Release Notes¶

Release 1.10.0¶

License key and internet access required to run Quine Enterprise
Added license usage UI with visual reporting of entitlements and consumption
Improved graph query performance by limiting edges returned during traversals
Increased default max SSE line and event sizes to 5MB to prevent infinite retry loops on large messages
API errors now return correlation codes for easier troubleshooting and support

File ingest operations now require an allowedDirectories configuration; files loaded by recipe or from ./file_ingests are allowed by default
Reduced in-memory lifecycle of passwords by using character arrays that are blanked after use
Enhanced UUID generation to use FIPS 140-2 compliant cryptographically secure random values
Enforced strict-transport-security HTTP header across all endpoints
Added additional HTTP security headers including tightened CSP
Improved secret redaction in configuration printing
ClickHouse persistence now requires credentials to be set via environment variables instead of configuration files

Fixed cluster shutdown process that could throw errors during termination
Fixed keyspace name for AWS Keyspaces to be case-sensitive
Fixed empty Kafka message handling to prevent exceptions from tombstone messages
Removed application base URL configuration in favor of runtime inference
Improved error response formatting by using correlation codes that link user-facing errors to detailed server logs for easier troubleshooting
Replaced documented IP addresses with RFC 5737 TEST-NET addresses

Updated amazon-kinesis-client to 3.1.3
Updated logback-classic to 1.5.20
Updated caffeine to 3.2.3
Updated pekko-actor, pekko-cluster, and related components to 1.2.1
Updated avro to 1.12.1
Updated commons-csv to 1.14.1
Updated commons-codec to 1.19.0
Updated commons-io to 2.20.0
Updated netty-handler to 4.1.127.Final (security update)
Updated ayza (formerly sslcontext-kickstart) to 10.0.1
Updated AWS Glue dependencies (security updates)
Updated AWS SDK components (aws-core, aws-query-protocol, kinesis, kinesis-video, and others) to 2.31.78
Updated scalajs-dom to 2.8.1
Updated msgpack-core to 0.9.10
Updated java-driver-core and java-driver-query-builder to 4.19.1
Updated metrics-core, metrics-jmx, and metrics-json to 4.2.37
Updated amqp-client to 5.26.0
Updated scalacheck to 1.19.0
Updated scala-logging to 3.9.6
Updated pprint to 0.9.4
Updated kind-projector to 0.13.4
Updated org.eclipse.jgit to 7.3.0.202506031305-r
Updated sbt and related components to 1.11.7
Updated sbt-scalafmt to 2.5.6
Updated sbt-jmh to 0.4.8
Updated sbt-sbom to 0.5.0
Updated sbt-scalajs and scalajs-compiler to 1.20.1

Initialize browser history on UI page load, correcting behavior of browser navigation when navigating between tabs, and using the back/forward browser buttons

This patch release includes foundational changes in preparation for an upcoming major release; current functionality remains unaffected.

Use reverse-proxy compatible path definitions for resources and introduce optional server advertise path parameter. Thank you for the contribution @kollolsb!
Removing quotes from keyspace names in keyspaceExistsQuery for AWS Keyspaces. Thank you for the contribution @fredsensibill!
Remove use of SELECT COUNT(*), not supported in Keyspaces. Thank you for the contribution @LeifW!

Add support for KCL-based Kinesis ingestion, offering stronger delivery guarantees through checkpointing via DynamoDB, advanced configuration options, and optional enhanced fan-out support.
Optionally support NGINX in Docker image for basic auth by setting USE_NGINX and USE_BASIC_AUTH env vars to “true”
Introduce OAuth2 optionally for Cassandra persistor

Cluster members now gracefully supports SIGTERM and SIGKILL for any or all members, including graceful shutdown when dropping below target cluster size
Gracefully support rolling updates from a cluster orchestrator like Kubernetes, including performing persister migrations
Add JMX Prometheus agent to Docker image
Enable thatDot products to stream data directly to each other using reactive streams
Support optionally omitting metadata from Standing Query output by setting the new structure property Bare
Simplified logging of awake nodes and cluster member startup

Improve stability when rehydrating large nodes with multi-part snapshots from the persister
Improve loading of non-default namespaces during cluster startup
Always report results in MVSQ when last reported value is unknown
Add netty-handler override for CVE-2025-24970