A broad feature and maintenance release adds routing, streaming, tracing, backup and restore, observability, and tablet-management capabilities alongside correctness, performance, and dependency updates. Operators should review changed defaults, backup behavior, removed endpoints and metrics, deprecated features, and security fixes affecting external decompression.
Action needed (3)
securityClear-text logging of sensitive information
The release addresses a code scanning alert about clear-text logging of sensitive information.
securityDirectory traversal protection in
GetBackupsThe file backup storage
GetBackupsRPC no longer permits directory traversal paths.breakingStricter VTGate
SELECTlist validationVTGate rejects an unqualified
*after a comma in aSELECTlist.
Check if affected (12)
securityOpt-in compressor commands from
MANIFESTApplicability is not stated in the release notes.
securityExternal decompressor commands from backup
MANIFESTApplies if you use backup storage.
securityBackup
MANIFESTpath traversal protectionApplies if
backupengineruns.- + 9 more on the release page
Plan ahead (4)
deprecatedThe
glogdeprecationremoval planned in v25Applies if you use
glog.deprecatedThe OpenTracing backend deprecationsremoval planned in v25
Applies if you use
opentracing-jaegeroropentracing-datadog.deprecatedVTOrc Snapshot Topology deprecationremoval planned in v25
Applies if you configure
--snapshot-topology-interval.- + 1 more on the release page
