[1.8.0] Release TODOs and cross-repository integration checklist #3242

1.8.0 release checklist

Core: Server / Hubble / Loader / Client. Java 17 delivered. Rebuild and restage frozen RCs; 1.7 → 1.8 compatibility remains a release gate.

Checked means delivered, not RC accepted. CI, author tests, independent review and same-RC acceptance differ; old scores never transfer or waive CI/RC. Checked: Oct25 02:30 UTC; other evidence retains its date/version.

Pending

• Server / PD / Store
  • P0 · 🔗 Server #3399 · guard, not migration; CI fails; 🔗 #3399 Oct24 review: excluded guide breaks Docker; no-PD exit breaks launcher tests and skips GraphID CI; dependency failure/[Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id #3224 acceptance open
  • P2 · 🔗 Server #3403 · needs repair despite green CI: 🔗 #3403 Oct24 review reports orphan PD records blocking deletion; Oct23 static 7.7 predates this finding; cross-replica/RC open
  • P0 · 🔗 Server #3330 · Oct23 static 7.0/10 (prior 7.6 historical); draft: Up may precede partition restoration; refusal is not migration; [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id #3224 gate
  • P0 · HStore upgrade #3224 · require old-data reads, Raft replay, first allocation/write, per-replica rollback; refusal is not migration
  • P1 · Property-query · docs/live-backend RC pending
  • P1 · 🔗 Server #3192 · conflicts; YAML/image/config RC
  • P1 · 🔗 Server #3253 · unscored; CI approval pending; 🔗 #3253 Oct24 review: external HTTPS keystore/Spring paths; plugin-path/legacy cron findings remain; Oct21 5/10 historical
  • P1 · Cypher API/Hubble · compatibility fixed; same-RC pending
  • P1 · Cypher date folding · backend/perf/scope/RC pending
  • P1 · Binary serializer #3225 · 🔗 Server #3375: mixed-version serializer blocker; header CI red; unscored
  • P2 · 🔗 Server #3377 · Spring dependency update: current servlet compile failure; runtime skipped
  • P2 · Metrics labels · repaired; live scrape/RC pending
  • P2 · V2 schema auth · OLAP deferred; HStore RC pending
  • P1 · Loading-owner · Loader/auth-HTTP/crash RC pending
  • P2 · Discovery identity · fixed; matching-image/live-PD RC pending
  • P2 · 🔗 Server #3355 · 🔗 #3355 Oct24 reviewer 9/10, not independent acceptance; CI passes; shared Raft-buffer throughput/constrained-memory load/RC unmeasured
  • P2 · 🔗 Server #3379 · cleanup checked; CI green; unscored; RC open
  • P2 · Traversal follow-up #3346 · long-term; no new gate
• Schema replacement · split dependencies
  • P1 · PD read/election RC · multi-PD/performance pending
  • P1 · Schema counter/auth-key · HStore CI pass; multi-server/restart RC pending
  • P1 · 🔗 Server #3376 · Bounded replay/charset repair; CI green; cluster/perf/RC unscored
  • P1 · 🔗 Server #3382 · CI green; renewal race/malformed-key pass abort; real PD/RC open; model-only perf
  • P1 · 🔗 Server #3383 · Cluster dependency CI red; shared-worker risk acknowledged; quorum/perf/RC open
  • P1 · Watch/ACK · ASF PR pending; shutdown repair; multi-PD election/cost
  • P1 · Server cache integration · ASF PR pending; hold: name-miss refill churn
• Deployment / Hubble
  • P2 · PD health · fatal-Raft fixed; reinit/Compose/live-PD RC pending
  • P1 · 🔗 Server #3362 · Oct21 readiness 4/10; test compile/credential blockers; TTL/Secret/60s shutdown nonblock (OnDelete, 300s grace); RC
  • P2 · Helm OCI · metadata/name/signing delivered; signature/live-upgrade RC pending
  • P1 · Graph-binding recovery #3228 · repair merged; multi-PD startup/rollout, data/index retention, same-RC remain high priority
  • P1 · 🔗 Server #3221 · workflows pass; blocks: stale PD failures, empty Store list, HBase graphspace dedup; recovery/isolation/RC open
  • P2 · Per-Pod index · completed jobs/stable-schema/live-Pod RC pending
  • P2 · Docker PD registration · docs/image RC pending; writable-conf separate
  • P2 · Arthas · runtime/guide merged; interrupted-attach cleanup/package/RC pending
• Lifecycle / optional features
  • Optional · 🔗 Server #3401 · CI fails; 🔗 #3401 Oct24 review: graph-config persistence, runtime provider and standard-image rollback failures; earlier PD/digest/CI-selector findings remain; unscored, native/RC open
  • Optional · 🔗 Server #3402 · CI passes; 🔗 #3402 Oct24 review: when enabled, easy-mode chart isolation/security-context gaps; isolation gap statically confirmed, actual reachability/exploit untested; parent/sub-label copy/retry and HStore/HA/RC open
  • Scope undecided · 🔗 Server #3388 · embedded REST draft; shutdown fixture missing executor; core CI red; unscored
  • P2 · 🔗 Server #3359 · Oct21 readiness 4/10; test compile/leader-change failures; RC
  • P2 · PD metrics · registered-Store scrape/failed-refresh throttling pending
  • P2 · 🔗 Server #3356 · Interval repair submitted; core CI green/project red; current independent review/load/RC open (Oct21 8.5/10 historical)
  • P2 · 🔗 Server #3081 · Optional/unscored; retry-epoch race; workflow/coverage checks green; native/RC open
  • P1 · RPC lifecycle · cleanup-retry identity/cross-Server/deployment/RC pending
  • P1 · Scan cancellation · request serialization delivered; latency/perf/RC unverified
  • P1 · Deletion RC · admission/retry/restart/cross-Server recovery
  • P1 · 🔗 Server #3299 · Codecov + native Topling acceptance
  • P2 · Retryable restore acceptance · migration/rollback/native/RC
• Toolchain / clients
  • P2 · 🔗 Toolchain #845 · Oct23 static 8.0; Store deadline excludes PD; CI passes; RC open
  • P2 · 🔗 Toolchain #841 · CI fails: GraphCanvas resize-test TS1005; license check skipped; unscored
  • P2 · 🔗 Toolchain #843 · task discovery; unscored; CI passes; RC open
  • P2 · 🔗 Toolchain #844 · GraphSpace recovery; unscored; workflow passes; RC open
  • P2 · 🔗 Toolchain #847 · schema deletion retry; unscored; workflow passes; RC open
  • P2 · 🔗 Toolchain #848 · Vermeer-first OLAP; Computer optional; unscored; workflow passes; RC open
  • P2 · 🔗 Toolchain #849 · diagnostics; unscored; CI passes; RC open
  • P2 · Toolchain release artifacts #821 · author-reported signing/source/Javadoc overlap; deduplication and signed local-release/source-archive smoke pending; no new release gate
  • P2 · Hubble smoke · fixture delivered; candidate/1.7 CI pass; immutable RC pending
  • P2 · Client/Loader · tests delivered; Server1.7/full integration/immutable RC pending
  • P2 · 🔗 Toolchain #710 · fetch/reset/close root cause + conflicts
  • P2 · CI/image advisory #792 · cache/provenance + image/Compose smoke; no new gate
• Documentation · acceptance
  • P2 · 🔗 Doc #543 · Nav-stat CI failure; Compose guidance/RC open
  • P1 · 🔗 Doc #541 · wording repaired; CI authorization/API/RC open
  • P2 · PD timeout guide · guide/runtime delivered; live-PD/RC pending
  • P2 · 🔗 Doc #535 · site CI passes; pair with 🔗 Server #3355; consistency/RC unverified
  • P2 · 🔗 Doc #545 · Docs/images; CI queued; review/RC open
  • P2 · 🔗 Doc #532 · New nonblocking review: old-image probe/shared-credential/ambiguous-RPC caveats; unscored; CI authorization/RC open
  • P0 · 🔗 Doc #523 · Draft; refusal wording narrowed, site CI passes; runtime draft/migration pending
  • P1 · Startup guide · docs/identity code delivered; package/RC pending
  • P1 · 🔗 Doc #503 · Oct24 reviewer 8.8/10; site CI passes; runtime/RC open
  • P1 · 🔗 Doc #498 · draft; align replacement behavior
  • P1 · 🔗 Doc #499 · Existing errors/parallel-edge gaps; new nonblocking review: required properties/SeaTunnel skipped rows; CI authorization/migration/RC open
  • P1 · 🔗 Doc #494 · voter/shrink + operational checks
  • P1 · Deletion guide · config removal preserves backend; paired RC pending
  • P2 · 🔗 Doc #520 · Fix same-instance URLs; token advice; CI/provider/RC open
  • P2 · Java 17 client-guide repair · GraphBinary registry/builder example; paired API/RC
  • P2 · Diagnostics/Topling/Foundation guides · code delivered; package/RC pending
  • P2 · Helm guide · Server probe/live-Pod RC pending
• AI / integration / release
  • P2 · Vermeer acceptance · matched Computer/Hubble images, load cancellation, live-cluster/same-RC pending
  • P2 · Signed RC / staged-SDK · tooling/URL-hash fix delivered; match staging to frozen Server, then signed SVN RC/manual licensing
  • P2 · 🔗 AI #383 · cached numeric-ID repair and fake-endpoint parser tests; current CI passes; independent delta/live-Server/same-RC pending
  • P2 · 🔗 AI #385 · escaping; author parser tests; CI authorization/review pending; depends on 🔗 AI #383
  • P2 · AI post-merge · 🔗 AI #372: conflict diagnostics (fake LLM); import/RC open
  • P1 · AI ingestion #373 · code/live-provider/GraphMCP gaps

Merged / completed

Release decisions and acceptance boundaries

Existing acceptance work, not new scope/gates. Use one frozen RC; merges, model performance, author probes, skips and prior RCs are insufficient.

• Upgrade / recovery
  • P0 · HStore #3224: verify old/new rows through snapshots, replay, first allocation/write and every-replica rollback. Reported 1 PD + 3 Store reproduction: old 0xFFFE rows become unreachable; JAR rollback does not repair mapping, and remapping may hide new-ID rows. Not proven permanent loss; independently verified migration/recovery required, refusal insufficient.
  • P1 · Recovery: old PD/Store data, init_store.enabled, binary serializer compatibility, credentials/prefixes, data/schema/index retention, metrics, backup/restore/rollback, empty-volume replacement/old-ID retirement and PD/DNS recovery. 🔗 Server #3265 synthetic SST/WAL/single-node tests do not qualify upgrades/failover.
  • P1 · Native lifecycle: ownership/failed cleanup, authenticated scan/TTL, timeout/PID, multi-replica restart, cleanup-retry identity and cross-Server deletion/recovery on matching packages. Serialization is not latency/performance acceptance.
• Query / schema / API
  • P1 · Query/index: nested/negative/count predicates; local/optional/coalesce/union/choose/map/flatMap/math; composite-index/deletion races; ordered partitions/scans, limits/offsets/pages/cursors and duplicate/missing rows. Upgrade all Stores before ordered-scan protocol; reject mixed versions. Retain Track HStore core-test exclusions and property codec mismatch #3090 codec/lifecycle exclusions and prior scans. EN/CN PRIMARY_KEY, parent-index and schema-visibility docs must match runtime.
  • P1 · Schema stack: PD-first/DDL freeze; leader-term IDs, rejected snapshots, elections, rollback/API/tasks and multi-Server restart. Resolve partial-init/concurrent-start and CREATING/recreated-graph drop races; name-miss cache churn stays on hold. Watch shutdown/double-close/plain-write repairs and author probes do not qualify multi-PD/cost.
  • P1 · Cypher (🔗 Server #3289): preserve parser/error/legacy-success contracts with Hubble. Seventeen $props.field values are not top-level parameters (cap16); CREATE (n:label $props) sets no PK. Verify ID strategy/schema, required properties, parallel-edge errors, rounding/CN examples and migration E2E. Null-binding no-row applies only to equality. Advanced HStore/Bolt, cross-request transactions and performance unqualified.
  • P2 · Java/TP (🔗 Server #3263, 🔗 Server #3261; 🔗 Server #3117 historical): Java17 build/services, Commons/RPC Java11 bytecode; TP3.8.1/Groovy4.0.25 default Gremlin, GraphBinary Schema/Blob, HTTP V1 Tree, caller-owned GValue, String-ID/count/DATE. Qualify API/Structure/Process on Memory/RocksDB/HStore, single/multi-cluster, downstream clients/tools/Computer, mounted config and old data. Prior TP skips, PD memory/swap and GraphID scaling close neither cause nor [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id #3224.
  • P2 · Foundation/OLAP (🔗 Server #3305, 🔗 Server #3306): source-only null-graph edge-deserialization, namespace/rebuild/long-text/OLAP acceptance and null-graph regression disposition. Shared imports/process-wide namespace/clean-output delivery does not qualify downstream migration. Quiesce affected OLAP writes through cleanup; no concurrent-writer guarantee.
• Deployment / identity / diagnostics
  • P1 · Graph-binding #3228: high priority despite repair/closure. Verify multi-PD/Server rollout, password rotation, data/index retention, retained-PVC reconnect and independent Hubble login/list/query/logout. Retries must expose failure; NetworkPolicy must bound offline allocation. An observed stall is not proof of timeout expiry.
  • P1 · Readiness: metadata-graph failures/failedGraphs, stale failures, empty Stores, HBase GraphSpace dedup, k3s/default budgets, data-before-Up, truthful tasks/manual restore. Ping is not Raft/data proof; distinguish fatal PD from transient quorum loss. Never delete LOCK. Verify password caches, native/JVM limits and offline startup.
  • P1 · Helm: one Leader/only Followers; minStoreCount=replicas may prevent Store retirement. Verify EN/CN growth/PDB/PD-roll/balance, additive NetworkPolicy, Secret/password/auth-cache rollout and corrected 30-minute Tombstone handling. Chart delivery does not qualify live probes, completed jobs/stable schema, OCI signatures/upgrades or published images.
  • P1 · Credentials: reject controls in both fields and username colons; allow password colons and ordinary spaces/commas. Align create/update/login and reject unsupported values before saving. Broader ASCII-only policy undecided; no new gate. Basic standard Base64 decoder repair is separate from 🔗 Server #3281 UTF-8 consumers; [Feature] Let the Server take the initial admin password without a properties-file round trip #3285/[Feature] Server image: map server.urls_to_pd and server.deploy_in_k8s from the environment, and stop editing conf files in place #3286 excluded from 1.8.
  • P1 · Startup/auth/diagnostics: mounted YAML/auth/image, JVM options before -jar, PID/path/plugin/cron/restart, authenticated HStore and OOM/volume retention. Recheck explicit/default G1 compatibility, quote/% fallback and same-launch PID reuse. Historical RISC-V/macOS failures establish no cause; Store hostname/address changes require PD–Raft/network RC, not skipped tests.
  • P1 · HTTPS identity (🔗 Server #3307): default hostname verification repaired; strict-JDK/no-SAN distinction remains relevant. Packaged/downstream truststore/reflection and RC acceptance required; successful HTTPS alone is not identity proof.
• Toolchain / compatibility / imports
  • P1 · Compatibility matrix: tools ↔ Server 1.7; Hubble ↔ 1.5; measure other tools ↔ 1.5 and original Client 1.5/1.7 ↔ candidate, JVM/route limits. REST/Gremlin/PD, nondefault GraphSpace, unauthorized rejection, timeout units, concurrent FILE/HDFS/JDBC/Kafka and old plain/ZIP local/HDFS restore remain.
  • P1 · Hubble adaptation (🔗 Toolchain #781): backup-first/read-only H2 refusal, no migration. Qualify browser/package/public coordinates, metadata/restart, EN/CN permissions, anonymous/login and graph/schema/query/import with separate Server/PD auth. Shutdown repair does not qualify async Cypher.
  • P1 · Import (🔗 Toolchain #783; HBase outside tested scope): recheck clearGraph/PD schema, OLAP ALL-read, Project decode/cast/missing IndexLabel, stale cross-entry reads and observer authorization; independent per-ID deletion checks, no established cache/storage cause. POST201 and encoded GET/DELETE pass; only unencoded GET500. Retest authenticated API, K12/K14/K23/K24 failures and L09/L30 partials over HTTP/original topology/mainline. SDK/FILE/auth subsets and delivered vertex/worker/scan repairs do not qualify the release.
  • P2 · SDK/artifacts (🔗 Toolchain #784, 🔗 Toolchain #787, 🔗 Toolchain #794): immutable SDK/JAR/native/UTF-8 pins, remote staging/POMs, isolated consumers, SDK1.8/dist coordinates, archive fallback and Go/Python selection; match signed Server RC. READ_LIMIT, configured-zone DATE/local TIMESTAMP and Protobuf3.25.9/Parquet delivered; INT96 remains JVM-zone. PD/GraphSource import is not native GRAPH CLI acceptance; error-swallowing/--clean deferred.
  • P2 · CI/image advisory: same-run SDK/provenance-cache savings and final Loader image/Compose tiny import/readback; no new gate. Post-merge stale-input guards are not product-test failures; RAT/green unit counts do not establish functional acceptance or add to the live matrix.
• Optional scope / integrations
  • Scope undecided · Spark/Flink/Topling/text2gql; ordinary Loader independent. 🔗 AI #380: new head unscored; CI passes, not security proof; budget/filter/rollback review open. Ranger [RFC] Apache Ranger Authorization Plugin for HugeGraph #3240 remains roadmap.
  • Low priority · 🔗 Server #3381: non-root digest/GID repair, CI green; PVC/RC remain.
  • Low priority · 🔗 Doc #544: non-root guidance repaired; CI/RC remain. Official non-root images are not urgent.
  • Optional acceptance · Spark: CSV/IDs, UTF-8 FILE/HDFS CSV/JSON/TEXT, zero-write dry-run/nonzero CLI errors, extra JARs, serialization/routing/header checks; unsupported resume/standalone-cluster modes rejected, basename collision handling relies on Spark. Driver/executor/YARN, distributed/TLS/license/HBase/readback RC remain.
  • Optional acceptance · Flink: reject identity-changing UPDATE before buffers/writes; same-ID UPDATE and READ/CREATE/DELETE work, DELETE+CREATE non-atomic. JM/TM/CDC/recovery, duplicates/missing rows, edge/HStore/TLS/license RC remain. Toolchain #793 atomic migration/UNIQUE/incident-edge/compensation is retained without a new gate.
  • Optional acceptance · Topling/restore (🔗 Server #3275): owning-DB handles, clearing-thread discard, cold/live-base identity, quiesced retry, hard-links/old pending state, standard provider and copied data/WAL durability. Parent sync preserves retry; nested data/WAL rejection withdrawn. Qualify JNI/image/legal, restart/migration/rollback, empty/persistent WAL, cross-UID/HA/old format and per-graph roots. Standard/unsafe JNI probes are insufficient; [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id #3224 remains.
  • P1 · AI/GraphMCP: controlled writes/replay/credentials, Python SDK first; live-provider/import/lifespan/background refresh/database identity and matching RC. Fake LLM/endpoints do not establish live-provider acceptance. SeaTunnel 3.0.0 is released; use matching plugins and retain migration E2E.
• Release qualification
  • Decision pending · 🔗 Server #3404: hash/equality repair; CI approval pending, unscored; 🔗 #3404 Oct24 nonblocking review: downstream key mutation still defeats id-only dedup; sorted/per-source semantics remain. Scope/owner/new gate undecided; live-Store/RC open.
  • P1 · Freeze scope/owners/revisions; security/LICENSE/NOTICE, platforms, bilingual upgrade tests and signed RC. Rebuild/restage: prior four-platform/six-signature/SHA512, staging-origin and source/binary-smoke evidence predates current components. Five license/content notes, upgrade/rollback and HA remain; logs reviewed, not rerun.

Closed / replaced history

Closed unmerged is not delivery; replacement scores and approvals never transfer.

• Server
  • Historical · 🔗 Server #3324: closed unmerged.
  • Historical · 🔗 Server #3241: replaced by delivered Server fix(server): preserve legacy cypher errors resp #3259; keep parser/RC disposition above.
  • Historical · 🔗 Server #3334: feature deferred.
  • Historical · 🔗 Server #3297: withdrawn; no CI freshness bypass/waiver.
  • Historical · 🔗 Server #3294: replaced by delivered lifecycle split.
  • Historical · 🔗 Server #3237: redesign; replacement stack remains pending.
  • Historical · 🔗 Server #3209: DECIMAL withdrawn; minimal SINGLE only proposed.
• Toolchain / docs / AI
  • Historical · 🔗 Toolchain #835: optional probes, no delivery.
  • Historical · 🔗 Toolchain #399: root POM proposal; no new gate.
  • Historical · 🔗 Toolchain #798: mirror proposal withdrawn, changes not delivered.
  • Historical · 🔗 Toolchain #771: DECIMAL withdrawn.
  • Historical · 🔗 Doc #530: chart compatibility clarification belongs in existing docs.
  • Historical · 🔗 Doc #526: feature deferred.
  • Historical · 🔗 Doc #504: DECIMAL withdrawn.
  • Historical · 🔗 AI #378: reload withdrawn, no live-provider/browser delivery; AI 我想问一下,features 里面介绍的 与Hadoop、Spark GraphX等大数据系统集成，支持Bulk Load操作 怎么实现的 #91 remains separate.

History: closed/superseded, score bindings, CI snapshot. Revision-bound ratings, including author schema reports, are not current approval.