Issues

• stack-encrypt: a plan field with an index but no "type" trusts the binding to tag every value the same way — require "type" once the Go binding declares it

  enhancementrustSDK
  cipherstash/stack#1082 · Filter by author coderdan opened on Oct 5, 2026

• Upgrading a stack-prisma 1.0 or 1.1 database fails with "out of shared memory" on default Postgres settings

  bugSDK
  cipherstash/stack#1080 · Filter by author auxesis opened on Oct 5, 2026
  1

• stack-encrypt never sends lock context or audit context to ZeroKMS — bind chosen field facts and send audit facts as unverified context

  enhancementrustSDK
  cipherstash/stack#1067 · Filter by author coderdan opened on Oct 4, 2026
  

• Go binding: Decrypt fills an untyped out any — add a typed Plan[T] so it returns T

  enhancementSDK
  cipherstash/stack#1066 · Filter by author coderdan opened on Oct 4, 2026
  

• @cipherstash/stack runs a second encryption engine (protect-ffi) — new major built on stack-encrypt (umbrella)

  enhancementjavascriptSDK
  cipherstash/stack#1065 · Filter by author coderdan opened on Oct 4, 2026
  

• WebAssembly guest blocks on a synchronous ZeroKMS call and cannot run on the edge — export the two halves of a batch so the host does the I/O

  enhancementrustSDK
  cipherstash/stack#1064 · Filter by author coderdan opened on Oct 4, 2026
  

• stack-encrypt: every index is compiled into the core crate — move Equality, Match, Ore, Ope into their own crates

  enhancementrustSDK
  cipherstash/stack#1063 · Filter by author coderdan opened on Oct 4, 2026
  1

  

• Go and Rust plans cannot target EQL domains, so Go writes rows EQL cannot query — make domains plan field targets

  enhancementrustSDK
  cipherstash/stack#1062 · Filter by author coderdan opened on Oct 4, 2026
  1

  

• Go binding: no way to declare or query a JSON index — add Json() and the three JSON query forms

  enhancementSDK
  cipherstash/stack#1061 · Filter by author coderdan opened on Oct 4, 2026
  

• stack-encrypt has no searchable JSON — add a Json index that seals a document's entries under one data key

  enhancementrustSDK
  cipherstash/stack#1060 · Filter by author coderdan opened on Oct 4, 2026
  

• stack-encrypt: dynamic::record is a second executor that already seals differently from the derive — make it a lowering into the plan builder

  enhancementrustSDK
  cipherstash/stack#1059 · Filter by author coderdan opened on Oct 4, 2026
  2

  

• Go binding: one-call eager keyset resolution that returns a cipher bound by id (Rust's keyset())

  enhancementSDK
  cipherstash/stack#1048 · Filter by author coderdan opened on Oct 4, 2026

• Go binding: one chained Encrypt with a plan, mirroring stack-encrypt's plan builder

  enhancementSDK
  cipherstash/stack#1046 · Filter by author coderdan opened on Oct 4, 2026
  3

  

• stack-auth OidcFederationStrategy reuses one user's token for every user until it expires — lock context can bind to the wrong person

  bugrustSDK
  cipherstash/stack#1045 · Filter by author coderdan opened on Oct 4, 2026
  

• Run CI on the Version Packages PR, and stop the version script rewriting Cargo.lock

  buggithub-actionsSDK
  cipherstash/stack#1044 · Filter by author auxesis opened on Oct 3, 2026
  1

• Keep the Alpine image for the musl auth build current, and pin its packages

  dependenciesgithub-actionsSDK
  cipherstash/stack#1042 · Filter by author auxesis opened on Oct 3, 2026

• Replace the leftover bindings/go references, and extend the Go path guard

  documentationSDK
  cipherstash/stack#1040 · Filter by author auxesis opened on Oct 3, 2026

• Remove the stale node and wasm excludes from stack-auth's tasks.toml

  rustSDK
  cipherstash/stack#1039 · Filter by author auxesis opened on Oct 3, 2026

• Cache the native binding build in tests.yml, and use the pinned Rust

  github-actionsrustSDK
  cipherstash/stack#1038 · Filter by author auxesis opened on Oct 3, 2026

• Rewrite docs/npm-releases.md for the release process in stack

  documentationSDK
  cipherstash/stack#1037 · Filter by author auxesis opened on Oct 3, 2026

• Fix the cache inputs and outputs of the @cipherstash/auth#build:native turbo task

  javascriptSDK
  cipherstash/stack#1036 · Filter by author auxesis opened on Oct 3, 2026

• Add a release process and a first version tag for the Go module

  enhancementneeds-triageSDK
  cipherstash/stack#1034 · Filter by author auxesis opened on Oct 3, 2026

• Build protect-ffi releases with the pinned Rust, not the runner's

  github-actionsrustSDK
  cipherstash/stack#1033 · Filter by author auxesis opened on Oct 3, 2026

• Pin the mise version in the four CI steps that take the newest release

  enhancementgithub-actionsSDK
  cipherstash/stack#1032 · Filter by author auxesis opened on Oct 3, 2026

• Move the stack-profile changelog sections that have no release heading

  documentationrustSDK
  cipherstash/stack#1031 · Filter by author auxesis opened on Oct 3, 2026