• Documentation
• Commit Log
• Maintenance Policy
• Release Policy
• Release Schedule
• Changelog: RC1

Special thanks to the following individuals for their excellent contributions:

• @mmoayyed
• @leleuj
• @hdeadman
• @philippberger
• @JiriProkop
• @floriannari
• @rdupret
• @thomas-nilsson-irfu
• @arnxxau
• @cedriss

• add upgrade strategy for standalone mode by @majinghe in https://github.com/rustfs/rustfs/pull/1431
• add gateway api support due to ingress nginx retirement by @majinghe in https://github.com/rustfs/rustfs/pull/1432
• Default to helm chart version for docker image and not latest by @mkrueger92 in https://github.com/rustfs/rustfs/pull/1385
• replace winapi to windows crate by @houseme in https://github.com/rustfs/rustfs/pull/1455
• feat: object-list access by @GatewayJ in https://github.com/rustfs/rustfs/pull/1457
• fix: honor bucket policy for authenticated users by @loverustfs in https://github.com/rustfs/rustfs/pull/1460
• fix(http): Fix console bucket management functionality failure caused by RUSTFS_SERVER_DOMAINS by @houseme in https://github.com/rustfs/rustfs/pull/1467
• fix: Remove secret and signature from the log by @houseme in https://github.com/rustfs/rustfs/pull/1466
• Fix Windows Path Separator Handling in rustfs_utils by @houseme in https://github.com/rustfs/rustfs/pull/1464
• fix: add delete prefix option support by @weisd in https://github.com/rustfs/rustfs/pull/1471
• feat: implement bucket quota system by @yxrxy in https://github.com/rustfs/rustfs/pull/1461
• Refactor：replace jsonwebtoken feature from rust_crypto to aws_lc_rs by @houseme in https://github.com/rustfs/rustfs/pull/1474
• fix: avoid unwrap() panic in delete_prefix parsing by @weisd in https://github.com/rustfs/rustfs/pull/1476
• dependency name ignore for object_store by @houseme in https://github.com/rustfs/rustfs/pull/1481
• fix: return 404 for HEAD requests on non-existent objects in TLS by @houseme in https://github.com/rustfs/rustfs/pull/1480
• fix:handle null version ID in delete and return version_id in get_object by @LeonWang0735 in https://github.com/rustfs/rustfs/pull/1479
• build(deps): bump tracing-opentelemetry and flate2 version by @houseme in https://github.com/rustfs/rustfs/pull/1484
• Fix object tagging functionality issues #1415 by @houseme in https://github.com/rustfs/rustfs/pull/1485
• Remove the rustfs/console/config.json route by @houseme in https://github.com/rustfs/rustfs/pull/1487
• Optimization and collation of dependencies introduction processing by @houseme in https://github.com/rustfs/rustfs/pull/1493
• Refactor Event Admin Handlers and Parallelize Target Status Probes by @houseme in https://github.com/rustfs/rustfs/pull/1501
• Use POSIX statvfs, since statfs is not designed to be portable by @jan-schreib in https://github.com/rustfs/rustfs/pull/1495
• feat: add support for existing gateways in helm chart by @jasperweyne in https://github.com/rustfs/rustfs/pull/1469
• perf(utils): optimize User-Agent generation and platform detection by @houseme in https://github.com/rustfs/rustfs/pull/1504
• fix: exclude matching key from ListObjects results when using marker/startAfter by @houseme in https://github.com/rustfs/rustfs/pull/1506
• In the PVC definition, skip the storageClassName attr if null/empty by @arthurdarcet in https://github.com/rustfs/rustfs/pull/1498
• fix: handle copy_source_if_match in copy_object for S3 compatibility by @overtrue in https://github.com/rustfs/rustfs/pull/1408
• chore(deps): bump multiple dependencies by @houseme in https://github.com/rustfs/rustfs/pull/1510
• chore(deps): bump crc-fast, chrono, aws-smithy-types, ssh-key by @houseme in https://github.com/rustfs/rustfs/pull/1513
• fix: change health check statement to fix unhealthy issue for docker … by @majinghe in https://github.com/rustfs/rustfs/pull/1515
• fix: standart policy format by @GatewayJ in https://github.com/rustfs/rustfs/pull/1508
• upgrade s3s from 0.13.0-alpha.1 to 0.13.0-alpha.2 by @houseme in https://github.com/rustfs/rustfs/pull/1518
• feat: add Cors by @GatewayJ in https://github.com/rustfs/rustfs/pull/1496
• Fix:correctly handle versioning obj by @LeonWang0735 in https://github.com/rustfs/rustfs/pull/1521
• fix:correctly handle copy object by @LeonWang0735 in https://github.com/rustfs/rustfs/pull/1512

• @jasperweyne made their first contribution in https://github.com/rustfs/rustfs/pull/1469
• @arthurdarcet made their first contribution in https://github.com/rustfs/rustfs/pull/1498

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.79...1.0.0-alpha.80

• Do not panic when doing a dumpless upgrade on empty indexes with configured embeddings by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6102

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.32.1...v1.32.2

For new features, improvements, and bug fixes released in v8.5.5 for TiDB, see TiDB v8.5.5 release notes.

See the difference from the issue perspective:

QuestDB 9.3.1 follows the major 9.3.0 release, focusing on stability, correctness, and performance refinements based on early feedback and production usage.

This release delivers important fixes across joins, views, and checkpointing, alongside continued performance improvements on hot SQL execution paths.

Window functions now support arithmetic expressions directly, allowing analytical queries to compute derived values inline without requiring subqueries or post-processing:

SELECT
  symbol,
  price,
  price - lag(price) OVER (PARTITION BY symbol ORDER BY ts) AS delta
FROM trades

This simplifies common patterns such as calculating deltas, ratios, and scaled values within window definitions.

The tables() system view now exposes two additional columns:

• table_min_timestamp
• table_max_timestamp

These columns provide quick visibility into the temporal bounds of each table, useful for diagnostics, retention checks, and operational tooling.

The ksum() function now works as a window function, using the Kahan summation algorithm for improved floating-point precision. This complements the existing ksum() aggregate function by enabling its use in window contexts:

-- Cumulative sum with reduced floating-point error
SELECT ksum(price) OVER (ORDER BY ts ROWS UNBOUNDED PRECEDING) FROM trades;

-- Sliding window
SELECT ksum(price) OVER (ORDER BY ts ROWS BETWEEN 3 PRECEDING AND CURRENT ROW) FROM trades;

-- Partitioned
SELECT ksum(price) OVER (PARTITION BY symbol) FROM trades;

All standard window frame types are supported: ROWS, RANGE, partitioned, unbounded, and sliding windows.

Parquet exports via the HTTP /exp endpoint now stream directly from page frames, eliminating intermediate temporary tables. This reduces memory overhead and improves export throughput for large result sets.

Parallel query execution has been optimized to reduce garbage generation on hot paths. This lowers GC pressure and improves throughput and tail latency under sustained analytical workloads.

Queries where columns reference other columns now avoid redundant expression evaluation. This improves performance for wide projections and queries with multiple derived columns.

• Fixed an error when using WINDOW JOIN (introduced in 9.3.0) with ORDER BY ts DESC.
• Fixed a crash in ASOF JOIN queries when the ON clause mixes SYMBOL and non-symbol columns.
• Fixed transient "file does not exist" errors that could surface during query execution.

• Fixed an issue where views (introduced in 9.3.0) could become suspended after being altered.
• Fixed a rare bug that could write invalid data into a materialized view under specific conditions.

• Fixed checkpoint restore logic by removing phantom table directories left on disk.
• Fixed a rare issue where process memory was not fully released on Linux when jemalloc is enabled.

Thanks to everyone who reported issues, shared production feedback, and contributed fixes and improvements. Your input continues to shape QuestDB's reliability and performance.

For questions or feedback, please join us on Slack or Discourse, and check the full changelog on GitHub for detailed PR information.

• feat(sql): implement ksum() window function with Kahan summation by @bluestreak01 in https://github.com/questdb/questdb/pull/6642
• perf(core): streaming parquet export by @kafka1991 in https://github.com/questdb/questdb/pull/6300
• feat(sql): implement arithmetic with window functions by @bluestreak01 in https://github.com/questdb/questdb/pull/6626
• fix(sql): WINDOW JOIN with ORDER BY ts DESC returns error by @puzpuzpuz in https://github.com/questdb/questdb/pull/6624
• fix(core): fix checkpoint restore by removing phantom tables directories from disk by @ideoma in https://github.com/questdb/questdb/pull/6614
• perf(sql): reduce garbage generated on parallel query hot path by @puzpuzpuz in https://github.com/questdb/questdb/pull/6597
• fix(sql): fix view metadata race conditions on replica by @bluestreak01 in https://github.com/questdb/questdb/pull/6627
• fix(core): fix for view becomes suspended after it is altered by @glasstiger in https://github.com/questdb/questdb/pull/6623
• fix(core): fix rare bug that can potentially write invalid data in mat view by @ideoma in https://github.com/questdb/questdb/pull/6628
• perf(sql): reduce repeated expression execution when a column is referenced by other columns by @kafka1991 in https://github.com/questdb/questdb/pull/6093
• fix(core): fix transient file does not exist error in queries by @ideoma in https://github.com/questdb/questdb/pull/6629
• fix(sql): fix ASOF JOIN crash when ON clause has symbol and other columns by @jerrinot in https://github.com/questdb/questdb/pull/6634
• fix(core): process memory may not be released on Linux when jemalloc is enabled by @puzpuzpuz in https://github.com/questdb/questdb/pull/6619
• feat(sql): add table_min_ and table_max_timestamp columns to tables() view by @bluestreak01 in https://github.com/questdb/questdb/pull/6630

Full Changelog: https://github.com/questdb/questdb/compare/9.3.0...9.3.1

Introduce a MEILI_EXPERIMENTAL_DISABLE_FID_BASED_DATABASES_CLEANUP env var to opt out of the field ID-based database cleanup when upgrading a Meilisearch <1.32.0.

by @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6096

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.32.0...v1.32.1

Download the artifacts and read the release notes here - https://docs.yugabyte.com/stable/releases/ybdb-releases/v2024.2/#v2024.2.7.2

Download the artifacts and read the release notes here - https://docs.yugabyte.com/stable/releases/ybdb-releases/v2025.1/#v2025.1.3.0

This is a security release.

lib:

• (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) https://github.com/nodejs-private/node-private/pull/802
• (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) https://github.com/nodejs-private/node-private/pull/797 lib,permission:
• (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) https://github.com/nodejs-private/node-private/pull/760 src:
• (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) https://github.com/nodejs-private/node-private/pull/773 src,lib:
• (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) https://github.com/nodejs-private/node-private/pull/759 tls:
• (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) https://github.com/nodejs-private/node-private/pull/796

• [8f9ba3f623] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997
• [97fc9b0eb7] - deps: update undici to 6.23.0 (Matteo Collina) nodejs-private/node-private#792
• [14fbbb510c] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#802
• [1febc48d5b] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
• [494f62dc23] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
• [d7a5c587c0] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
• [51f4de4b4a] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
• [85f73e7057] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

This is a security release.

lib:

• (CVE-2025-59465) add TLSSocket default error handler
• (CVE-2025-55132) disable futimes when permission model is enabled lib,permission:
• (CVE-2025-55130) require full read and write to symlink APIs src:
• (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks src,lib:
• (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle tls:
• (CVE-2026-21637) route callback exceptions through error handlers

• [6badf4e6f4] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997
• [37509c3ff0] - deps: update undici to 6.23.0 (Matteo Collina) nodejs-private/node-private#791
• [eb8e41f8db] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
• [ebbf942a83] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748
• [6b4849583a] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
• [ddadc31f09] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
• [d4d9f3915f] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
• [25d6799df6] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796