v1.4.13

HKUDS/LightRAGv1.4.13Apr 2, 2026by danielaskdd

AI Summary

This update focuses on performance instrumentation for PostgreSQL and cooperative yielding to prevent event loop blocking. It also includes fixes for Cypher injection and entity merge issues.

Key Highlights

  • Added PostgreSQL performance timing instrumentation
  • Added cooperative yielding to prevent event loop blocking
  • Fixed Cypher injection vulnerability in Memgraph
  • Fixed missing file_path in entity merge upserts

New Features

  • Performance monitoring tools
  • Event loop optimization
  • Security fixes for Memgraph

Full Release Notes

## What's New
* Feat: add make dev bootstrap target by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2870
* Feat: Add PostgreSQL performance timing instrumentation by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2855

## What's Changed
* perf(storage): add cooperative yielding to prevent event loop blocking by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2847
* fix: sanitize entity_type in Memgraph upsert_node to prevent Cypher injection (CWE-89) by @sebastiondev in https://github.com/HKUDS/LightRAG/pull/2849
* perf(doc-status): add get_docs_by_statuses to all backends and fix PG pool/pagination bugs by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2853
* Fix setup .env regeneration for preserved custom variables by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2854
* Fix missing file_path in entity merge upserts by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2857
* fix(memgraph): preserve start node in knowledge graph query by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2868
* fix(auth): reject default JWT secret when AUTH_ACCOUNTS is configured by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2869
* fix(postgres): handle quoted AGE entity ids in edge retrieval by @danielaskdd in https://github.com/HKUDS/LightRAG/pull/2872

## New Contributors
* @sebastiondev made their first contribution in https://github.com/HKUDS/LightRAG/pull/2849

**Full Changelog**: https://github.com/HKUDS/LightRAG/compare/v1.4.12...v1.4.13