[1.8.0] Release TODOs and cross-repository integration checklist #3242

1.8.0 release checklist

Core: Server / Hubble / Loader / Client. Java 17 delivered. Rebuild and restage frozen RCs; 1.7 → 1.8 compatibility remains a release gate.

Checked = delivered, not RC accepted. CI/author tests/independent review differ from same-RC acceptance; old scores never transfer or waive CI/RC. Targeted refresh: Oct31 18:53 UTC; unchanged evidence retains its prior date/version. New scope is not admitted by this audit.

Pending

• Post-merge / scope undecided · Oct31

  • 🔗 Doc #555 · Static 8.9; live lifecycle pairing open.
  • 🔗 Doc #554 · API 0.73 edge-free; pairing/partial-target/concurrent-DDL acceptance open.
  • P2 · 🔗 Toolchain #880 · Merged; confirmed hidden rejection reasons. Safe diagnostics/write counts/uncertainty/no rollback must coexist.
  • Hubble/Loader/Client · import/partial failure, algorithms/readback, scope/lifecycle/cost unverified; acknowledgments ≠ unique inserts.
  • Deployment/clone · chart/image, auth/HStore, restart/recovery and same-RC open; merge admits no optional scope or gate waiver.

• New upstream Store / transport work · scope not yet admitted

• Server / PD / Store

  • 🔗 Server #3432 · Cgroup-path and command-line memory-budget follow-up; CI passes, current independent review/runtime/RC open; unscored.
  • 🔗 Server #3413 · gRPC allocator-property regression coverage; CI passes, runtime/RC open; unscored.
  • 🔗 Server #3414 · Logging dependency update; CI fails, cause/current review unverified; unscored.
  • 🔗 Server #3421 · Guava dependency update; CI fails, cause/current review unverified; unscored.
  • Post-merge acceptance · 🔗 Server #3418 · Split-lock P1 and Exiting Raft-address notification follow-up remain unresolved; merge is not RC acceptance.
  • Post-merge acceptance · 🔗 Server #3420 · Conditional trailing-segment recovery P2 remains; verify recovery separately from merge/CI.
  • P0 · 🔗 Server #3399 · Oct29 the recorded revision: Server memory job fails. Existing reviewer says missing-LOCK startup risk remains; this audit did not reproduce it. [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id #3224, migration/website/RC remain open. Historical Oct27 version: 15 checks passed/4 skipped; Docker/launcher issues reported repaired in an earlier version.
  • P0 · 🔗 Server #3330 · Draft; current CI failed, current review incomplete. Oct23 7.0/10 (prior 7.6) and Up-before-restoration concern remain historical. Refusal is not migration; [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id #3224 remains.
  • P0 · HStore upgrade #3224 · require old-data reads, Raft replay, first allocation/write, per-replica rollback; refusal is not migration
  • P1 · Property-query · docs/live-backend RC pending
  • P1 · 🔗 Server #3192 · conflicts; YAML/image/config RC
  • P1 · 🔗 Server #3253 · Oct28: review and static/private-file probe confirm crontab lock-fd closure; CI approval pending. No cron/service test. Override/restart/legacy-cron/docs repairs: reviewer-reported only; HTTPS keystore/Spring/plugin findings unverified. Oct21 5/10 historical; current unscored, runtime/RC open.
  • P1 · Cypher API/Hubble · compatibility fixed; same-RC pending
  • P1 · Cypher date folding · backend/perf/scope/RC pending
  • P1 · Binary serializer #3225 · 🔗 Server #3375: mixed-version serializer blocker; header CI red; unscored
  • P2 · 🔗 Server #3377 · Spring dependency update: current servlet compile failure; runtime skipped
  • P2 · Metrics labels · repaired; live scrape/RC pending
  • P2 · V2 schema auth · OLAP deferred; HStore RC pending
  • P1 · Loading-owner · Loader/auth-HTTP/crash RC pending
  • P2 · Discovery identity · fixed; matching-image/live-PD RC pending
  • 🔗 Server #3429 · Oct31 master-sync; CI passes, unscored; cluster/RC open. Prior review, 1 pass/10 skip; Oct28 static 8.3.
  • Draft / excluded from active ranking · 🔗 Server #3430 · Nov1 head: official-source, dependency-license and Codecov patch fail (14 pass/4 skip); reviewer approval is separate. Prior static Store-reopen/source-deletion concern retained, not revalidated by this audit; migration decision/RC open.
  • P2 · Traversal follow-up #3346 · long-term; no new gate
  • Post-merge acceptance / scope undecided · 🔗 Server issue #3415 closed Oct29 by merged 🔗 #3424, recorded head and merge; 7 checks pass/9 skip. Explicit-gRPC dedup repair delivered; independent live/RC acceptance and any release-gate change remain undecided.

• Schema replacement · split dependencies

  • P1 · PD read/election RC · multi-PD/performance pending
  • P1 · Schema counter/auth-key · HStore CI pass; multi-server/restart RC pending
  • P1 · 🔗 Server #3376 · Oct29 version: product checks pass; codecov/project fails. Prior bounded replay/charset review is historical; current-head review/cluster/perf/RC unscored.
  • P1 · 🔗 Server #3382 · CI green; renewal race/malformed-key pass abort; real PD/RC open; model-only perf
  • P1 · 🔗 Server #3383 · Cluster dependency CI red; shared-worker risk acknowledged; quorum/perf/RC open
  • P1 · Watch/ACK · ASF PR pending; shutdown repair; multi-PD election/cost
  • P1 · Server cache integration · ASF PR pending; hold: name-miss refill churn

• Deployment / Hubble

  • P2 · PD health · fatal-Raft fixed; reinit/Compose/live-PD RC pending
  • P1 · 🔗 Server #3362 · Oct21 readiness 4/10; test compile/credential blockers; TTL/Secret/60s shutdown nonblock (OnDelete, 300s grace); RC
  • P2 · Helm OCI · metadata/name/signing delivered; signature/live-upgrade RC pending
  • P1 · Graph-binding recovery #3228 · repair merged; multi-PD startup/rollout, data/index retention, same-RC remain high priority
  • P1 · 🔗 Server #3221 · workflows pass; blocks: stale PD failures, empty Store list, HBase graphspace dedup; recovery/isolation/RC open
  • P2 · Per-Pod index · completed jobs/stable-schema/live-Pod RC pending
  • P2 · Docker PD registration · docs/image RC pending; writable-conf separate
  • P2 · Arthas · runtime/guide merged; interrupted-attach cleanup/package/RC pending

• Lifecycle / optional features

  • Optional / draft · 🔗 Server #3401 · Nov1 head: check-license fails, 15 checks pass/4 skip. Prior CRLF startup finding covers Oct27 693470e05e6e; Oct24 findings remain historical. Affected-scope repairs/current independent review not verified by this audit. Unscored, native/RC open.
  • Scope undecided · 🔗 Server #3388 · Serializer fallback fixed (static); CI 6 pass/7 skip; unscored, runtime/RC open. Prior review and fixture/CI failure are historical.
  • P2 · 🔗 Server #3359 · Oct21 readiness 4/10; test compile/leader-change failures; RC
  • P2 · PD metrics · registered-Store scrape/failed-refresh throttling pending
  • P2 · 🔗 Server #3356 · Interval repair submitted; core CI green/project red; current independent review/load/RC open (Oct21 8.5/10 historical)
  • P2 · 🔗 Server #3081 · Optional/unscored; Oct31 static review: failed purge + local loss before new CURRENT may restore old data; unretained native-handle race; SST cleanup risk. Prior retry-epoch gap remains; workflow/coverage green, live/RC unverified.
  • P1 · RPC lifecycle · cleanup-retry identity/cross-Server/deployment/RC pending
  • P1 · Scan cancellation · request serialization delivered; latency/perf/RC unverified
  • P1 · Deletion RC · admission/retry/restart/cross-Server recovery
  • P1 · 🔗 Server #3299 · Arthas CLI CI failure; cause unconfirmed. Codecov/native Topling acceptance open.
  • P2 · Retryable restore acceptance · migration/rollback/native/RC

• Toolchain / clients

  • P2 · Toolchain release artifacts #821 · author-reported signing/source/Javadoc overlap; deduplication and signed local-release/source-archive smoke pending; no new release gate
  • P2 · Hubble smoke · fixture delivered; candidate/1.7 CI pass; immutable RC pending
  • P2 · Client/Loader · tests delivered; Server1.7/full integration/immutable RC pending
  • P2 · Loader/HDFS concurrency · 🔗 Toolchain #858 delivered as replacement for closed-unmerged 🔗 #710; immutable same-RC acceptance remains open
  • P2 · CI/image advisory #792 · cache/provenance + image/Compose smoke; no new gate

• Documentation · acceptance

  • Post-merge · 🔗 Doc #552 PPR omission remains after line wrapping; matched-runtime/RC open.
  • 🔗 Doc #547 · Periodic leader-balance guide depends on 🔗 Server #3356; site CI passes, current independent review/live-PD/RC open.
  • P2 · 🔗 Doc #543 · Oct30 review reports incorrect 1.0 navigation stats and remaining Compose/profile guidance; current-head CI fails. Independent runtime/RC open.
  • 🔗 Doc #541 · Post-merge API/runtime/RC unverified.
  • P2 · PD timeout guide · guide/runtime delivered; live-PD/RC pending
  • 🔗 Doc #535 · Post-merge recovery/RC with 🔗 Server #3355 unverified.
  • P2 · 🔗 Doc #532 · Oct30 version: prior nonblocking old-image probe/shared-credential/ambiguous-RPC review is historical; current-head review/unscored, CI authorization/RC open.
  • P0 · 🔗 Doc #523 · Draft; refusal wording narrowed, site CI passes; runtime draft/migration pending
  • P1 · Startup guide · docs/identity code delivered; package/RC pending
  • 🔗 Doc #503 · Post-merge query/runtime/RC unverified.
  • P1 · 🔗 Doc #498 · draft; align replacement behavior
  • P1 · 🔗 Doc #499 · Oct31 EN/CN now state HTTP 200 / status.code 400 (source); CI authorization required. HG-18/full current-head review/API/Hubble/runtime/RC remain open. 🔗 Doc #499 Oct31 review: 1.0 navigation count mismatches in a bounded model; index-card claims also need correction.
  • P1 · 🔗 Doc #494 · voter/shrink + operational checks
  • P1 · Deletion guide · config removal preserves backend; paired RC pending
  • Post-merge · 🔗 Doc #520: 🔗 #520 prior version-scope finding needs delivered-guide/package revalidation; same-instance URL/token/provider/RC open.
  • P2 · Java 17 client-guide repair · GraphBinary registry/builder example; paired API/RC
  • P2 · Diagnostics/Topling/Foundation guides · code delivered; package/RC pending
  • P2 · Helm guide · Server probe/live-Pod RC pending

• AI / integration / release

  • 🔗 AI #390 · Query-length limit proposal; current-head PR-triggered CI not found, independent review/compatibility/RC unverified; scope undecided.
  • 🔗 AI #391 · Ontogeny on 🔗 AI #380; new head unreviewed, CI reports success; migration/outbox/live-runtime/RC open; scope undecided.
  • P2 · Vermeer acceptance · matched Computer/Hubble images, load cancellation, live-cluster/same-RC pending
  • P2 · Signed RC / staged-SDK · tooling/URL-hash fix delivered; match staging to frozen Server, then signed SVN RC/manual licensing
  • P2 · 🔗 AI #383 · cached numeric-ID repair and fake-endpoint parser tests; current CI passes; independent delta/live-Server/same-RC pending
  • P2 · 🔗 AI #385 · escaping; author parser tests; CI authorization/review pending; depends on 🔗 AI #383
  • P2 · AI post-merge · 🔗 AI #372: conflict diagnostics (fake LLM); import/RC open
  • P1 · AI ingestion #373 · code/live-provider/GraphMCP gaps

Merged / completed

Delivery ≠ RC. Oct31 additions: prior reviewed-version static /10 (except external scores), not merged-head approval; gates remain.

Server

• 🔗 #3439 · Edge-free clone; 8.4; CI success; joint/RC open.
• 🔗 #3440 · Vermeer stdout guide; prior license CI.
• 🔗 #3441 · Lifecycle ≠ PD/partition/readiness; 8.7.
• Prior: Server 7.3 (🔗 #3439 keys, 🔗 #3439 suite); Hubble 7.2 (🔗 #870 callback, callback probe). unit failure fixture repaired; 8.4.
• 🔗 #3438 · Track latest Vermeer image.
• 🔗 #3437 · Close sub-iter when MultiListIter closed early.
• 🔗 #3435 · Run metrics regressions in CI.
• 🔗 #3434 · Connect Vermeer operations health.
• 🔗 #3433 · Provide compact Raft metrics for dashboard collection.
• 🔗 #3423 · Remove temporary development notes.
• 🔗 #3409 · Bound member lookups in RaftEngine.getMembers().
• 🔗 #3422 · Integrate optional Vermeer with Hubble.
• 🔗 #3410 · Cover the id-only projection through QueryUtil.buildPlan.
• 🔗 #3408 · Stop ProjectionStage clearing dedup keys in place.
• 🔗 #3406 · Simplify Java 17 control flow.
• 🔗 #3405 · Retain repeated union groups.
• 🔗 #3428 · Separate bootstrap/runtime quorum; runtime quorum and real-Raft/RC pending (prior Oct28 static 8.4).
• 🔗 #3431 · Clarify indexed REST paths; caller context repaired, runtime/RC pending (prior 8.5 (context finding)).
• 🔗 #3355 · Budget RocksDB from available memory; Raft write-buffer, load and recovery/RC pending (prior Oct28 independent 8.7, Oct24 external 9).
• 🔗 #3416 · Preserve channel-init caller context; cold-start/context/runtime RC pending (prior 8.3, Oct27 8.2 with failed CI).
• 🔗 #3425 · Fix Vermeer template final newline; CI-selection failure is historical.
• 🔗 #3426 · Deduplicate drain migration submission; multi-node drain/recovery RC pending.
• 🔗 #3427 · Expose authenticated native HTTP; HTTP exposure and RC pending.
• 🔗 #3419 · Retry learner promotion; multi-node learner promotion/recovery RC pending (prior Oct27 independent static 8.5).
• 🔗 #3417 · Refresh recovery shard metadata; NOT_FOUND sibling recovery unverified (prior Oct27 static 7.0; earlier 8.2 is superseded).
• 🔗 #3418 · Preserve Store drain state; ABBA inversion/failed-drain retry unverified (prior Oct27 static 6.0; earlier 7.5 is superseded).
• 🔗 #3420 · Honor Raft segment size; persisted undersized-segment resize/restart concern unverified (prior Oct27 independent static 7.0).
• 🔗 #3402 · Integrate native SeaTunnel deployment; SeaTunnel Parallel readiness and easy-mode isolation/HStore/HA pending.
• 🔗 #3403 · Clean deleted GraphSpace statistics; orphan-PD-record concern/cross-replica RC pending (prior Oct23 static 7.7 predates Oct24 finding).
• 🔗 #3379 · Wait for held metadata RocksDB locks; RC open.
• 🔗 #3400 · Configure quota metadata namespace; live-PD/RC open (prior Oct23 static 8.0).
• 🔗 #3398 · Refresh GraphSpace quotas, same-RC open (prior static 8.5).
• 🔗 #3395 · Preserve traversal/PD contracts; cluster/RC open.
• 🔗 #3394 · Preserve task/query failure causes; cluster/RC open.
• 🔗 #3393 · Harden worker/shuffle lifecycles; cluster/RC open.
• 🔗 #3391 · Correct GraphSpace usage/quota/removal.
• 🔗 #3326 · Match master dependency baselines; post-merge baseline/RC open (prior Oct16 independent 7.5, superseded).
• 🔗 #3380 · Privatize RaftEngine construction.
• 🔗 #3385 · Isolate Raft read-index test stubs.
• 🔗 #3387 · Limit PD Raft RPC to replication; wire/RC open.
• 🔗 #3390 · Grow serialization buffers geometrically.
• 🔗 #3360 · Diagnose startup JVM thread failures; native/RC open.
• 🔗 #3243 · Reject incomplete cross-label index coverage.
• 🔗 #3370 · Bind Cypher date temporaries.
• 🔗 #3358 · Expose fatal Raft health errors.
• 🔗 #3374 · Reregister graphs after clear; live-HStore/recovery/same-RC pending.
• 🔗 #3368 · Harden PD reads/elections.
• 🔗 #3373 · Fix DeepWiki badge.
• 🔗 #3369 · Protect schema IDs on truncate/auth clear.
• 🔗 #2945 · Improve activation/local diagnostics; native/RC separate.
• 🔗 #3371 · Avoid duplicate startup configuration; independent HBase/same-RC pending.
• 🔗 #3367 · Test nullable-boolean ORDER BY; test-only, same-RC separate.
• 🔗 #3366 · Allow anonymous Cypher.
• 🔗 #3365 · Add official Helm icon; live deployment/RC separate.
• 🔗 #3329 · Coordinate graph RPC lifecycle; cross-Server/RC separate.
• 🔗 #3361 · Add Helm OCI metadata; live upgrade/RC separate.
• 🔗 #3331 · Coordinate loading owners.
• 🔗 #3350 · Allow V2 schema async tasks.
• 🔗 #3349 · Detect invalid indexes per Pod.
• 🔗 #3357 · Expose per-Store state/leader gauges.
• 🔗 #3352 · Map discovery environment settings.
• 🔗 #3351 · Bind local graphs to Gremlin.
• 🔗 #3259 · Preserve legacy Cypher errors.
• 🔗 #3322 · Expose discovery identity.
• 🔗 #3348 · Deduplicate/escape Prometheus metrics.
• 🔗 #3354 · Serialize scan streams.
• 🔗 #3353 · Include same-millisecond PD logs.
• 🔗 #2825 · Align SameNeighborsBatch client behavior.
• 🔗 #3342 · Prevent lost kout results.
• 🔗 #3344 · Sanitize metric names.
• 🔗 #3345 · Unblock batch-scan cancellation.
• 🔗 #3347 · Close retained graphs on shutdown.
• 🔗 #3338 · Provide easy/strict Helm modes.
• 🔗 #3339 · Compare canonical snapshot paths.
• 🔗 #3340 · Preserve caller transactions on cancel.
• 🔗 #3341 · Preserve integer-map entries on resize.
• 🔗 #3343 · Preserve selected coverage.
• 🔗 #3336 · Align Java 17 runtimes.
• 🔗 #3337 · Scope CI and reduce runner usage; prior final CI failed.
• 🔗 #3335 · Handle missing MAC addresses.
• 🔗 #3290 · Decode UTF-8 auth and first colon; consumer charset/auth RC pending.
• 🔗 #3325 · Honor cgroup reclaim protection; OOM and RC pending.
• 🔗 #3328 · Exclude images from source archives; rebuilt signed-package pending.
• 🔗 #3309 · Extend cross-module tests; live-cluster/RC open.
• 🔗 #3321 · Skip oversized off-heap cache keys.
• 🔗 #3332 · Correct crash-volume guidance.
• 🔗 #3333 · Upgrade Arthas to 4.1.5; prior HBase image setup failed; binary/license RC pending.
• 🔗 #3308 · Drain tasks before graph deletion.
• 🔗 #3327 · Preserve auth property strings; recovery/RC pending.
• 🔗 #3323 · Scope release SVN additions.
• 🔗 #3320 · Respect cgroup heap limits; mainline and same-RC heap pending.
• 🔗 #3313 · Recover unavailable scan channels.
• 🔗 #3315 · Enforce vertex GraphSpace permissions.
• 🔗 #3314 · Release traversal worker leases.
• 🔗 #3316 · Bound final partition diagnostics.
• 🔗 #3317 · Close failed traversal iterators.
• 🔗 #3311 · Preserve container exit status; real-container/RC open.
• 🔗 #3310 · Bound jemalloc downloads.
• 🔗 #3312 · Exclude source assets from charts; multi-node/RC separate.
• 🔗 #2994 · Clarify label-query conditions; consumer/RC pending.
• 🔗 #3258 · Preserve crash diagnostics on restart.
• 🔗 #3291 · Preserve hostname Store addresses.
• 🔗 #3301 · Initialize queries before serving.
• 🔗 #3298 · Synchronize session close/reset.
• 🔗 #3269 · Expose Docker CI logs.
• 🔗 #3207 · Fix pagination at limit boundaries.
• 🔗 #3204 · Honor transaction thread interrupts.
• 🔗 #3193 · Expose query batch boundaries.
• 🔗 #3184 · Avoid unsupported sysprop pushdown.
• 🔗 #3164 · Reject compaction-busy snapshots.
• 🔗 #3157 · Recover KV watches after reconnect.
• 🔗 #3234 · Rejoin rebuilt empty Stores.
• 🔗 #3232 · Serve partition GETs on followers.
• 🔗 #3233 · Return PD balance-leader errors.
• 🔗 #3302 · Complete transaction cleanup; cross-Server transaction RC pending.
• 🔗 #3303 · Complete RPC/scan lifecycle; native lifecycle RC pending.
• 🔗 #3304 · Drain native TTL resources; native TTL/shutdown RC pending.
• 🔗 #3293 · Make snapshot restore retryable; native migration/rollback RC pending.
• 🔗 #3270 · Consolidate graph-core foundations; namespace/OLAP RC pending.

Toolchain

• 🔗 #870 · Clone UI / API 0.73; 8.4.
• 🔗 #871 · Vermeer PersonalPageRank.
• 🔗 #872 · Account/help; prior CI failed.
• 🔗 #873 · Text2GQL; optional.
• 🔗 #874 · Graph/schema cards; prior CI 502.
• 🔗 #875 · History/copy.
• 🔗 #876 · PD diagnostics; 8.6.
• 🔗 #877 · Import counters; legacy unknown; 8.6.
• 🔗 #878 · K-out paths/catalog; 8.3.
• 🔗 #879 · Vermeer overview; 8.6.
• 🔗 #880 · No destructive rollback; P2 open; 8.7 → 8.0.
• 🔗 #881 · Node search; 8.8.
• 🔗 #882 · Import / upload isolation; 8.5.
• 🔗 #883 · Zero previews / guidance; 8.6.
• 🔗 #884 · Freshness/range/metrics; 8.6; CI.
• 🔗 #885 · tslib / license inventory; 8.6; config-only.
• 🔗 #859 · Handle schema defaults and timeouts.
• 🔗 #860 · Correct profile roles and config log timeout.
• 🔗 #861 · Separate OLTP and OLAP algorithm workflows.
• 🔗 #868 · Show Vermeer cluster health.
• 🔗 #862 · Collect graph snapshots and explain unavailable results.
• 🔗 #867 · Gate core UI flows with reusable verification.
• 🔗 #864 · Restore original Schema examples and previews.
• 🔗 #865 · Show canvas failures once above graph overlays.
• 🔗 #863 · Align GraphSpace resources and default storage to 256 GB.
• 🔗 #866 · Use compact Raft metrics and clarify monitoring recovery.
• 🔗 #854 · Guard delayed minimap work after disposal.
• 🔗 #853 · Explain unverified connections before sign-in.
• 🔗 #852 · Clear completed and stale schema selections.
• 🔗 #857 · Preserve schema-typed vertex update IDs.
• 🔗 #856 · Clarify Vermeer failures and unavailable results.
• 🔗 #855 · Distinguish unstyled vertex labels with stable colors.
• 🔗 #851 · Run SameNeighborsBatchApiTest in the API suite.
• 🔗 #850 · Fail migration on backup data-page errors.
• 🔗 #858 · Prevent concurrent file read failures.
• 🔗 #841 · Stabilize pending states and browser checks.
• 🔗 #843 · Keep submitted tasks visible and clarify query previews; RC open.
• 🔗 #844 · Recover GraphSpace edits and navigation reliably; RC open.
• 🔗 #845 · Distinguish service readiness from registration; Store deadline excludes PD; service-readiness RC pending (prior Oct23 static 8.0).
• 🔗 #847 · Keep failed schema deletions retryable; RC open.
• 🔗 #848 · Prefer Vermeer for OLAP; Computer opt-in, live OLAP/RC pending.
• 🔗 #849 · Make operations collection failures actionable; RC open.
• 🔗 #840 · Keep the graph minimap within its resized canvas, UI/RC open (prior static 8.5).
• 🔗 #842 · Discover PD members without scanning partitions, performance/RC open (prior static 9.0).
• 🔗 #846 · Explain Vermeer load service token permission, live-deployment/RC open (prior static 9.0).
• 🔗 #833 · Bound interactive query and property previews; mixed-version/immutable RC pending; stopped validation is not reopened (historical static 8.8).
• 🔗 #836 · Integrate native Vermeer graph and task lifecycle; paired Computer/live-cluster RC pending.
• 🔗 #839 · Simplify Java 17 maintenance; leading-empty-line preview/Loader mismatch and RC pending.
• 🔗 #837 · Expose collection diagnostics/consistent health; cluster/RC open (prior review).
• 🔗 #838 · Align PD/Server health; cluster/RC open (prior review).
• 🔗 #834 · Report graph-space usage and limits; mixed-version RC open.
• 🔗 #832 · Render metadata before bounded graph statistics.
• 🔗 #828 · Sign and attach release artifacts once; signing/archive/RC open.
• 🔗 #826 · Migrate to G6 5 and modernize builds; UI/package/1.7/RC open.
• 🔗 #827 · Prevent blank pages over HTTP; prior stale-input CI failure was not a functional test result; UI/RC pending.
• 🔗 #824 · Support text2gql queries; shutdown cleanup repair delivered separately; async Cypher/matched RC pending.
• 🔗 #825 · Finish interrupted pool cleanup.
• 🔗 #805 · Expand toolchain tests; test-only review exception does not qualify Server 1.7/integration/RC.
• 🔗 #823 · Verify Hubble query smoke results.
• 🔗 #817 · Initialize batch update strategies.
• 🔗 #822 · Include CDC launcher helper.
• 🔗 #819 · Reject missing values before Flink.
• 🔗 #820 · Review Go dependency manifest changes.
• 🔗 #816 · Scope toolchain validation.
• 🔗 #577 · Json util supply method to parse json list.
• 🔗 #813 · Keep source release helpers outside GitHub.
• 🔗 #812 · Guard cleanup after failed startup; concurrent startup-cleanup recovery/RC pending.
• 🔗 #811 · Align mapped endpoint fixtures; mainline and same-RC fixture pending.
• 🔗 #809 · Warn for legacy file options.
• 🔗 #810 · Honor caller heap limits; post-merge freshness rejection was not a product-test failure; caller-heap RC pending.
• 🔗 #806 · Refresh HTTPS service fixtures.
• 🔗 #807 · Allow propertyless edge labels.
• 🔗 #808 · Accept response file arguments.
• 🔗 #799 · Route schema requests by graph space.
• 🔗 #800 · Preserve launcher arguments.
• 🔗 #801 · Propagate loading failures.
• 🔗 #802 · Preserve native date conversions.
• 🔗 #803 · Propagate restore worker failures.
• 🔗 #804 · Include source runtime dependencies.
• 🔗 #785 · Upgrade Java 17 for Spark-API; optional inclusion and distributed Spark/RC pending.
• 🔗 #786 · Migrate CDC to Flink 2.2 on Java 17; optional inclusion and Flink recovery/RC pending.
• 🔗 #779 · Run affected actions in better order.

Doc

• 🔗 #503 · Index guide; Oct24 external 8.8; CI.
• 🔗 #520 · MCP guide; prior 1.7.1 static finding, wheel unverified; CI.
• 🔗 #535 · RocksDB memory sizing; unscored; CI.
• 🔗 #541 · Gremlin 3.8; prior review; CI.
• 🔗 #552 · HTTP contracts; CI passed, unscored; paired 🔗 Server #3431 / 🔗 Toolchain #859.
• 🔗 #553 · Preserve language menu contrast.
• 🔗 #551 · Authenticated native HTTP access guidance; publication/live-access/RC pending.
• 🔗 #548 · OINK 1.4.0 and historical-build reuse; browser/cache-performance/publication pending (prior Oct28 independent source 8.6; Oct27 8.4 superseded).
• 🔗 #544 · Non-root PD/Store/Server guidance; runtime/RC and image-guide follow-ups remain, without urgent image requirements.
• 🔗 #545 · Refreshed bilingual guides and screenshots.
• 🔗 #546 · Corrected homepage TLP wording; deployment unverified.
• 🔗 #549 · Optional SeaTunnel deployment/jobs; OCI/RC pending (prior Oct28 8.8, Oct27 8.7).
• 🔗 #550 · Optional Vermeer/SeaTunnel deployment guidance; publication/RC pending.
• 🔗 #538 · Documented PD Raft connection and snapshot-install timeouts.
• 🔗 #542 · Version-isolated documentation indexes; 27 bounded adapter checks, with full acceptance unscored.
• 🔗 #540 · Documented Text2GQL and refined Hubble guides; same-project-name follow-up/RC pending.
• 🔗 #537 · Corrected the duplicate homepage GitHub card title.
• 🔗 #539 · OINK 1.3.1 upgrade; final site CI passed, not RC acceptance.
• 🔗 #536 · Staged-SDK source-package verification; signed-RC separate.
• 🔗 #528 · Secure Arthas diagnostics guidance; native/RC separate.
• 🔗 #531 · PD per-Store state and leader-count gauges; live-scrape/RC separate.
• 🔗 #529 · Docker PD-registration settings guidance; published-image/RC separate.
• 🔗 #517 · Align distributed startup requirements.
• 🔗 #527 · Explained easy Helm deployments.
• 🔗 #510 · Explain ToplingDB runtime setup.
• 🔗 #511 · Explain shared foundation migration.
• 🔗 #509 · Describe Server crash files and HStore image stdout logs.
• 🔗 #519 · Clarify graph maintenance and client routing.
• 🔗 #508 · Require Java 17 starting with 1.8.0.
• 🔗 #524 · Located the SDK verifier outside CI; rebuilt artifacts remain pending.
• 🔗 #522 · Isolate ordinary Client release classpath.
• 🔗 #512 · Adapt release validation for 1.8.0.
• 🔗 #518 · Clarify loader argument and progress handling.
• 🔗 #521 · Defaulted the release validator signer to imbajin.
• 🔗 #513 · Explain Store callbacks and CI policy.
• 🔗 #516 · Clarify Go schema and status handling.
• 🔗 #515 · Validate OINK with cold module caches.
• 🔗 #514 · Upgrade OINK to 1.2.0 and improve docs UX.
• 🔗 #501 · Sync core modules guides.
• 🔗 #502 · Remove role election config options.
• 🔗 #505 · Improve Ask AI consent and community entry.
• 🔗 #506 · Align hubble guides with master.
• 🔗 #507 · Streamline CI and improve documentation.

AI

• 🔗 #389 · Python 3.12–3.14 support and dependency modernization; live-provider/integration/RC pending.
• 🔗 #386 · 1.8.0 alignment and selective Python CI consolidation.
• 🔗 #387 · Standalone graph-design and extraction SDK; live-provider/RC pending.
• 🔗 #372 · Add reviewed property-graph extraction.
• 🔗 #384 · Corrected DeepWiki badges.
• 🔗 #382 · Align toolsets and harden AI refresh contracts; lifespan/background refresh/database identity and RC remain.
• 🔗 #374 · Restore Python client distribution name.
• 🔗 #375 · Parse task error_message.
• 🔗 #377 · Preserve semantic embedding batch order.

Computer

• 🔗 #368 · Reject no-op task submissions.

• 🔗 #369 · Expose independent cluster readiness and process telemetry.

• 🔗 #366 · Load-failure handling and scoped worker readiness; cancellation/live-cluster/RC pending (prior Oct23 static 7.5).

• 🔗 #367 · File credentials for Helm deployments; matching-image/RC pending.

• 🔗 #357 · Prevent sender control future race.

• SeaTunnel 3.0.0 · Released; matching-plugin migration separate.

Release decisions and acceptance boundaries

Existing acceptance, no new scope/gates. One frozen RC; merges, models, author probes, skips and prior RCs are insufficient.

• Upgrade / recovery
  • P0 · HStore #3224: verify old/new rows through snapshots, replay, first allocation/write and every-replica rollback. Reported 1 PD + 3 Store reproduction: old 0xFFFE rows become unreachable; JAR rollback does not repair mapping, and remapping may hide new-ID rows. Not proven permanent loss; independently verified migration/recovery required, refusal insufficient.
  • P1 · Recovery: old PD/Store data, init_store.enabled, binary serializer compatibility, credentials/prefixes, data/schema/index retention, metrics, backup/restore/rollback, empty-volume replacement/old-ID retirement and PD/DNS recovery. 🔗 Server #3265 synthetic SST/WAL/single-node tests do not qualify upgrades/failover.
  • P1 · Native lifecycle: ownership/failed cleanup, authenticated scan/TTL, timeout/PID, multi-replica restart, cleanup-retry identity and cross-Server deletion/recovery on matching packages. Serialization is not latency/performance acceptance.
• Query / schema / API
  • P1 · Query/index: nested/negative/count predicates; local/optional/coalesce/union/choose/map/flatMap/math; composite-index/deletion races; ordered partitions/scans, limits/offsets/pages/cursors and duplicate/missing rows. Upgrade all Stores before ordered-scan protocol; reject mixed versions. Retain Track HStore core-test exclusions and property codec mismatch #3090 codec/lifecycle exclusions and prior scans. EN/CN PRIMARY_KEY, parent-index and schema-visibility docs must match runtime.
  • P1 · Schema stack: PD-first/DDL freeze; leader-term IDs, rejected snapshots, elections, rollback/API/tasks and multi-Server restart. Resolve partial-init/concurrent-start and CREATING/recreated-graph drop races; name-miss cache churn stays on hold. Watch shutdown/double-close/plain-write repairs and author probes do not qualify multi-PD/cost.
  • P1 · Cypher (🔗 Server #3289): preserve parser/error/legacy-success contracts with Hubble. Seventeen $props.field values are not top-level parameters (cap16); CREATE (n:label $props) sets no PK. Verify ID strategy/schema, required properties, parallel-edge errors, rounding/CN examples and migration E2E. Null-binding no-row applies only to equality. Advanced HStore/Bolt, cross-request transactions and performance unqualified.
  • P2 · Java/TP (🔗 Server #3263, 🔗 Server #3261; 🔗 Server #3117 historical): Java17 build/services, Commons/RPC Java11 bytecode; TP3.8.1/Groovy4.0.25 default Gremlin, GraphBinary Schema/Blob, HTTP V1 Tree, caller-owned GValue, String-ID/count/DATE. Qualify API/Structure/Process on Memory/RocksDB/HStore, single/multi-cluster, downstream clients/tools/Computer, mounted config and old data. Prior TP skips, PD memory/swap and GraphID scaling close neither cause nor [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id #3224.
  • P2 · Foundation/OLAP (🔗 Server #3305, 🔗 Server #3306): source-only null-graph edge-deserialization, namespace/rebuild/long-text/OLAP acceptance and null-graph regression disposition. Shared imports/process-wide namespace/clean-output delivery does not qualify downstream migration. Quiesce affected OLAP writes through cleanup; no concurrent-writer guarantee.
• Deployment / identity / diagnostics
  • P1 · Graph-binding #3228: high priority despite repair/closure. Verify multi-PD/Server rollout, password rotation, data/index retention, retained-PVC reconnect and independent Hubble login/list/query/logout. Retries must expose failure; NetworkPolicy must bound offline allocation. An observed stall is not proof of timeout expiry.
  • P1 · Readiness: metadata-graph failures/failedGraphs, stale failures, empty Stores, HBase GraphSpace dedup, k3s/default budgets, data-before-Up, truthful tasks/manual restore. Ping is not Raft/data proof; distinguish fatal PD from transient quorum loss. Never delete LOCK. Verify password caches, native/JVM limits and offline startup.
  • P1 · Helm: one Leader/only Followers; minStoreCount=replicas may prevent Store retirement. Verify EN/CN growth/PDB/PD-roll/balance, additive NetworkPolicy, Secret/password/auth-cache rollout and corrected 30-minute Tombstone handling. Chart delivery does not qualify live probes, completed jobs/stable schema, OCI signatures/upgrades or published images.
  • P1 · Credentials: reject controls in both fields and username colons; allow password colons and ordinary spaces/commas. Align create/update/login and reject unsupported values before saving. Broader ASCII-only policy undecided; no new gate. Basic standard Base64 decoder repair is separate from 🔗 Server #3281 UTF-8 consumers; [Feature] Let the Server take the initial admin password without a properties-file round trip #3285/[Feature] Server image: map server.urls_to_pd and server.deploy_in_k8s from the environment, and stop editing conf files in place #3286 excluded from 1.8.
  • P1 · Startup/auth/diagnostics: mounted YAML/auth/image, JVM options before -jar, PID/path/plugin/cron/restart, authenticated HStore and OOM/volume retention. Recheck explicit/default G1 compatibility, quote/% fallback and same-launch PID reuse. Prior RISC-V/macOS failures establish no cause; Store hostname/address changes require PD–Raft/network RC, not skipped tests.
  • P1 · HTTPS identity (🔗 Server #3307): default hostname verification repaired; strict-JDK/no-SAN distinction remains relevant. Packaged/downstream truststore/reflection and RC acceptance required; successful HTTPS alone is not identity proof.
• Toolchain / compatibility / imports
  • P1 · Compatibility matrix: tools ↔ Server 1.7; Hubble ↔ 1.5; measure other tools ↔ 1.5 and original Client 1.5/1.7 ↔ candidate, JVM/route limits. REST/Gremlin/PD, nondefault GraphSpace, unauthorized rejection, timeout units, concurrent FILE/HDFS/JDBC/Kafka and old plain/ZIP local/HDFS restore remain.
  • P1 · Hubble adaptation (🔗 Toolchain #781): backup-first/read-only H2 refusal, no migration. Qualify browser/package/public coordinates, metadata/restart, EN/CN permissions, anonymous/login and graph/schema/query/import with separate Server/PD auth. Shutdown repair does not qualify async Cypher.
  • P1 · Import (🔗 Toolchain #783; HBase outside tested scope): recheck clearGraph/PD schema, OLAP ALL-read, Project decode/cast/missing IndexLabel, stale cross-entry reads and observer authorization; independent per-ID deletion checks, no established cache/storage cause. POST201 and encoded GET/DELETE pass; only unencoded GET500. Retest authenticated API, K12/K14/K23/K24 failures and L09/L30 partials over HTTP/original topology/mainline. SDK/FILE/auth subsets and delivered vertex/worker/scan repairs do not qualify the release.
  • P2 · SDK/artifacts (🔗 Toolchain #784, 🔗 Toolchain #787, 🔗 Toolchain #794): immutable SDK/JAR/native/UTF-8 pins, remote staging/POMs, isolated consumers, SDK1.8/dist coordinates, archive fallback and Go/Python selection; match signed Server RC. READ_LIMIT, configured-zone DATE/local TIMESTAMP and Protobuf3.25.9/Parquet delivered; INT96 remains JVM-zone. PD/GraphSource import is not native GRAPH CLI acceptance; error-swallowing/--clean deferred.
  • P2 · CI/image advisory: same-run SDK/provenance-cache savings and final Loader image/Compose tiny import/readback; no new gate. Post-merge stale-input guards are not product-test failures; RAT/green unit counts do not establish functional acceptance or add to the live matrix.
• Optional scope / integrations
  • Scope undecided · Spark/Flink/Topling/text2gql; ordinary Loader independent. 🔗 AI #380: new head unscored; CI passes, not security proof; budget/filter/rollback review open. Ranger [RFC] Apache Ranger Authorization Plugin for HugeGraph #3240 remains roadmap.
  • Low priority · 🔗 Server #3381: non-root digest/GID repair, CI green; PVC/RC remain.
  • Optional acceptance · Spark: CSV/IDs, UTF-8 FILE/HDFS CSV/JSON/TEXT, zero-write dry-run/nonzero CLI errors, extra JARs, serialization/routing/header checks; unsupported resume/standalone-cluster modes rejected, basename collision handling relies on Spark. Driver/executor/YARN, distributed/TLS/license/HBase/readback RC remain.
  • Optional acceptance · Flink: reject identity-changing UPDATE before buffers/writes; same-ID UPDATE and READ/CREATE/DELETE work, DELETE+CREATE non-atomic. JM/TM/CDC/recovery, duplicates/missing rows, edge/HStore/TLS/license RC remain. Toolchain #793 atomic migration/UNIQUE/incident-edge/compensation is retained without a new gate.
  • Optional acceptance · Topling/restore (🔗 Server #3275): owning-DB handles, clearing-thread discard, cold/live-base identity, quiesced retry, hard-links/old pending state, standard provider and copied data/WAL durability. Parent sync preserves retry; nested data/WAL rejection withdrawn. Qualify JNI/image/legal, restart/migration/rollback, empty/persistent WAL, cross-UID/HA/old format and per-graph roots. Standard/unsafe JNI probes are insufficient; [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id #3224 remains.
  • P1 · AI/GraphMCP: controlled writes/replay/credentials, Python SDK first; live-provider/import/lifespan/background refresh/database identity and matching RC. Fake LLM/endpoints do not establish live-provider acceptance. SeaTunnel 3.0.0 is released (official downloads); use matching plugins and retain migration E2E.
• Release qualification
  • Decision pending · 🔗 Server #3404: hash/equality repair; CI approval pending, unscored; 🔗 #3404 Oct24 nonblocking review: downstream key mutation still defeats id-only dedup; sorted/per-source semantics remain. Scope/owner/new gate undecided; live-Store/RC open.
  • P1 · Freeze scope/owners/revisions; security/LICENSE/NOTICE, platforms, bilingual upgrade tests and signed RC. Rebuild/restage: prior four-platform/six-signature/SHA512, staging-origin and source/binary-smoke evidence predates current components. Five license/content notes, upgrade/rollback and HA remain; logs reviewed, not rerun.

Closed / replaced history

Closed unmerged is not delivery; replacement scores and approvals never transfer.

• Server
  • Prior · 🔗 Server #3324: closed unmerged.
  • Prior · 🔗 Server #3241: replaced by delivered Server fix(server): preserve legacy cypher errors resp #3259; keep parser/RC disposition above.
  • Prior · 🔗 Server #3334: feature deferred.
  • Prior · 🔗 Server #3297: withdrawn; no CI freshness bypass/waiver.
  • Prior · 🔗 Server #3294: replaced by delivered lifecycle split.
  • Prior · 🔗 Server #3237: redesign; replacement stack remains pending.
  • Prior · 🔗 Server #3209: DECIMAL withdrawn; minimal SINGLE only proposed.
• Toolchain / docs / AI
  • Prior · 🔗 #869 closed unmerged; 🔗 #885 delivered. Inventory mismatch static finding; CI failure, cause/generator/runtime/RC unverified.
  • Prior · 🔗 Toolchain #835: optional probes, no delivery.
  • Prior · 🔗 Toolchain #399: root POM proposal; no new gate.
  • Prior · 🔗 Toolchain #798: mirror proposal withdrawn, changes not delivered.
  • Prior · 🔗 Toolchain #771: DECIMAL withdrawn.
  • Prior · 🔗 Doc #530: chart compatibility clarification belongs in existing docs.
  • Prior · 🔗 Doc #526: feature deferred.
  • Prior · 🔗 Doc #504: DECIMAL withdrawn.
  • Prior · 🔗 AI #378: reload withdrawn, no live-provider/browser delivery; AI 我想问一下,features 里面介绍的 与Hadoop、Spark GraphX等大数据系统集成，支持Bulk Load操作 怎么实现的 #91 remains separate.

History: closed/superseded, score bindings, CI snapshot. Revision-bound ratings, including author schema reports, are not current approval.