chore(deps): Bump github.com/authzed/spicedb from 1.52.0 to 1.53.0

[dependabot]

Bumps github.com/authzed/spicedb from 1.52.0 to 1.53.0.

Release notes

Sourced from github.com/authzed/spicedb's releases.

v1.53.0

Added

• Add DispatchExecutor, a query plan executor that is Dispatch-aware and sends subproblems on Alias boundaries (authzed/spicedb#3074)

• Implement Dispatch caching for query plan execution (authzed/spicedb#3079)

• Add new optimizer to query planner based on set theory laws for simplifications (authzed/spicedb#3051)

• Experimental: Add unified schema storage with ReadStoredSchema/WriteStoredSchema APIs for improved schema read performance (authzed/spicedb#2924)

  This feature stores the entire schema as a single serialized proto rather than reading individual namespace and caveat definitions separately, significantly improving schema read performance.

  Migration to unified schema storage is controlled by the --experimental-schema-mode flag, which supports a 4-phase rolling migration:

  1. read-legacy-write-legacy (default) - No change; reads and writes use legacy per-definition storage.
  2. read-legacy-write-both - Reads from legacy storage, writes to both legacy and unified storage. This is the first migration step and backfills the unified schema table.
  3. read-new-write-both - Reads from unified storage, writes to both. Validates the new read path while maintaining backward compatibility.
  4. read-new-write-new - Reads and writes only unified storage. This is the final migration target.

  Deployment:

  • With the SpiceDB Operator:* Configure the operator to roll through stages 1 through 4 in sequence. The operator handles the rolling update of SpiceDB instances at each stage.
  • Without the operator:* Progress through the stages manually by updating the --experimental-schema-mode flag and performing a rolling restart at each stage. You can also take the system down briefly and move directly from stage 1 to stage 4, which runs the full migration in one step.

Changed

• Build: strip quarantine attribute for MacOS (authzed/spicedb#3082)

Fixed

• Query plan contexts are written to during recursive calls -- for now, disable dispatch inside recursive calls (authzed/spicedb#3078)

What's Changed

• chore: roll changelog by @​tstirrat15 in authzed/spicedb#3080
• feat: add a DispatchExecutor for query plans to the dispatch package by @​barakmich in authzed/spicedb#3074
• test: prevent flaky TestCertWatcher by @​miparnisari in authzed/spicedb#3083
• fix: do not dispatch within a recursive context by @​barakmich in authzed/spicedb#3078
• build: strip quarantine attribute for macos by @​miparnisari in authzed/spicedb#3082
• chore(deps): bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 by @​dependabot[bot] in authzed/spicedb#3068
• feat: implement handling of dispatch and caching for DispatchQueryPlan by @​barakmich in authzed/spicedb#3079
• feat: add unified schema storage with ReadStoredSchema/WriteStoredSchema by @​josephschorr in authzed/spicedb#2924
• chore: remove errant comment by @​tstirrat15 in authzed/spicedb#3090
• fix: add benchmark fixes after schema cache, applying optimizations by @​barakmich in authzed/spicedb#3091
• fix: wire DispatchExecutor into the GRPC path properly and fix correctness by @​barakmich in authzed/spicedb#3093
• chore: bump go version to 1.26.3 by @​barakmich in authzed/spicedb#3098
• ci: save benchmarks to cache on main by @​miparnisari in authzed/spicedb#3103
• chore(deps): bump the github-actions group across 1 directory with 18 updates by @​dependabot[bot] in authzed/spicedb#3104
• refactor: wire QueryPlanMetadata through dispatch as well by @​barakmich in authzed/spicedb#3096
• feat(queryopt): set simplification optimizer by @​jzelinskie in authzed/spicedb#3051

Full Changelog: authzed/spicedb@v1.52.0...v1.53.0

Docker Images

This release is available at authzed/spicedb:v1.53.0, quay.io/authzed/spicedb:v1.53.0, ghcr.io/authzed/spicedb:v1.53.0

Changelog

Sourced from github.com/authzed/spicedb's changelog.

[1.53.0] - 2026-05-13

Added

• Add DispatchExecutor, a query plan executor that is Dispatch-aware and sends subproblems on Alias boundaries (authzed/spicedb#3074)

• Implement Dispatch caching for query plan execution (authzed/spicedb#3079)

• Add new optimizer to query planner based on set theory laws for simplifications (authzed/spicedb#3051)

• Experimental: Add unified schema storage with ReadStoredSchema/WriteStoredSchema APIs for improved schema read performance (authzed/spicedb#2924)

  This feature stores the entire schema as a single serialized proto rather than reading individual namespace and caveat definitions separately, significantly improving schema read performance.

  Migration to unified schema storage is controlled by the --experimental-schema-mode flag, which supports a 4-phase rolling migration:

  1. read-legacy-write-legacy (default) - No change; reads and writes use legacy per-definition storage.
  2. read-legacy-write-both - Reads from legacy storage, writes to both legacy and unified storage. This is the first migration step and backfills the unified schema table.
  3. read-new-write-both - Reads from unified storage, writes to both. Validates the new read path while maintaining backward compatibility.
  4. read-new-write-new - Reads and writes only unified storage. This is the final migration target.

  Deployment:

  • With the SpiceDB Operator:* Configure the operator to roll through stages 1 through 4 in sequence. The operator handles the rolling update of SpiceDB instances at each stage.
  • Without the operator:* Progress through the stages manually by updating the --experimental-schema-mode flag and performing a rolling restart at each stage. You can also take the system down briefly and move directly from stage 1 to stage 4, which runs the full migration in one step.

Changed

• Build: strip quarantine attribute for MacOS (authzed/spicedb#3082)

Fixed

• Query plan contexts are written to during recursive calls -- for now, disble dispatch inside recursive calls (authzed/spicedb#3078)

Commits

• b15effc feat(queryopt): set simplification optimizer (#3051)
• ee7c9a7 refactor: wire QueryPlanMetadata through dispatch as well (#3096)
• de1c453 chore(deps): bump the github-actions group across 1 directory with 18 updates...
• 65d4b76 ci: save benchmarks to cache on main (#3103)
• 42f1599 chore: bump go version to 1.26.3 (#3098)
• 1df1014 fix: wire DispatchExecutor into the GRPC path properly and fix correctness (#...
• 4f27b94 fix: add benchmark fixes after schema cache, applying optimizations (#3091)
• fa6fb18 chore: remove errant comment (#3090)
• 893f622 feat: add unified schema storage with ReadStoredSchema/WriteStoredSchema (#2924)
• 5979cb2 feat: implement handling of dispatch and caching for DispatchQueryPlan (#3079)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)