# Weaviate updates

Every Weaviate update in one feed — release notes, features and changes, straight from the source.

9 updates

- ## [Deprecating the GraphQL API: timeline and migration paths](<https://creatorstoolbox.com/blog/weaviate-deprecating-the-graphql-api-timeline-and-migration-paths>)

GraphQL stays on until May 1, 2027 on Weaviate Cloud, but clusters unused for 30 days are switched off on December 1, 2026.

2026-10-26

- ## [How Weaviate responded to the eMudhra certificate compromise](<https://creatorstoolbox.com/blog/weaviate-how-weaviate-responded-to-the-emudhra-certificate-compromise>)

Weaviate moved its platform to Go 1.27.3, patching Enterprise customers within six hours and everything else in under 17.

2026-10-22

- ## [Weaviate security release - Medium severity fix for a cross-collection vector disclosure in nearObject (CVE pending assignment)](<https://creatorstoolbox.com/blog/weaviate-weaviate-security-release-medium-severity-fix-for-a-cross-collection>)

Weaviate v1.39.3 closes a flaw that let users reconstruct vectors from collections they could not read, and Weaviate Cloud is already patched.

2026-10-15

- ## [PathSeer: Adaptive Filtered Vector Search](<https://creatorstoolbox.com/blog/weaviate-pathseer-adaptive-filtered-vector-search>)

PathSeer, a new HNSW filter strategy in Weaviate 1.40, blends sweeping and ACORN for 1.10× build time and 1.06× memory.

2026-10-14

- ## [Weaviate 1.40 Release](<https://creatorstoolbox.com/blog/weaviate-weaviate-1-40-release>)

Weaviate's open-source and Cloud release makes vector dropping and 4-bit RQ generally available, and flags one breaking change to defaults.

2026-10-14

- ## [Persistent memory for Claude Code with Weaviate Engram](<https://creatorstoolbox.com/blog/weaviate-persistent-memory-for-claude-code-with-weaviate-engram>)

The Engram plugin gives Claude Code memory that carries across repos and sessions, built on Weaviate's Engram memory server.

2026-10-08

- ## [Weaviate security release - High severity fix for credential disclosure in the Google modules](<https://creatorstoolbox.com/blog/weaviate-weaviate-security-release-high-severity-fix-for-credential-disclosure>)

The fix is in v1.39.3; Weaviate Cloud and Marketplace customers are already patched, and a CVE is pending assignment.

2026-10-01

- ## [Agent Memory with Engram: A Practical Guide](<https://creatorstoolbox.com/blog/weaviate-agent-memory-with-engram-a-practical-guide>)

Engram's run status guide covers the four run states, committed operations and error handling, and says most apps never need to poll.

2026-09-22

- ## [4-bit Rotational Quantization](<https://creatorstoolbox.com/blog/weaviate-4-bit-rotational-quantization>)

4-bit RQ shrinks the index further than 8-bit, works with the hnsw index only, and can be enabled on new or existing uncompressed collections.

2026-09-17

[Open Weaviate updates on Creators Toolbox](<https://creatorstoolbox.com/updates/weaviate>)

---
Canonical source: https://creatorstoolbox.com/updates/weaviate