Features

• immuadmin: sysadmin permission now accepted by user create and user permission CLI commands, enabling operators to bootstrap additional sysadmin accounts from the command line without relying solely on the default immudb account (#2052)
• auditor: new opt-in --audit-verify-values flag re-reads and SHA-256-verifies each committed value after the chain proof check; any on-disk tampering surfaces as a failed audit cycle without changing default (chain-only) behavior (#2091)

Performance

• embedded/sql: index-only COUNT(*) for indexed WHERE queries <80><94> SELECT COUNT(*) FROM t WHERE indexed_col = ? no longer fetches full rows, satisfying the count entirely from the secondary index (#2093)
• embedded/sql: reduceBool fast path avoids per-row heap-boxing of boolean expressions in the COUNT(*) hot path; combined with hoisting substitute and EncodeSelector out of the per-row loop, a 50k-row composite-index COUNT(*) drops from 20.87 ms to 14.92 ms and from 234k to 150k allocations/op
• embedded/store: hot-path allocation and lock-contention reductions on critical read/write paths
• embedded/appendable/remoteapp: range-fetch ReadAt <80><94> issues a bounded range request (~256 KiB window) instead of downloading the entire chunk; for a 4 MiB chunk with a 64 B tail read, bytes on the wire shrink from 4 MiB to ~256 KiB
• embedded/appendable/remoteapp: background prefetch pipelines the next read window to hide latency on sequential scans
• remote/s3 (Wave 4): drop upload-verify round-trips, parallel chunk prefetch, end-to-end compression

Bug Fixes

• embedded/sql: two server-crashing panics introduced in v1.11.0 (#2100):
  • Nil pointer dereference in the disk-spill sort path: large ORDER BY <E2><80><A6> OFFSET result sets that spill to disk panicked because projection-pushdown left unaccessed column slots as nil; the encode path now substitutes a typed NULL for nil slots
  • Index out-of-range in db.SQLQuery: empty or comment-only SQL input (accepted by the parser since v1.11.0) returned an empty statement slice, causing a crash; a len(stmts) == 0 guard now returns ErrExpectingDQLStmt
• embedded/sql: standalone COUNT(col) returned 0 for any non-empty table; CountValue.ColBounded() now returns true for both COUNT(col) and COUNT(DISTINCT col), preserving SQL NULL-skip semantics (#2042)
• embedded/sql: TIMESTAMP parameter binds with timezone suffixes (Z, <C2><B1>HH:MM) were rejected by the PG wire bind path; space-separated layouts are now accepted alongside RFC3339 (#1149)
• embedded/sql: parametrized SELECT WHERE col = $1 reused the first bound value on subsequent executions of a cached prepared statement; substitute() now returns fresh AST nodes instead of mutating the cached receiver (#1153)
• embedded/store: database permanently unrecoverable after ungraceful shutdown (e.g. OOMKill) that left more pre-committed transactions on disk than MaxActiveTransactions; the recovery path now grows the precommit buffer dynamically (doubling on overflow) instead of returning ErrBufferIsFull (#2086)
• embedded/store: hard 60-second ingestion freeze on every indexing error replaced with bounded exponential backoff (100 ms doubling to 60 s, reset on a fully successful iteration) (#2061)
• embedded/store: supplying different MaxValueLen, MaxKeyLen, MaxTxEntries, or FileSize values on store re-open was silently ignored; a warning is now emitted naming both the supplied and stored values (#1864)
• pkg/server: DatabaseListV2 failed entirely when any database was closed or unloadable; unloaded databases now appear in the listing with Loaded=false, NumTransactions=0 (#1997)
• docker: almalinux-8-minimal image failed to start with permission denied on /var/lib/immudb/immudb.identifier due to a UID/GID mismatch (directories owned by 65532, runtime user immu running as 3322); IMMU_UID/IMMU_GID are now consistently set to 3322 (#2098)

CI

• docker: official images are now built for linux/amd64 and linux/arm64 via docker buildx; Go cross-compiles natively on the build platform without QEMU (#2069)

Dependencies

• golang.org/x/crypto v0.48.0 <86><92> v0.52.0 (8 HIGH + 5 MEDIUM CVEs)
• golang.org/x/net v0.50.0 <86><92> v0.55.0 (7 HIGH + 1 MEDIUM CVEs)
• golang.org/x/sys v0.41.0 <86><92> v0.45.0 (CVE-2026-39824, required transitively)
• github.com/jackc/pgx/v5 v5.9.1 <86><92> v5.9.2 (CVE-2026-41889)
• github.com/sirupsen/logrus v1.8.1 <86><92> v1.9.3 (DoS via Entry.Writer())
• urllib3 (test/e2e) <86><92> v2.7.0 (CVE-2026-44432, GHSA-2xpw-w6gg-jr37)

v1.11.0 — PostgreSQL Compatibility and SQL Feature Expansion

• Structured audit logging: New --audit-log flag records all gRPC operations as tamper-proof JSON events in systemdb, filterable via --audit-log-events (all/write/admin).
• PostgreSQL ORM compatibility: Added pg_catalog and information_schema virtual table resolvers to support ORM introspection from Django, SQLAlchemy, GORM, and ActiveRecord.
• immudb verification functions via SQL: immudb_state, immudb_verify_row, immudb_verify_tx, immudb_history, and immudb_tx are now accessible as SQL functions over the PostgreSQL wire protocol.
• PostgreSQL compatibility functions: current_database, current_schema, current_user, format_type, has_table_privilege, and many others; plus SHOW statement emulation for common ORM config queries.
• Subquery support: EXISTS, NOT EXISTS, IN, and NOT IN subqueries now fully implemented in the SQL engine.
• New JOIN types: CROSS JOIN and FULL OUTER JOIN added.
• Set operations: EXCEPT and INTERSECT implemented.
• New SQL functions: Math (ABS, CEIL, FLOOR, ROUND, POWER, SQRT, MOD), string (REPLACE, REVERSE, LEFT, RIGHT, REPEAT, POSITION), and conditional (NULLIF, GREATEST, LEAST).
• ORDER BY enhancements: NULLS FIRST / NULLS LAST syntax supported.
• Upserts: INSERT ... ON CONFLICT DO UPDATE SET implemented.
• Views: CREATE VIEW / DROP VIEW (session-scoped, not persisted to catalog).
• CTEs: WITH clause (Common Table Expressions) materialized and referenceable in the main query.
• Window functions: ROW_NUMBER, RANK, DENSE_RANK, LAG, LEAD, FIRST_VALUE, LAST_VALUE, NTILE, plus windowed aggregates (COUNT, SUM, MIN, MAX, AVG).
• EXPLAIN statement: Returns a human-readable query plan for any SELECT.

v1.11.0 — PostgreSQL Compatibility and SQL Feature Expansion

• Structured audit logging: New --audit-log flag records all gRPC operations as tamper-proof JSON events in systemdb, filterable via --audit-log-events (all/write/admin).
• PostgreSQL ORM compatibility: Added pg_catalog and information_schema virtual table resolvers to support ORM introspection from Django, SQLAlchemy, GORM, and ActiveRecord.
• immudb verification functions via SQL: immudb_state, immudb_verify_row, immudb_verify_tx, immudb_history, and immudb_tx are now accessible as SQL functions over the PostgreSQL wire protocol.
• PostgreSQL compatibility functions: current_database, current_schema, current_user, format_type, has_table_privilege, and many others; plus SHOW statement emulation for common ORM config queries.
• Subquery support: EXISTS, NOT EXISTS, IN, and NOT IN subqueries now fully implemented in the SQL engine.
• New JOIN types: CROSS JOIN and FULL OUTER JOIN added.
• Set operations: EXCEPT and INTERSECT implemented.
• New SQL functions: Math (ABS, CEIL, FLOOR, ROUND, POWER, SQRT, MOD), string (REPLACE, REVERSE, LEFT, RIGHT, REPEAT, POSITION), and conditional (NULLIF, GREATEST, LEAST).
• ORDER BY enhancements: NULLS FIRST / NULLS LAST syntax supported.
• Upserts: INSERT ... ON CONFLICT DO UPDATE SET implemented.
• Views: CREATE VIEW / DROP VIEW (session-scoped, not persisted to catalog).
• CTEs: WITH clause (Common Table Expressions) materialized and referenceable in the main query.
• Window functions: ROW_NUMBER, RANK, DENSE_RANK, LAG, LEAD, FIRST_VALUE, LAST_VALUE, NTILE, plus windowed aggregates (COUNT, SUM, MIN, MAX, AVG).
• EXPLAIN statement: Returns a human-readable query plan for any SELECT.

docs(scan): clarify that ScanRequest.sinceTx=0 waits for latest commi…

What's Changed

Comprehensive Helm chart configuration:

• Full configuration support for immudb via environment variables, TOML files (ConfigMap), command-line arguments, S3 storage, and secure credentials (Kubernetes Secrets).
• Chart version bumped to 1.9.8.

SQL feature expansion:

• Added COALESCE function for null value handling.
• Implemented EXTRACT FROM TIMESTAMP expressions.
• Implemented BETWEEN AND expressions.

Parser improvements:

• Huge restructuring of the parser to better support unreserved keywords in table and column names.

Testing & maintenance:

General improvements to code quality and internal SQL handling.

Downloads

Docker image
https://hub.docker.com/r/codenotary/immudb

immudb Binaries

immuclient Binaries

immuadmin Binaries

What's Changed

Bug Fixes:

• TBTree timestamps are now saved to a separate file on close. This prevents redundant rescans of empty or unchanged indexes and optimizes performance by allowing the system to quickly identify and skip previously processed data.

Downloads

Docker image
https://hub.docker.com/r/codenotary/immudb

immudb Binaries

immuclient Binaries

immuadmin Binaries

What's Changed:

Changes

1. Very significant performance improvement:

• Enhanced the efficiency of the JOIN algorithm in the SQL layer.
• Optimized the evaluation of the ORDER BY clause.
• Huge memory usage reduction for multi-database use cases.

2. SQL feature expansion:

Several enhancements to SQL functionality, such as:

• Support for LEFT JOIN, CASE statements.
• SELECT FROM VALUES syntax.
• Support for generic expressions in ORDER BY.
• PRIMARY KEY constraints on individual columns.

3. Query handling improvements:

• Fixes to logical operator precedence and implementation of constant selection queries for better query execution.

4. Enhanced PostgreSQL compatibility:

• Added support for core PostgreSQL system catalog tables (pg_class, pg_namespace, pg_roles), improving compatibility with Postgres clients and metadata management.

5. Monitoring and metrics:

• New Prometheus metrics for indexing and replication lag tracking to improve observability.

6. Testing & maintenance:

• Additional tests for the indexer and general code quality improvements, including SonarQube warning suppression.

Full Changelog: v1.9.5...v1.9.6

Downloads

Docker image
https://hub.docker.com/r/codenotary/immudb

immudb Binaries

immuclient Binaries

immuadmin Binaries

What's Changed:

Changes

1. Enhanced Index Flushing Algorithm:

• Memory usage of buffered data now also triggers flushing to disk.
• The index node cache is now shared across multiple indices for greater efficiency.
• Writes are now stalled at times to prevent high memory consumption during very intense write operations.

2. SQL Layer Enhancements:

• Support for selecting generic expressions has been added.
• Refactored the FnCall implementation for improved clarity and performance.
• Added support for INSERT INTO SELECT statements.
• Expanded the catalog of core built-in functions significantly.

3. Database Management:

• Databases are now opened and closed on demand, up to the MaxActiveDatabases limit, to reduce memory consumption when managing a large number of databases.

4. Automatic HTTPS Certificate:

• Introduced an option to start the server with an automatically generated self-signed HTTPS certificate.

5. Improved Logging and Auditing:

• Added log rotation based on file size and age for better log management.
• Introduced an option to log all server access for enhanced auditing.

Bug Fixes:

• Resolved an issue where large store.MaxValueSize values caused excessive memory consumption.
• Fixed the "max active snapshots" issue encountered when running queries from PostgreSQL compatible clients.
• Addressed problems with AWS Signature V4 using IAM roles.
• Corrected the improper use of time.Since in a defer statement.
• Fixed security vulnerability CVE-2024-41262 by ensuring the metrics server runs under HTTPS.
• Fixed an issue with gRPC-Gateway when HTTPS is enabled.

Full Changelog: v1.9.4...v1.9.5

Downloads

Docker image
https://hub.docker.com/r/codenotary/immudb

immudb Binaries

immuclient Binaries

immuadmin Binaries

What's Changed:

Changes

• Add support for a new JSON data type;
• Add support for SQL CHECK constraints;
• Introduce SQL privileges to enable fine-grained control over statement execution;
• Add automatic injection of request information to transaction metadata to improve auditing;
• Introduce _tx_metadata reserved column to allow retrieving transaction metadata in SQL tables;
• Implement table import/export through immuadmin command;
• Add creation time and creator to database details listed by immuadmin;

Fixes:

• Fix startup error when S3 remote identifier is enabled;
• Fix immudb crash when updating same table twice in same transaction;

Full Changelog: v1.9.3...v1.9.4

Downloads

Docker image
https://hub.docker.com/r/codenotary/immudb

immudb Binaries

immuclient Binaries

immuadmin Binaries