Commit graph

7 commits

Author SHA1 Message Date
rUv
77f391b0b7 fix(ci): Fix formatting and workflow permission issues
- Run cargo fmt across all crates (468 files formatted)
- Add permissions for PR comments in benchmarks.yml
- Add continue-on-error for PR comment steps
- Remove Docker service from postgres-extension-ci (pgrx manages own postgres)
- Add permissions to postgres-extension-ci.yml

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-26 22:11:57 +00:00
rUv
fb32082d28 chore: Bump version to 0.1.15 with security fixes and GNN forgetting mitigation
Version bump and comprehensive updates:

## GNN Forgetting Mitigation (Issue #17)
- Add Adam optimizer with bias-corrected momentum
- Add SGD with momentum for convergence
- Add Elastic Weight Consolidation (EWC) for catastrophic forgetting prevention
- Add ReplayBuffer with reservoir sampling
- Add 6 learning rate scheduling strategies
- All 177 GNN tests passing

## Security Fixes
- Fixed integer overflow vulnerabilities across core crates
- Enhanced bounds checking in arena allocations
- Improved quantization safety
- Added verification tests for security fixes

## Dependency Updates
- Updated ruvector-gnn dependency versions in node/wasm crates

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-27 00:52:24 +00:00
rUv
0f711fd377 fix: Resolve unresolved imports in ruvector-tiny-dancer-core examples
- Export training module and types from lib.rs (TrainingConfig,
  TrainingDataset, Trainer, TrainingMetrics, generate_teacher_predictions)
- Export RouterConfig and FastGRNNConfig from lib.rs
- Add From<std::io::Error> impl for TinyDancerError
- Update examples to work without external dependencies:
  - admin-server.rs: Simplified to demonstrate health checks and
    config inspection without axum/tokio
  - full_observability.rs: Uses manual metrics tracking instead of
    prometheus crate
  - metrics_example.rs: Manual metrics collection and display
  - tracing_example.rs: Simple timing-based example without
    OpenTelemetry

Fixes #16

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-26 22:48:12 +00:00
rUv
526b7adac1 chore: Update workspace version to 0.1.2 and simplify CI workflow
- Bump workspace version from 0.1.1 to 0.1.2
- Simplify build-native.yml workflow (remove duplicate graph build job)
- Update Cargo.lock with latest dependencies

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-26 17:43:34 +00:00
rUv
eef6778839 fix: Resolve CI build failures
- Format all Rust code with cargo fmt
- Generate Cargo.lock for security audit
- Add build:wasm script to graph-wasm package.json
- Update npm/package-lock.json

The CI was failing due to:
1. Rust code formatting check failures
2. Missing Cargo.lock file for cargo audit
3. Missing build:wasm script expected by graph-ci.yml workflow

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-26 15:25:47 +00:00
Claude
520dd9cbce
feat: Add benchmarks section to README, fix critical security issues
## README Updates
- Add real benchmark data (HNSW: 61µs, Cosine: 143ns, DotProduct: 33ns)
- Update comparison table with actual measured latency

## Security Fixes (Critical)
- cache_optimized.rs: Add integer overflow protection with checked_mul
- cache_optimized.rs: Add MAX_DIMENSIONS (65536) and MAX_CAPACITY limits
- mmap.rs: Add bounds validation for node_id before pointer arithmetic
- mmap.rs: Use checked arithmetic in embedding_offset()
- api.rs: Fix timing attack in token comparison with constant-time loop
- api.rs: Use strip_prefix() instead of slice indexing to prevent panic
- lib.rs (wasm): Add MAX_VECTOR_DIMENSIONS limit to prevent DoS

## Security Review Summary
- 3 CRITICAL issues fixed (memory operations, integer overflow)
- 3 HIGH issues addressed (bounds validation, timing attacks)
- 4 MEDIUM issues mitigated (allocation limits, input validation)
2025-11-26 13:20:36 +00:00
rUv
2b18b6985e fix: Fix case sensitivity bug preventing native module from loading
Critical fix for v0.1.7 that resolves native module loading failure.

Changes:
- Fixed case sensitivity: VectorDB → VectorDb in type checks
- Native module exports VectorDb (lowercase 'b')
- Code was checking for VectorDB (uppercase 'B')
- Re-export as VectorDB for API consistency
- Version bump: 0.1.6 → 0.1.7

This fix resolves the error:
"Native module loaded but VectorDB not found"

Related commits:
- Database pooling: already in storage.rs (commit 44ca725)
- Package name fixes: already applied (ruvector-core)

Next steps:
- Rebuild platform packages with pooling code
- Publish platform packages v0.1.2

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-21 21:34:52 +00:00