatic encryption/decryption on backup/restore

  • Time-Series Integration: Added timeseries.value() GQL function (GAP-004)

    • Access in-memory time-series data directly from queries
    • Optimized for high-frequency data access

  • WAL Replay: Implemented WAL replay logic for incremental backup recovery (GAP-002)

    • Point-in-time recovery support
    • Automatic consistency validation

  • Benchmarks: Added time-series benchmarks (src/benchmarks/bench_timeseries.zig) (GAP-006)

    • Performance regression testing
    • Automated benchmark execution
Fixed

  • Backup Compression: Fixed shim implementation to use real ZStandard compression (GAP-001)

    • Replaced placeholder with actual zstd library integration
    • Improved compression ratios (typically 60-70%)

  • Graph Centrality: Cleaned up unused headers (GAP-003)

    • Deferred advanced centrality metrics to v0.18
    • Improved compilation times
Security
  • TDE: Transparent Data Encryption for backups
    • AES-256-GCM with authenticated encryption
    • Compatible with all backup destinations
Optimizations
  • Backup compression with zstd
  • Time-series queries with in-memory optimization
  • WAL replay for efficient incremental recovery

Version Support

Supported Versions

VersionStatusSupport EndGQL ConformanceTest Coverage
v0.1.xProduction ReadyActive100% compliance97.4%
v0.1.xMaintenanceJune 2026100% compliance95%+

Upgrade Policy

  • Major versions (e.g., v0.x to v1.x): May contain breaking changes
  • Minor versions (e.g., v0.17 to v0.18): Backward compatible with migration guides
  • Patch versions (e.g., v0.1.3 to v0.1.3): Backward compatible, drop-in replacements

Release Schedule

Geode follows semantic versioning (SemVer):

  • Major releases: Breaking changes, major new features
  • Minor releases: New features, performance improvements, no breaking changes
  • Patch releases: Bug fixes, security updates, no new features

Typical release cadence:

  • Minor releases: Every 2-3 months
  • Patch releases: As needed for critical fixes
  • Security updates: Within 48 hours of vulnerability disclosure

Staying Updated

Subscribe to Updates

Testing Pre-Release Versions 

# Download pre-release builds
git clone https://github.com/codeprosorg/geode
cd geode
git checkout develop

# Build from source
make build

# Run comprehensive tests
make geodetestlab-comprehensive

Breaking Changes Summary

v0.1.3 Breaking Changes

CLI Architecture:

  • Removed geodec and geoded binaries
  • All operations require running server

Migration Required: Yes Estimated Migration Time: 15-30 minutes Backwards Compatibility: None (clean break from v0.1.x architecture)

Feature Timeline

February 2026 (v0.1.3-patch)

  • ✅ Critical thread safety and memory safety fixes
  • ✅ 95.9% test coverage (3395/3540 tests)
  • ✅ Security remediation (removed committed credentials)
  • ✅ Python client v0.3.19 with streaming fix
  • ✅ aarch64 platform stability improvements

January 2026 (v0.1.3+)

  • ✅ Production-ready status achieved
  • ✅ 97.4% test coverage (1644/1688 tests)
  • ✅ All 7 development phases complete
  • ✅ Enterprise features complete

October-December 2025 (v0.1.3 development)

  • Enhanced RLS with policy optimization
  • ML graph embeddings (Node2Vec, GraphSAGE, DeepWalk)
  • Real-time analytics with streaming detection
  • Unified CLI architecture
  • REPL QUIC integration

October 2025 (v0.1.2)

  • Backup encryption (AES-256-GCM)
  • Time-series integration
  • WAL replay logic
  • Real ZStandard compression

Documentation Updates

Each release includes documentation updates in:

  • API Reference: New functions and operators
  • Configuration Guide: New settings and options
  • Migration Guides: Upgrade instructions and breaking changes
  • Examples: Updated code samples for new features
  • Performance Tuning: New optimization recommendations

Known Issues

See Known Test Issues for current test failures and workarounds.

Current: 145 test failures out of 3540 total (95.9% pass rate)

Most failures are non-critical edge cases or known limitations documented in issue tracker.

Next Steps

Version Archive

Full version history available at:

Feedback

Report issues or request features:

License: Apache License 2.0 Copyright: 2024-2026 CodePros Last Updated: February 2026