chore(release): publish 1.25.0

CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 1.25.0
+
+### Minor Changes
+
+- [#2440](https://github.com/reddb-io/reddb/pull/2440) [`85bd8e8`](https://github.com/reddb-io/reddb/commit/85bd8e8cdb998f8c67086d6c406a55b79a0c140d) Thanks [@filipeforattini](https://github.com/filipeforattini)! - Release the KV/SQL performance and durable-write cycle as 1.25: publish
+  single-file KV replacements atomically, share durable grouped commits, avoid
+  redundant overflow checkpoints and reserve bounded WAL headroom. Preserve both
+  durability barriers, fence uncertain publication failures until reopen, and
+  restore indexed SQL/KV reads and recovery metadata. Existing storage and wire
+  formats remain unchanged. Full snapshots still cause pauses; measured results
+  and upgrade boundaries are documented in docs/release/v1.25.0.md.
+
+### Patch Changes
+
+- [#2431](https://github.com/reddb-io/reddb/pull/2431) [`51d4a6d`](https://github.com/reddb-io/reddb/commit/51d4a6deeaf73c63564b31415cd5e8d0c0de139b) Thanks [@filipeforattini](https://github.com/filipeforattini)! - Bound materialization for simple table LIMIT/OFFSET windows and avoid reserving
+  memory for skipped rows or arbitrarily large requested limits.
+
+- [#2439](https://github.com/reddb-io/reddb/pull/2439) [`6eb66dc`](https://github.com/reddb-io/reddb/commit/6eb66dc7a6cfa05b31961d3fad6324923c0c6b95) Thanks [@filipeforattini](https://github.com/filipeforattini)! - Enforce the configured read-result byte ceiling with bounded JSON serialization,
+  add materialized-read concurrency admission, and apply cooperative query deadlines
+  to existing read work checkpoints. Output streams charge cumulative payload bytes.
+  Mutation acknowledgements remain outside read-result limits; operator/cgroup and
+  materialization limits remain necessary for memory and non-cooperative work.
+
+- [#2428](https://github.com/reddb-io/reddb/pull/2428) [`bd94c3d`](https://github.com/reddb-io/reddb/commit/bd94c3d0590342d7a24999719a5dba3605e0f1f6) Thanks [@filipeforattini](https://github.com/filipeforattini)! - Use segment key indexes for KV point reads instead of materializing entire collections, while retaining MVCC version selection and recovery behavior.
+
+- [#2432](https://github.com/reddb-io/reddb/pull/2432) [`a3af4d6`](https://github.com/reddb-io/reddb/commit/a3af4d6261f05fcc2dccd5caca178c5ddf6936a3) Thanks [@filipeforattini](https://github.com/filipeforattini)! - Extract KV read values directly from indexed candidates instead of cloning whole rows, preserving snapshot visibility and mutation behavior.
+
+- [#2433](https://github.com/reddb-io/reddb/pull/2433) [`dd8fcc1`](https://github.com/reddb-io/reddb/commit/dd8fcc19da3c3274ef354e28daf447e919e37b93) Thanks [@filipeforattini](https://github.com/filipeforattini)! - Retain active statement snapshot horizons through query completion so concurrent
+  VACUUM cannot reclaim versions still needed by ordinary or nested reads.
+
+- [#2441](https://github.com/reddb-io/reddb/pull/2441) [`9ea24de`](https://github.com/reddb-io/reddb/commit/9ea24de1acb13edbe97cd2b47410387afb0fda18) Thanks [@filipeforattini](https://github.com/filipeforattini)! - Update rustls-webpki to 0.103.16 and webpki-roots to 1.0.10 across the workspace,
+  Python driver and Node addon lockfiles. Reject distrusted emSign intermediate
+  keys and remove the affected bundled root, addressing RUSTSEC-2026-0382 and
+  RUSTSEC-2026-0381. Connections using affected certificate chains may now fail
+  verification; replace the chain rather than disabling verification.
+
+- [#2429](https://github.com/reddb-io/reddb/pull/2429) [`2169185`](https://github.com/reddb-io/reddb/commit/2169185b50d0915cb384b30d04f3994d86eba052) Thanks [@filipeforattini](https://github.com/filipeforattini)! - Preserve row versions required by snapshot transactions that excluded an older
+  writer. VACUUM now retains that snapshot's horizon after the writer commits and
+  releases it when the reader commits or rolls back.
+
 ## 1.24.15
 
 ### Patch Changes

Cargo.toml

@@ -52,7 +52,7 @@ cast_possible_truncation = "warn"
 
 [package]
 name = "reddb-io"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 # Cargo auto-discovers every top-level `tests/*.rs` file as a separate
 # integration-test binary. This crate has 269 such files; keep discovery off

charts/reddb/Chart.yaml

@@ -5,7 +5,7 @@ description: |
   Supports standalone, serverless, primary/read-replica, and cluster topologies.
 type: application
 version: 0.3.0
-appVersion: "1.24.15"
+appVersion: "1.25.0"
 kubeVersion: ">=1.23.0-0"
 home: https://github.com/reddb-io/reddb
 sources:

crates/reddb-client-connector/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-client-connector"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "Deprecated compatibility shim for the authenticated client now provided by reddb-grpc-proto."

crates/reddb-client/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-client"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "Official Rust client for RedDB — embedded engine, gRPC, HTTP, and RedWire transports behind one connection-string API. Also hosts the workspace-internal connector + REPL used by the `red` and `red_client` binaries."

crates/reddb-crypto/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-crypto"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "RedDB cryptographic authority: the canonical per-page encryption-at-rest envelope (AES-256-GCM), mandatory encrypt parameters, and key parsing."

crates/reddb-file/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-file"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "RedDB file artifact layer: single-file .rdb layout, WAL, snapshots, checkpoints, locks, and recovery."

crates/reddb-grpc-proto/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-grpc-proto"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "Generated gRPC protobuf types and tonic client/server stubs for RedDB. Shared across reddb-server, reddb-client, and language drivers."

crates/reddb-rql/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-rql"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "RedDB Query Language (RQL) front-end + conformance authority (ADR 0053). Owns the sqllogictest-format conformance suite whose truth comes from the public SQLite corpus; depends only on reddb-io-types."

crates/reddb-server/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-server"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "RedDB server-side engine: storage, runtime, replication, MCP, AI, and the gRPC/HTTP/RedWire/PG-wire dispatchers. Re-exported by the umbrella `reddb` crate."

crates/reddb-types/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-types"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "RedDB logical type system: the neutral keystone vocabulary — Value, DataType, SqlTypeName, TypeModifier, TypeCategory, ValueError, Row — depended on by every authority crate and depending on none."

crates/reddb-wire/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "reddb-io-wire"
-version = "1.24.15"
+version = "1.25.0"
 edition.workspace = true
 authors.workspace = true
 description = "RedDB wire protocol vocabulary: connection-string parser, RedWire frames, payload codecs, topology, sanitizers, and replication messages."

drivers/bun/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @reddb-io/client-bun
 
+## 1.25.0
+
 ## 1.24.15
 
 ## 1.24.14

drivers/bun/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reddb-io/client-bun",
-  "version": "1.24.15",
+  "version": "1.25.0",
   "description": "RedDB wire protocol client for Bun — ultra-fast native TCP",
   "main": "index.ts",
   "scripts": {

drivers/js-client/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @reddb-io/client
 
+## 1.25.0
+
 ## 1.24.15
 
 ## 1.24.14

drivers/js-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reddb-io/client",
-  "version": "1.24.15",
+  "version": "1.25.0",
   "description": "Thin remote-only RedDB driver. Pure JavaScript — no install scripts, no native binary. Speaks RedWire/gRPC/HTTP. Embedded URIs (memory://, file://, red:///path) are rejected — use @reddb-io/sdk for those.",
   "type": "module",
   "main": "src/index.js",

drivers/js/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @reddb-io/sdk
 
+## 1.25.0
+
 ## 1.24.15
 
 ## 1.24.14

drivers/js/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reddb-io/sdk",
-  "version": "1.24.15",
+  "version": "1.25.0",
   "description": "Official embedded RedDB SDK — launches a local red binary over stdio JSON-RPC. The binary arrives as a per-platform optionalDependency — no install script. Use @reddb-io/client for remote HTTP, gRPC, and RedWire.",
   "type": "module",
   "main": "src/index.js",