rvf-v0.3.4

oxc-project/oxcrvf-v0.3.4Jul 28, 2026by ruvnet

AI Summary

RVF v0.3.4 introduces durable copy-on-write (COW) branches and resolves correctness issues related to immediate read-through for sparse vector IDs. The release includes security hardening measures such as overflow checks and allocation caps to prevent abuse.

Key Highlights

  • Implementation of durable COW branches that survive reopen and relocation
  • Correction of immediate read-through for one-based and sparse vector IDs
  • Security enhancement: membership capacity derived from highest ID with overflow checks
  • Security enhancement: dense membership allocation capped at 64 MiB
  • Improved branch lineage and ID map persistence across sessions

Breaking Changes

  • Affected npm releases are deprecated with upgrade guidance

New Features

  • Queryable, durable RVF copy-on-write branches
  • Corrected immediate read-through for sparse vector IDs

Full Release Notes

## Durable COW branches and sparse-ID correctness

This release completes queryable, durable RVF copy-on-write branches and corrects immediate read-through for one-based and sparse vector IDs.

### Published packages

- crates.io: `rvf-runtime` 0.3.2
- npm: `@ruvector/rvf` 0.3.4
- npm: `@ruvector/rvf-node` 0.2.3
- npm: all five `@ruvector/rvf-node-<platform>` packages at 0.2.2

### Security and correctness

- membership capacity is derived from the highest vector ID, with checked overflow
- dense membership allocation is capped at 64 MiB to fail closed against allocation abuse
- branch lineage, edits, tombstones, ID maps, and relative parent references survive reopen and relocation
- affected npm releases are deprecated with upgrade guidance

### Validation

- 14/14 COW integration tests and 9/9 membership tests
- five-platform native build matrix
- clippy with warnings denied, formatting, lockfile integrity, dependency review, cargo-deny, RustSec, and npm audit
- clean-registry native and SDK immediate/reopen COW smoke tests

Merged in #740 and #741.