What shipped recently
Changelog.
Veesker ships in public. Every release, security fix, and milestone is announced here and on the GitHub releases page.
-
Phase 1 complete — Schema browser, safety gates, HMAC audit chain
- Safety gates for PROD work — workspace classification (DEV/STAGING/PROD), confirmation prompts on destructive operations, DDL preview, session-level guardrails.
- Complete schema browser — tables, views, sequences, procedures, functions, packages, triggers, types, plus per-schema vector indicator (Oracle 23ai).
- HMAC-chained audit log — every action recorded with cryptographic chain (tamper-evident). Local-only, no telemetry.
- Table inspector — columns, indexes, related objects (FKs, dependents, constraints, grants), DataFlow graph with PL/SQL body scans.
- Multi-platform builds — Windows NSIS, macOS arm64 (Apple Silicon), Linux deb/rpm.
- Ed25519-signed auto-updater — future releases will install automatically.
-
Wallet hardening + cancel/execute fix
- Oracle Wallet file size cap (1MB) — prevent accidental upload of database dumps mistaken for wallet bundles.
- Cancel-vs-execute race condition fixed — query cancellation no longer triggers spurious execute on retry.
- Squashfs-tools added to Linux CI for AppImage bundle integrity.
- tauri.conf.json BOM removed — fixes Windows build edge case.
-
Site refresh + Cloud waitlist backend + Sandbox Plan 5b (preview, not yet released)
- Site refresh: real Cloud waitlist backend (api.veesker.cloud), competitive comparison table, personas section, dedicated /security page, /blog with EN+PT-BR cadence.
- VeeskerDB Sandbox Plan 5b — owner publish wizard (Steps 1-5) + member open/query/close via local DuckDB shipped to the codebase. Preview only — not in the v0.2.4 download yet. Will land in the next public binary release.
- Multi-agent security review pass 2: JWT identity refactored to Rust + sidecar, R2 SHA verification, replay defense, lookup throttling.
-
Sandbox Plan 4 — member open flow + Plan 3 BYOC published
- Member-side open / query / close via DuckDB local (engine 143 + sidecar 346 tests).
- Sandbox publish/pull pivoted to Veesker-hosted via Cloudflare R2 (BYOC cancelled — simpler ops).
- api.veesker.cloud went LIVE (Cloudflare Pages → Railway).
- 12 commits across CE + CL + API.
-
Comprehensive security audit — 16 findings resolved
- 16 findings across credential storage, SQL safety, audit logging, error reflection.
- Migrations 004-006 hardened the auth/audit path.
- Resolved across 4 batches + ultrareview pass.
- Production now matches DBeaver EE security posture.
-
Per-connection safety milestone + free security CI
- Four per-connection safety guards: env tags, read-only mode, statement timeouts, unsafe-DML confirmations.
- Dependabot, CodeQL, OSV-Scanner CI added on the open repo.
- New Tauri updater signing key (Ed25519).
-
First public release — veesker.cloud LIVE
- Windows installer with built-in auto-updater shipped.
- Marketing site veesker.cloud + www LIVE on Cloudflare.
- 18 ultra-review fixes shipped before go-live.
- SaaS architecture spec + plan committed (app.veesker.cloud build path).
Looking for older releases? See the full release archive on GitHub.