2.60.0-beta.1 (2026-10-12)

Features

• logger: upgrade kuzzle-logger to 1.5.0 (bdf25a0)

Bug Fixes

• http: answer empty-body requests without waiting for uWS data (#2972) (0517dc9)

2.59.0 (2026-10-01)

Features

• storage: collection write locks and unmanaged indices (c376e74)

2.59.0-beta.1 (2026-10-01)

Features

• storage: collection write locks and unmanaged indices (c376e74)

2.58.0 (2026-09-30)

Features

• take the API contract types from kuzzle-types (b7af241)

2.58.0-beta.1 (2026-09-30)

Features

• take the API contract types from kuzzle-types (b7af241)

2.57.0 (2026-09-30)

Features

• apiKeys: allow an api key to be deleted by the key itself or its fingerprint (#2683) (e172c73)
• ci: ratchet implicit any, and count as unknown as as any (34e29d9)
• cluster: retransmit lost sync messages before evicting (#2785) (0807880)
• h4: convert lib/core/validation/validation.js to TypeScript (787cfd7)
• h5: convert plugin.js and pluginsManager.js to TypeScript (acb958e)
• h6: convert entryPoint.js and httpwsProtocol.js to TypeScript (5d0ef6d), closes #2749
• i1: convert the four lib/kuzzle leaves to TypeScript (1990a22)
• i2: convert internalIndexHandler and dumpGenerator to TypeScript (f7b9ff3)
• native addons from prebuilt binaries, no compiler at install time (4643d45), closes #2839
• setup claude (7de8020)
• skills: add /wrapup skill for end-of-session handoff (bc49d3a)
• td-43: charge for a type assertion — a sixth ratchet, casts (3f8be8c), closes #2730
• td-56: fail on a declaration that lies, adopted or not (b415d7f)
• td-61: make a conversion report the strict count it leaves behind (e21fbf1)
• ts: flip strict on, and split the test code into its own program (e400320)
• use new kuzzle vault algorithm (dcea521)
• utils: distributed reentrant mutex (#2664) (cda3514)
• vault: use old encryption algorithm unless configured otherwise (7eeec62)

Bug Fixes

• API keys can be deleted by key or fingerprint on upgraded installs (99b87a7)
• api: declare RateLimiter's limit without a dead initialiser (0130222)
• bin: --enable-plugins skips a missing plugin with a warning (step 15, D-4) (dfec664)
• cache: copy the Redis config with cloneDeep, not structuredClone (step 15, F-07) (1702cb1), closes #2676
• cache: keep the receiver when calling a hoisted command (b7b7234)
• changelog: resolve leftover merge-conflict markers (3ce76fc)
• ci: anchor the strict-check adopted-path match (622531a)
• ci: let the preflight conversion reminder see uncommitted work (a72c6b1), closes #2774
• ci: make the implicit-any and casts ratchets fail closed (83f6601), closes #2731
• ci: normalise the coverage reports before SonarCloud reads them (d3870be)
• ci: resolve .js targets in the tests/ mirror convention (8c11613), closes #2771
• ci: restore coverage measurement on TypeScript (TD-24, #2692) (b90eac9), closes #2658
• ci: stop the local docker unit runner rewriting the host's node_modules (e8ae7af), closes #2793 #2790
• ci: wait-kuzzle's fourteenth call site, and the prune that removed its runner (ff50dda)
• cluster: a joining node no longer evicts itself for a message it already has (step 15, F-12) (cceefe8), closes #2777 #2781
• cluster: answer a joining node's handshake within its timeout (step 15, F-03) (5b4b8e9), closes 2777/#2781
• cluster: answer the rules node.ts's rename re-scored (17ce162)
• cluster: answer the three rules the J3a rename re-scored (e78f566)
• cluster: close TD-33's cluster half — TD-65 and TD-67 (c753464), closes #2773 #2776
• cluster: do not evict a peer for heartbeats queued behind a recovery (step 15, F-04) (212183d), closes #2896
• cluster: fork the ID card worker by the extension it actually has (690de4d)
• cluster: inline SubscriberState, the last S6564 on the slice (84d9a7c)
• cluster: prove the subscription is live in addNode too (f6def54)
• cluster: satisfy the TS-only rules the subscriber rename exposed (998e727)
• cluster: satisfy the two TS-only rules the rename exposed (afae7af)
• cluster: shutdown before the handshake still disposes (step 15, F-11) (ef882ef), closes #2803
• cluster: the publisher's history is readonly (fdb944e)
• cluster: use Object.hasOwn in isSyncTopic (0d56164)
• core: a node that exits frees the locks it holds (step 15, F-13) (6ab73f3)
• deps: depend on the stable releases of koncorde and dumpme (52cc8cc)
• deps: withLock on redis-semaphore, which supports Node 20 (step 15, D-3) (6a2f9ae)
• document: export accepts an array sort (step 15, F-02) (45c2966), closes #2666
• dump: check suffix against a regexp to sanitize user input (#2665) (79c9adf)
• dump: keep handled-error dumps valid and never unhandled (step 15, F-05) (4356506)
• errors: restore v2.5...

2.57.0-beta.5 (2026-09-30)

Bug Fixes

• plugin: context.constructors.ESClient follows the configured major version (0a6bc72)

2.57.0-beta.4 (2026-09-28)

Bug Fixes

• deps: depend on the stable releases of koncorde and dumpme (52cc8cc)

2.57.0-beta.3 (2026-09-28)

Bug Fixes

• API keys can be deleted by key or fingerprint on upgraded installs (99b87a7)
• logstash access logs carry the request headers once (b8b05c8)
• published typings compile without dev dependencies (2af8b4c)

2.57.0-beta.2 (2026-09-27)

Features

• native addons from prebuilt binaries, no compiler at install time (4643d45), closes #2839

Bug Fixes

• realtime matching no longer throws after geospatial unsubscriptions (eca6292), closes kuzzleio/boost-geospatial-index#29 kuzzleio/koncorde#84 Koncorde#test