v25.4.0-preview1

This preview release showcases the per-predicate mutation pipeline feature. This feature increases mutation performance for write heavy processes under certain conditions. See the PR for more information.

IMPORTANT
A feature flag enables this functionality: --feature-flags="mutations-pipeline-threshold=N" — N=0 disables the pipeline entirely (legacy path), N=1 always uses it, N>1 only routes mutations with ≥ N edges to it. The pipeline pays a per-predicate goroutine spin-up cost, so tiny mutations are slightly slower on it; bulk multi-predicate mutations are faster (crossover ≈ 100 edges in in-process benches; live-loading the 1M dataset is ~1.5× faster end-to-end at threshold=1 vs. legacy). As shipped, the current setting is 1, meaning always ON. It's recommended that for your testing you set the value to somewhere around 100.

v25.3.4

What's Changed

• feat (backup): improve lsbackup tool by @shiva-istari in #9693
• perf(hnsw): deduplicate neighbor updates and fix error handling by @shaunpatterson in https://github.com/dgraph-*
• fix: zero address change by @shiva-istari in #9680
• fix tests by @shiva-istari in #9694
• fix(dql): whitespace sensitivity issues in conditional eval by @matthewmcneely in #9692
• fix: address CVE-2026-44840
• chore: update go version by @matthewmcneely in #9699
  io/dgraph/pull/9664
• chore: Update jemalloc to 5.3.1 by @RJKeevil in #9688

Full Changelog: v25.3.3...v25.3.4

v24.1.9

Address CVE CVE-2026-44840

v25.3.3

What's Changed

• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 by @dependabot[bot] in #9682
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 by @dependabot[bot] in #9681
• fix: address CVEs: CVE-2026-41327, CVE-2026-41328, CVE-2026-41492

Full Changelog: v25.3.2...v25.3.3

v24.1.8

Address CVEs CVE-2026-41327, CVE-2026-41328, CVE-2026-41492

Full Changelog: v24.1.7...v24.1.8

v25.3.2

What's Changed

• fix(unique): prevent nil pointer panic in verifyUniqueWithinMutation by @shaunpatterson in #9677
• fix(backup): prevent duplicate predicates in backup manifest for vector indexes by @shiva-istari in #9679
• fix(sec): address CVE-2026-40173

New Contributors

• @shaunpatterson made their first contribution in #9677

Full Changelog: v25.3.1...v25.3.2

v24.1.7

This release addresses CVE-2026-40173

v25.3.1

What's Changed

• fix(ci): bump trivy to v0.69.3 to resolve 404 download failure by @mlwelles in #9660
• fix(dql): support IRI-ref at query start by @eileenaaa in #9667
• chore: update go version and new deps by @matthewmcneely in #9668
• addresses CVE-2026-34976

Full Changelog: v25.3.0...v25.3.1

v24.1.6

This release addresses CVE-2026-34976

Full Changelog: v24.1.5...v24.1.6

v25.3.1-preview-federation-changes

Preview release for Apollo Federation changes proposed for v25.3.1