[fatih-acar]

Release 1.11.10

Files changed for release 1.11.10

• CHANGELOG.md: towncrier added the 1.11.10 section from 22 changelog fragments and removed those fragments. The Redis 6.0 entry then received a Breaking: prefix. After the rebase onto stable, the fragment of fix(workflows): remove the concurrency limit from clean-up-deadlocks #11302 was added to the Changed section, where towncrier places it, and removed.
• docs/docs/release-notes/infrahub/release-1_11_10.mdx: new release notes page with these frontmatter values:
  • release_type: security, because the changelog has a Security section.
  • breaking: true, because of the Redis 6.0 requirement.
• docs/docs/deploy-manage/install-configure/production-deployment/high-availability.mdx, development/k8s/infrahub-values.yaml and development/deploy.tf: the HA guide and its examples now name 1.11.10 instead of 1.11.9. These files were wrong before because 1.11.9 does not have the INFRAHUB_CACHE_URL setting, the queue_type broker setting, or Docket 0.27.0, so 1.11.10 is the first release that runs the examples.
• docker-compose.yml: the "Update Docker Compose & helm chart" workflow pinned the Infrahub images to 1.11.10 (run 41046002931, committed by opsmill-bot). The same run set appVersion and prefectTag to 1.11.10 in opsmill/infrahub-helm, and raised the infrahub chart to 4.35.2 and the infrahub-enterprise chart to 4.23.2.

Redis 6.0 is now required

Infrahub now opens every Redis connection with the HELLO command, which Redis 5.0 and earlier reject (#9451, issue #9449). Teams that run Redis 5.0 or earlier must upgrade Redis before they upgrade Infrahub. As in 1.11.3, the Changed entry has a Breaking: prefix and the release notes page sets breaking: true.

Pull requests merged into stable since 1.11.9

• Security: fix(deps): update base Python to 3.14.10 for GHSA-6q48-6c7w-9gw2 #11286 updates the base Python version to 3.14.10 for GHSA-6q48-6c7w-9gw2.
• Features:
  • feat: support Redis Sentinel for HA cache and lock connections [#9449] #9451: Redis Sentinel support for the cache and lock connections (issue feature: support Redis Sentinel for HA cache and lock connections #9449).
  • feat(message-bus): add an option to declare RabbitMQ queues as quorum queues #11251: option to declare the RabbitMQ queues as quorum queues.
• Fixes:
  • fix(graphql): return 4xx instead of 500 for invalid mutation input #11241: return 4xx instead of 500 for invalid mutation input (issue bug: an invalid GraphQL query returns HTTP 500, so the SDK retries a repository import for 5 minutes before it fails #11232).
  • fix(backend): report an unknown HFID peer read by a computed attribute as node not found #11022: report an unknown human-friendly ID peer read by a computed attribute as not found (issue bug: unknown HFID peer read by a Jinja2 computed attribute fails with "Relationship has not been initialized yet" (HTTP 500) instead of NODE_NOT_FOUND #11018).
  • fix: update transformation, class name and check targets on git sync #11045: update the Transformation, class name and check targets on Git sync (issue bug: Git Integrator: Artifact definitions do not reconcile or update the 'transformation' relationship on existing nodes #11036).
  • fix(workflows): stop persisting every-minute flow results [#11166] #11209: stop storing the results of the flows that run every minute (issue bug: three flows scheduled every minute add 4,320 runs a day to the task manager database and nothing deletes them #11166).
  • fix: filters, lookups and search on a branch match the branch's value (closes #11218) #11220: filters, lookups and search on a branch match the branch's value (issue bug: on a branch, filters and lookups by value still match the value the branch replaced #11218).
  • fix(validators): complete a validator when a check run raises [#11277] #11279: complete a validator when a check run raises (issue bug: a proposed change check stays "in progress" forever when one of its runs fails or times out #11277).
  • fix(graphql): open a database session per query resolver #11185: open a database session per GraphQL query resolver.
  • fix(backend): attach missing constraint validators #11177: attach missing constraint validators.
  • fix(regeneration): don't store the post-merge generator capture diff #10811 and fix: batch generator capture cleanup during upgrades #11288: do not store the post-merge Generator capture diff, and delete the stored diffs during upgrades.
  • fix(workflows): expire task results stored in Redis #10631: expire task results stored in Redis.
  • fix: update all documentation links across the backend code #10956: update the documentation links in the backend.
  • fix(testcontainers): use Neo4j 2026.05.0 by default and in e2e CI #11272: use Neo4j 2026.05.0 by default in infrahub-testcontainers.
  • f314dc9: keep table scrollbars above the table's pinned cells. This commit is on stable without a pull request against stable; its pull request against develop, fix(frontend): keep table scrollbars above the table's pinned cells #11195, was closed.
  • fix(docker): pin uv in the image build stage and update it to 0.13.6 #11301: pin uv in the image build stage and update it to 0.13.6.
  • fix(workflows): remove the concurrency limit from clean-up-deadlocks #11302: remove the concurrency limit from the clean-up-deadlocks task.
• Documentation only: docs(object-templates): add how-to for importing NetBox device types #10755, docs: add Nested menus and correct the display and menu pages #10939, docs: point lab links to docs.infrahub.app/labs #11139, docs: correct how git trusts a private CA bundle #11161, docs(vale): accept certifi in the spell check #11183, docs: restart task workers after a Helm upgrade #11230, docs: fix broken links to Infrahub Backup and Cosign install pages #11235, docs: add a Kubernetes manifest to run the benchmark on a storage class #11300
• Tests only: test: check that core schema documentation links point to existing docs pages #10976
• Agent and tooling changes only: chore: add a PR review skill and an opt-in hook that runs it #11140, chore(speckit): remove the incomplete infrahub extension #11191, chore(agents): make pre-ci a user-only skill and drop five commands #11246, docs(agents): turn the dependency upgrade command into a skill #11259, chore(ruff): remove unused per-file ignores and narrow backend/tests/*.py #11261
• Dependency bumps:
  • Neo4j Python driver 6.2.0 to 6.4.1: chore(deps): upgrade the Neo4j Python driver from 6.2.0 to 6.4.1 #11172
  • vitest 5: chore(deps): upgrade vitest to 5 to drop the vi.mock race workaround #11206
  • uv group: chore(deps): bump the uv group across 2 directories with 3 updates #11205, chore(deps): bump the uv group across 1 directory with 2 updates #11276
  • GitHub Actions: chore(deps): bump docker/login-action from 4.6.0 to 4.7.0 #11222, chore(deps): bump actions/setup-python from 7.0.0 to 7.1.0 #11224, chore(deps): bump chromaui/action from 18.13.0 to 18.13.3 #11225

Open pull requests in opsmill/infrahub-helm

None of the open pull requests in opsmill/infrahub-helm ship in 1.11.10, so none were merged:

• chore(infrahub): upgrade Neo4j from 2026.05.0 to 2026.10.1 infrahub-helm#114 (Neo4j subchart 2026.9.0): its description says to merge it while Infrahub 1.13 is cut.
• feat(infrahub)!: remove the NATS subchart infrahub-helm#115 (remove the NATS subchart): its description says to merge it after feat!: remove the NATS message bus and cache drivers #11210, which is still open.
• feat: set the task manager retention and start the background services through infrahub infrahub-helm#100 (task manager retention): its description says not to merge it until the Infrahub images move to 1.13 or later.

Checks run locally

• uv run invoke release.validate-docker-compose --version 1.11.10 passes.
• node scripts/backfill-release-frontmatter.mjs --check passes.
• uv run invoke docs.lint reports 0 errors.
• uv run invoke docs.validate leaves no changes.
• pyproject.toml and python_testcontainers/pyproject.toml are unchanged.

Graph migration 080 on stable and release-1.12

This release ships graph migration 080 as m080_delete_generator_capture_diffs. On release-1.12 and develop, 080 is m080_number_pool_ranges (minimum version 79), followed by 081 and 082. A database upgraded to 1.11.10 is at graph version 80, so an upgrade to 1.12 skips m080_number_pool_ranges unless release-1.12 and develop renumber their 080–082 to 081–083 when stable is merged in. The comment on #11275 describes this.

Steps after merge

Tag the commit on stable that contains all the commits of this pull request with infrahub-v1.11.10, then create the GitHub release from that tag to start the New Release workflow.

🤖 Generated with Claude Code

[codspeed]

Merging this PR will not alter performance

1 warning

⚠️ 2 benchmarks are dominated by system calls

System calls cannot be simulated consistently and are left out of the measure. The reported value understates the real cost. Switch to the Walltime instrument to measure them.

Learn more about system calls

See affected benchmarks

✅ 13 untouched benchmarks

---

_{Comparing fac-prep-release-1.11.10 (d863c03) with stable (3a3894f)¹}

Footnotes

1. No successful run was found on stable (b6da4b6) during the generation of this report, so 3a3894f was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩