Patch release with two bug fixes from community reports, security dependency upgrades, and testing improvements.
Bug Fixes
- Fix list_accessible_subjects returning empty results for TTU with implied parent relations (#22) — The parent closure optimization filtered tuples
by exact relation name, missing implied relations like can_read: member. Now expands the filter to include all satisfying relations. - Fix TypeScript client listObjects/listSubjects pagination (#21, #23) — 0 was sent as p_limit instead of NULL when no limit was specified, and
cursors read from a non-existent column name.
Security
- Upgraded TypeScript dev dependencies (vitest v2→v4, rollup override) to resolve 5 Dependabot-flagged vulnerabilities (no runtime impact).
Testing
- Derived list assertions automatically from check assertions for broader coverage
- Standardized hand-rolled SQL tests on OpenFGA YAML format
- Colocated parser unit tests with pkg/parser
Migration
No breaking changes. Run melange migrate and upgrade the TypeScript client if applicable.
Contributors
Thanks to @Desuuuu for reporting and fixing the TypeScript pagination issues and reporting the list_accessible_subjects bug.