Arc v26.06.1

What's Changed

• fix(mqtt): nil-guard subscriber map and disabled manager by @SAY-5 in #416
• fix(mqtt): unify nil-guard policy across both MQTT API handlers by @xe-nvdk in #418
• feat(cluster): hard query gating during replication catch-up (#392) by @xe-nvdk in #419
• fix(storage): release glibc heap pages after S3 retention/delete by @xe-nvdk in #420
• fix(delete): pass seekable file body to S3 upload for non-TLS PUT by @xe-nvdk in #423
• fix(storage): strip URL scheme from s3_endpoint before DuckDB by @xe-nvdk in #422
• fix(query): break streaming loop on Flush error so DuckDB result buffers free on client disconnect by @xe-nvdk in #424
• chore(deps): bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in the go_modules group across 1 directory by @dependabot[bot] in #410
• style: gofmt query_arrow.go by @xe-nvdk in #429
• docs(readme): refresh Query benchmark table with May 2026 numbers by @xe-nvdk in #431
• docs(readme): refresh query benchmark numbers (May 2026) by @xe-nvdk in #432
• fix(query): mask bare FROM inside EXTRACT/SUBSTRING/TRIM/OVERLAY + Arrow IPC exec-time trailer by @xe-nvdk in #433
• chore(deps): bump the go_modules group across 1 directory with 3 updates by @dependabot[bot] in #430
• feat(arcx): Arc-side loader for the proprietary arcx DuckDB extension by @xe-nvdk in #434
• feat(database): wire arcx storage_root + denylist arc_partition_agg in user SQL by @xe-nvdk in #435
• fix(database): clean up orphaned DuckDB spill files on startup by @xe-nvdk in #437
• feat(query): columnar MessagePack query response endpoint (experimental) by @xe-nvdk in #438
• feat(server): support binding to a specific host/address — closes #439 by @xe-nvdk in #441
• fix(security): sandbox DuckDB user queries via enable_external_access=false + allowed_directories by @xe-nvdk in #442
• fix(security): gate pprof behind ARC_DEBUG_PPROF on a localhost listener + anchor + normalise PublicPrefixes match by @xe-nvdk in #443
• fix(security): HMAC-gate /api/v1/internal/cache/invalidate by @xe-nvdk in #444
• fix(cluster): inter-node HTTP must respect server.tls_enabled by @xe-nvdk in #445
• fix(security): validate Raft FSM manifest paths (closes GHSA-f85q-mvg8-qf37) by @xe-nvdk in #446
• fix(security): HMAC-authenticate cluster WAL replication (closes GHSA-wfgr-8x84-22q7) by @xe-nvdk in #449
• fix(pruning): wire periodic janitor for partition pruner caches by @xe-nvdk in #450
• feat(cluster-auth): Phase A — replicate API tokens via Raft FSM by @xe-nvdk in #451
• feat(cluster-auth): Phase A.1 — replicate RBAC via Raft FSM by @xe-nvdk in #458
• feat(cluster-auth): Phase A.2 Item 2 — cascade-on-delete soft cap by @xe-nvdk in #459
• fix: normalise time.Time writes to UTC across auth + tiering (closes #460) by @xe-nvdk in #461
• chore(cluster-auth): cleanup follow-ups from PR #451 (closes #452) by @xe-nvdk in #462
• feat(cluster): Pattern 2 shared-storage multi-writer (PR1a — code+tests) by @xe-nvdk in #463
• feat(cluster): Pattern 2 multi-writer PR1b — deployment + smokes + RouteWrite by @xe-nvdk in #464
• fix(test): Release buildArrowBatch builders + columns (closes #427) by @xe-nvdk in #465
• feat(metrics): arc_query_client_disconnects_total counter (closes #426) by @xe-nvdk in #466
• perf(ingest): sub-slice indexing in splitOnDelimiter (closes #354) by @xe-nvdk in #467
• docs(release-notes): add #426, #427, #354 sprint cleanup entries by @xe-nvdk in #468
• ci(release): publish to Docker Hub + bump all actions to Node-24 by @xe-nvdk in #469
• ci: remove Claude Code workflow (auto-PR-review + @claude responder) by @xe-nvdk in #470

New Contributors

• @SAY-5 made their first contribution in #416

Quick Start

Docker

docker run -d \
  -p 8000:8000 \
  -v arc-data:/app/data \
  ghcr.io/basekick-labs/arc:26.06.1

Debian/Ubuntu (amd64, arm64)

# Download and install
wget https://github.com/basekick-labs/arc/releases/download/v26.06.1/arc_26.06.1_amd64.deb
sudo dpkg -i arc_26.06.1_amd64.deb

# Start and enable
sudo systemctl enable arc
sudo systemctl start arc

# Check status
curl http://localhost:8000/health

RHEL/Fedora/Rocky (x86_64, aarch64)

# Download and install
wget https://github.com/basekick-labs/arc/releases/download/v26.06.1/arc-26.06.1-1.x86_64.rpm
sudo rpm -i arc-26.06.1-1.x86_64.rpm

# Start and enable
sudo systemctl enable arc
sudo systemctl start arc

Kubernetes (Helm)

helm install arc https://github.com/basekick-labs/arc/releases/download/v26.06.1/arc-26.06.1.tgz

Download Artifacts

• Full Documentation

Community

• Discord: Join
• Issues: GitHub