Fetching from the wire…
Public story · 2026-09-09 · high
Version 3.13.0 closes a gap where a corrupted log file could leave a database silently incomplete, with no error and no way to catch it later.
Why now: Memgraph published the fix in its 3.13.0 release notes on GitHub, covered here as of September 9, 2026.
Memgraph shipped version 3.13.0 with a fix for a data loss bug that never announced itself. Before this release, a crash that left a write-ahead log (WAL) file damaged partway through didn't stop recovery. Recovery replayed the readable prefix of that file, then applied every WAL file after it in full, producing a dataset missing whatever came after the damage. No error, no warning.
That matters most for anyone running replicas, since it's the case where the gap doesn't just cost data, it costs trust in the data. A replica in that state reports the timestamp of the last WAL it processed, and main reads that timestamp and considers the replica caught up. The divergence never healed on its own.
Memgraph's 3.13.0 release changes what happens when a WAL file that's already been finalized on disk turns up damaged: recovery now stops instead of continuing past it. Hitting that case means using --storage-allow-recovery-failure combined with RECOVER SNAPSHOT, or restoring from a backup. A WAL still open at the moment of the crash is handled differently. It's truncated to its last whole transaction, and recovery proceeds from there.
The release notes don't say how long the silent version of this bug shipped, or how anyone would have detected an already-diverged replica under the old behavior. That's the open question for anyone who's had Memgraph replication running for a while: the new version stops the bug from happening again, but it doesn't tell you whether it already happened to you.
Each link below shares sources, entities, or timing with this story.
size(), substring(), left() and right() count characters not bytes so size('中') is 1 not 3, numbers starting with 0 are octal so 09 is a parse error, a RETURN inside EXISTS{} now affects the answer, single() returns null instead of true when the predicate is null for any eleme...
semantica-agi/semantica surged +1,181 stars to 7,761 today, and the release driving it is a security release from August 11 fixing six externally-reported flaws across the Explorer API and the graph store backends, plus a CodeQL-flagged ReDoS. GitHub A missing-authentication g...
Praetorian's open-source tool validates 6 attack vectors against your MCP servers: prompt injection, RCE, C2, data exfiltration, config manipulation, file execution. Clone, set API key, test, harden. Source: GitHub
The abliteration tool gained 215 stars to reach 30,103, but the stronger signal is downstream: the HF trending endpoint returns DavidAU/Qwen3.8-27B-TURBO-Fable-Cold-Fusion-735-882-Heretic-Uncensored-NM-DAU and Momoking/Qwen3-VL-32B-Heretic-MiniMax-H3-NVFP4, both naming the too...
OpenAI's Codex skills catalog gained 46 stars today, but the API shows its last push was eight weeks ago and its open items split into 0 pull requests and 77 issues (GitHub). A first-party catalog that accepts no outside code and hasn't been touched in two months is a weaker e...
Published September 7, it puts OpenAI Codex in the agent picker with a copy-ready ~/.codex/config.toml panel pointing Codex CLI and Desktop at Manifest over the Responses API (GitHub). Two compatibility fixes make it work: Responses-API role: "developer" instruction messages f...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.