AngaraBook changelog (user/testing highlights)

Это не копия CHANGELOG.md и не замена release notes в planning пакетах.

Цель: дать тестерам короткий “что поменялось в опыте тестирования” + ссылки на каноничные источники.

Source of truth

• Product changelog (executive): CHANGELOG.md (+ CHANGELOG.ru.md)

• Known issues (canonical): angarabook/src/operations/known-issues.md

Unreleased (testing focus)

• 0.6.8.1 (in_review) — Bug-fix sprint (correctness + compatibility):
  • highlights:
    • Multi-statement Simple Query — psql -c "stmt1; stmt2; …" (and any client) now executes every ;-separated statement and returns each result, with PostgreSQL error semantics (first error aborts the rest). See Подключение клиентов §1.4.
    • G-17 fix — concurrent UPDATE t SET v = v + 1 WHERE k = … on indexed/disk tables no longer silently loses increments (heap-primary MVCC + atomic read-modify-write).
    • G-16 fix — a graceful shutdown of a table with an index no longer loses committed rows on restart (the shutdown checkpoint now persists index pages before completing).
• 0.6.3.4 (in_review) — CBO P4.1 remediation:
  • highlights: optimizer planning timeout contract hardened (sql.optimizer.planning_timeout_ms / ANGARABASE_OPTIMIZER_PLANNING_TIMEOUT_MS), timeout path degrades to greedy planning, and optimizer observability expanded with planning counters/histogram.
• 5.17 (closed) — SQL Coverage Expansion:
  • highlights: Window functions v0 (ROW_NUMBER, RANK, LAG, LEAD, SUM/COUNT OVER), Set operations (UNION, INTERSECT, EXCEPT), TPC-H partial benchmarks, pgbench read-write support.
• 5.16 (closed) — Columnar Segment Format v0 (AngaraColumn prep):
  • highlights: columnar segment on-disk format v0 + column cache + zone maps; baseline read-only scan surface; see evidence pack for closure notes.
• 5.15.13 (closed) — Page-Based Default + Overlay Hydrate Bridge:
  • highlights: page-based storage default ON, hydrate bridge restores persistent tables on startup, configurable flush_on_commit for snapshotted tables.
• 5.15.12 (closed) — Txlog Path Guardrails & Regression Tests:
  • highlights: regression tests for commit conflict 40001 (hotfix follow-up), runtime warning for split-directory misconfiguration, and risk closure.
• 5.13.1 (in_review) — AQP hardening fix release:
  • highlights: bounded async feedback ingest path, self-join-safe operator identity matching, and documented AQP capacity knob (ANGARABASE_AQP_STORE_CAPACITY_MB) for deterministic bounded advisory store behavior.
• 5.15.11 (closed) — IR Executor Refactor + Unwrap/Expect Cleanup:
  • note: no user-facing SQL/ops contract changes (refactor-only train; internal executor module decomposition
    • guardrails).
• 5.12.3 (closed) — Comparative Benchmark Infrastructure:
  • highlights: SQL-level benchmark suite (B1-B7), AngaraBase-vs-PostgreSQL comparator reports, SQL coverage corpus and score reporting, and optional nightly SQL benchmark hook.
• 5.12.2 (closed) — Parallel Performance Polish:
  • highlights: removed sequential join-build merge bottleneck via shared partition build path; preserved join accounting telemetry continuity in EXPLAIN ANALYZE.
• 5.12.1 (closed) — AngaraParallel gap closure:
  • highlights: partitioned parallel join build phase, settings-governed DOP caps (ANGARABASE_PARALLEL_DOP_CAP_GLOBAL / ANGARABASE_PARALLEL_DOP_CAP_QUERY), and EXPLAIN ANALYZE parallel join counters (join_build_rows, join_probe_rows).
• 5.10.1 (closed) — AngaraVector gap closure:
  • highlights: execution mode contract aligned to auto / force_vector / force_row, explicit vector bridges (RowToColumnBridge, BatchToRowBridge), and column-native vector hash kernels used in vector join/aggregate path.
• 5.10 (closed) — AngaraVector phase-1:
  • highlights: vector execution mode now covers join/aggregate plan paths and EXPLAIN marks vector operators (VectorHashJoin, VectorAgg) when vector mode is active.
• 5.9 (closed) — AngaraVector phase-0:
  • highlights: introduced vector batch format baseline (batch_size default 1024), scan/filter/project vector path, and bounded per-query vector memory budget knobs.
• 5.8.1 (closed) — AngaraMemory async snapshots + per-table scheduler:
  • highlights: durability='snapshotted' no longer performs immediate hot-path page persistence; checkpoint worker now honors per-table checkpoint_interval_ms scheduling.
• 5.8 (closed) — AngaraMemory phase-1:
  • highlights: durability='logged'|'snapshotted', opt-in eviction_policy='fifo', and SQL-visible memory-table runtime counters in sys.tables.
• 5.7 (closed) — AngaraMemory phase-0:
  • highlights: storage='memory' table surface, fail-closed max_rows enforcement (54023), and volatile durability='none' restart semantics.
• 5.6.5 (closed) — reliability engineering closure:
  • note: no user-facing SQL/ops contract changes (runtime panic-hardening + CI governance).
• 5.6.4 (closed) — architecture governance closure:
  • note: no user-facing SQL/ops contract changes (layering/dependency CI guardrails).
• 5.6.3 (closed) — native packaging + secure init-first bootstrap:
  • highlights:
    • secure init CLI hardening (--superuser-password-file|--superuser-password-env, --require-auth, explicit --insecure-trust)
    • native RPM/DEB packaging manifests with init-first service start fence (ConditionPathExists=/var/lib/angarabase/data/VERSION)
    • release signing helpers and deterministic repo-layout scaffolding for package publication
• 5.6.2 (closed) — packaging baseline for operator install path:
  • highlights:
    • portable x86_64-unknown-linux-gnu archive build in pinned RHEL8/UBI8 (glibc 2.28) environment
    • Gentoo source ebuild baseline with systemd/OpenRC assets
    • runtime fail-closed glibc compatibility guard (glibc >= 2.28) with operator-facing support contact message
• 5.6.1 (closed) — architecture hygiene patch:
  • note: no user-facing SQL/ops contract changes (AngaraBook: no user-facing changes)
• 5.5 / 5.6 (closed) — advanced diagnostics + pilot validation:
  • trains:
  • highlights:
    • wait-event taxonomy and usage stats surfaces (sys.table_stats, sys.index_stats) with bounded reset semantics
    • OTel-style span export knobs for query-stage triage evidence (ANGARABASE_OTEL_*)
    • production pilot evidence updated with workload command and reprioritization notes
• AngaraBook security docs expanded:
  • pages: security/overview.md, security/authorization.md, security/authentication.md, security/audit.md, security/encryption.md, security/break-glass.md, security/hardening.md
  • highlights: end-to-end user-facing security documentation for 4.25/5.3/5.3.1/5.4 surfaces (RBAC/RLS/break-glass/audit/TDE/client-encrypted columns)
• 5.4 (closed) — Security Layer Reinforcement Phase 2:
  • highlights: Audit v1 DML policy controls (off|allowlist|denylist), RLS v1 masking/provenance introspection, and client-encrypted columns v0 metadata contract with fail-closed predicate bounds
• 5.3.1 (closed) — TDE patch for audit-at-rest:
  • highlights: audit sink bytes are encrypted when TDE is enabled, sys.audit_log stays readable with key material, missing key is fail-closed for audit sink read/write
• 5.3 (closed) — TDE v0 baseline:
  • highlights: fail-closed TDE enablement for page/WAL at-rest encryption, sys.settings metadata-only introspection for key id/rotation timestamp, restore fail-closed without keys
• 5.2 (closed) — module decomposition phase-1 (.inc.rs elimination, security module layout, pgwire tests split, architecture doc consolidation) completed as refactor-only train:
  • note: no user-facing SQL/ops contract changes
• 5.1 (closed) — module decomposition phase-0 (sys_catalog, virtual_catalog, metrics) completed as refactor-only train:
  • note: no user-facing SQL/ops contract changes
• 4.0 line (closed) — major-line closure completed with truth-of-now planning sync:
• 4.25.1 (closed) — Security Hardening & RLS Optimization:
  • highlights: fail-closed IR RLS predicate checks (0A000 on unsupported complexity), mandatory SecurityContext enforcement (42501 in non-trust modes), bounded planner-stage RLS rewrite for IR SELECT, and audit fsync barriers for break-glass lifecycle events
• 4.25 (closed) — Security Reinforcement Phase 1:
  • highlights: secure --init superuser bootstrap, RLS v0 on reads+writes, break-glass lifecycle, audit chain verification, sys.* security introspection views/functions
• 4.21 (closed) — AngaraStat Level 2 reservoir stats (bounded):
  • highlights: stats_reservoir_size, Level 2 histogram/MCV surfaces in sys.column_stats
• 4.22 (closed) — query diagnostics v0:
  • highlights: EXPLAIN/EXPLAIN ANALYZE, slow query log, angara_stat_activity, angara_stat_statements, angara_top_queries()
• 4.24 (closed) — reliability/efficiency hardening:
  • highlights: REINDEX INDEX, BRIN range-efficiency metric, strict storage startup default, no-auth startup guardrail
• 4.24.1 (closed) — mutation policy no_delete:
  • highlights: unified mutation_policy, 42809 guards for DELETE/TRUNCATE and PK/FK updates, sys.tables.mutation_policy
• 4.24.2 (closed) — SQL semantics/stats hardening:
  • highlights: typed min/max streaming stats, mutation epoch metric, EXPLAIN ANALYZE dry-run for DML, wait-event classification
• 4.24.3 (closed) — SQL/stats closure:
  • highlights: typed col_min/col_max surfaces, typed reservoir samples with membership-aware UPDATE/DELETE handling, wait_event_type in angara_stat_activity
• 4.24.4 (closed) — core decomposition for executor:
  • highlights: internal refactor (ir_executor split into scan/join/aggregate/sort modules), no user-facing SQL/ops contract changes
• 4.15 (closed) — BRIN baseline (bounded):
• 4.16 (closed) — page checksums v0 + verify-pages triage surface:
• 4.17 (closed) — SQL semantics tranche (bounded WITH, ORDER BY <expr>, deterministic 0A000 hygiene):
• 4.18 (closed) — table partitioning v0 (RANGE/LIST, routing, pruning, per-partition cascade):
• 4.19 (closed) — append-only table mode v0 (append_only DDL/property, 42809 mutation guards, partition inheritance, rowid watermark):
• 4.20 (closed) — AngaraStat Level 1 (ndv_approx/min/max/null_count, stats_level_max controls, stats observability):
• 4.23 (closed) — unified .adb storage path for heap tables:
  • runtime routing fixed: user DB writes go to <db>.adb and <db>.atl (not base.*)
  • backup/restore note updated: operations/backup-and-restore.md

Milestones (testing-ready)

• 2.3 (closed) — backup/restore baseline is testable:

  • runbook: angarabook/src/operations/backup-restore.md

• 2.4 (closed) — execution/compat deepening is pinned:

  • known issues remain explicit: angarabook/src/operations/known-issues.md

• 2.7 (closed) — backup/restore v2 phase 1a is testable (offline/local baseline):

  • AngaraBook page: operations/backup-and-restore.md

• 2.8 (closed) — validation hardening is testable:

• 2.9 (closed) — backup/restore v2 phase 1b (online/PITR) is testable:

  • AngaraBook page: operations/backup-and-restore.md

• 2.10 (closed) — SysCatalog identity + native sys.* introspection is available:

  • identity file: storage.data_directory/identity_v0.txt

• 2.11 (closed) — pg_catalog semantics are rooted in SysCatalog (trace-driven) + identity rehearsal gate: rehearsal_identity_rm211.sh)

  • compat matrix (truth source): angarabook/src/operations/client-compatibility.md

• 2.12 (closed) — upgrade rehearsal is wired into nightly discipline + docs anti-drift is enforced:

  • docs validator: docs/validate-docs.sh

• 2.13 (closed) — code health hardening: prevent god-files growth (touched-file budget gate):

• 2.14 (closed) — admin remote transport v0 (TCP) + angara-cli remote identity:

  • server: env ANGARABASE_ADMIN_ADDR + crates/angarabased/src/admin_tcp.rs
  • client: angara-cli admin identity --addr <host:port> [--json]

• 2.15 (closed) — persisted SysCatalog v0: DDL survives restart:

  • persisted catalog file: storage.data_directory/sys_catalog_v0.txt

• 2.16 (closed) — graceful shutdown contract (bounded):

  • env knob: ANGARABASE_SHUTDOWN_TIMEOUT_MS

• 2.17 (closed) — admin/ops via pgwire (SQL/sys.*, no Unix sockets):

  • sys views: sys.identity, sys.health, sys.settings
  • optional SQL shutdown (fail-closed): ANGARABASE_ALLOW_SQL_SHUTDOWN=1 + SELECT sys.request_shutdown()

Released tags

Список released tags и ссылки на release notes см. в CHANGELOG.md → “Released”.