v25.3.2

What's Changed

• fix(unique): prevent nil pointer panic in verifyUniqueWithinMutation by @shaunpatterson in #9677
• fix(backup): prevent duplicate predicates in backup manifest for vector indexes by @shiva-istari in #9679
• fix(sec): address CVE-2026-40173

New Contributors

• @shaunpatterson made their first contribution in #9677

Full Changelog: v25.3.1...v25.3.2

v24.1.7

This release addresses CVE-2026-40173

v25.3.1

What's Changed

• fix(ci): bump trivy to v0.69.3 to resolve 404 download failure by @mlwelles in #9660
• fix(dql): support IRI-ref at query start by @eileenaaa in #9667
• chore: update go version and new deps by @matthewmcneely in #9668
• addresses CVE-2026-34976

Full Changelog: v25.3.0...v25.3.1

v24.1.6

This release addresses CVE-2026-34976

Full Changelog: v24.1.5...v24.1.6

v25.3.1-preview-federation-changes

Preview release for Apollo Federation changes proposed for v25.3.1

v25.3.0

• Added

• Bulk Loader

  • feat(bulk): add a "skip reduce" flag to the bulk loader (#9618)
  • feat(bulk): add HNSW vector index support to bulk loader (#9598)
  • feat(bulk): add error logging to bulk loader (#9601)

• Test

  • feat(test): simplify macOS testing with automatic cross-compilation (#9585)

• Fixed

• Core

  • fix(posting): prevent stale cache hits when maxTs < readTs (#9597) (#9614)
  • fix(core): fix opentelemetry upgrade issues (#9595)
  • fix: fetch schema over network to ensure @unique check across groups (#9596)

• Test

  • fix(test): resolve macOS binary selection and test data clobbering (#9606)
  • fix(test): macOS local image, plugin tests, and test suite restructuring (#9610)
  • fix(test): make TestDropNamespaceErr resilient to async namespace operations (#9589)

• Changed

• Perf

  • perf(concurrency): cancel remaining goroutines when error occurs (#9484)

• Chore

  • chore: update docs references (#9617)
  • chore(test): Clean up testing guide and Makefile testing dependency checks (#9611)
  • chore: address CVEs (Feb '26 edition) (#9608)

    WARNING In #9608, badger will no longer be copied into the Dgraph image. You can download
    it from the releases page.

  • chore: suppress receipt of graphql request to logging level 2 (#9612)
  • chore(core): use provider.RetrieveWithCredContext instead of deprecated provider.Retrieve
    (#9551)
  • chore: remove hardcoded GOMAXPROCS; print cpu info in startup-banner (#9600)

• Dependency Updates

  • chore(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (#9616)

Full Changelog: v25.2.0...v25.3.0

v25.3.0-preview-no-maxprocs

This release is an experimental release that removes the hardcoded set of GOMAXPROCS in the shared main module.

Modern go runtimes (>1.25) intelligently use cgroup to determine optimal number of cores to allocate. Also, this change allows one to actually set the GOMAXPROCS env var (previously the call in the main module would have overridden it).

v25.2.0

• Added

• GraphQL

  • feat(graphql): Add support for ef and distance_threshold in generated GraphQL queries for
    similarity search (#9562).

    WARNING In #9562, the computed distances (automatically returned in the vector_distance
    field) for cosine and dot product metrics are no longer normalized to [0, 1], but instead
    return the raw distance computed by the metric.

• Vector

  • feat(vector/hnsw): add per-query ef and distance_threshold to similar_to, fix early
    termination (#9514)

• Fixed

• Core

  • fix(txn): for lossy indexes, change comparison function to first check the txn cache (#9567)
  • fix(cmd): store correct CA verification status (#9554)
  • fix(zero): make zero shutdown cleanly (#9525)

• Vector

  • fix(vector): Fix similarity-based HNSW search for cosine and dot product metrics (#9559)

    WARNING To benefit from the fix in #9559, you must reindex vector predicates that use
    cosine or dot product metrics.

• Chore

  • docs: fix typos in comments (#9569)
  • chore(ci): update go toolchain version to v1.25.6 (#9568)
  • fix(ci): update trunk go runtime to match go.mod version (#9575)
  • chore(test): replace deprecated docker struct types in testing harness (#9549)
  • chore(test): unskip previously skipped tests (#9537)
  • chore(core): use Tick() instead of NewTicker() (#9548)

New Contributors

• @mlwelles made their first contribution in #9575
• @NAM-MAN made their first contribution in #9569

Full Changelog: v25.1.0...v25.2.0

v25.1.0

What's Changed

• fix(cache): Estimate size of posting lists by @xqqp in #9515
• fix(dev): Add jemalloc package to local docker image by @xqqp in #9516
• fix(import): add sanity checks for connection string and bulk output directory in … by @shiva-istari in #9541
• fix(cache): make updating the max cost of posting cache work again by @xqqp in #9526
• chore: fixes for intermittent test failures by @matthewmcneely in #9517
• Update telemetry URL to use events.dgraph.io by @ryanfoxtyler in #9518
• chore: update readme, other docs for v25 and account change by @matthewmcneely in #9522
• chore(deps): Update go minor and patch (main) by @renovate[bot] in #9523
• .github/workflows: Migrate workflows to Blacksmith runners by @blacksmith-sh[bot] in #9524
• chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #9530
• chore: correct the renovate path by @matthewmcneely in #9531
• chore(test): change upgrade CI tests to weekly by @matthewmcneely in #9532
• chore: update module path and copyright disclaimers by @matthewmcneely in #9533
• chore: disable nightly builds by @matthewmcneely in #9536
• chore: update the changelog (incl past releases) by @matthewmcneely in #9538
• chore(docs): document release process by @matthewmcneely in #9543

New Contributors

• @shiva-istari made their first contribution in #9541

Full Changelog: v25.0.0...v25.1.0

v25.1.0-preview1

What's Changed

• fix(cache): Estimate size of posting lists by @xqqp in #9515
• fix(cache): make updating the max cost of posting cache work again by @xqqp in #9526
• fix(dev): Add jemalloc package to local docker image by @xqqp in #9516
• chore: fixes for intermittent test failures by @matthewmcneely in #9517
• Update telemetry URL to use events.dgraph.io by @ryanfoxtyler in #9518
• chore: update readme, other docs for v25 and account change by @matthewmcneely in #9522
• chore(deps): Update go minor and patch (main) by @renovate[bot] in #9523
• .github/workflows: Migrate workflows to Blacksmith runners by @blacksmith-sh[bot] in #9524
• chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #9530
• chore: correct the renovate path by @matthewmcneely in #9531
• chore(test): change upgrade CI tests to weekly by @matthewmcneely in #9532
• chore: update module path and copyright disclaimers by @matthewmcneely in #9533
• chore: disable nightly builds by @matthewmcneely in #9536
• chore: update the changelog (incl past releases) by @matthewmcneely in #9538

Full Changelog: v25.0.0...v25.1.0-preview1
See also: https://github.com/dgraph-io/dgraph/releases