date: 2026-01-07 title: 'Spice v1.11.0-rc.1 (Jan 6, 2026)' type: blog authors: [ewgenius] tags: [release, distributed-query, cayenne, acceleration, data-connector, llm-tool]
Announcing the release of Spice v1.11.0-rc.1! :star:
v1.11.0-rc.1 is the first release candidate for early testing of v1.11 features including Distributed Query with mTLS for enterprise-grade secure cluster communication, new SMB and NFS Data Connectors for direct network-attached storage access, Prepared Statements for improved query performance and security, Cayenne Accelerator Enhancements with Key-based deletion vectors and Amazon S3 Express One Zone support, Google LLM Support for expanded AI inference capabilities, and Spice Java SDK v0.5.0 with parameterized query support.
Enterprise-Grade Secure Cluster Communication: Distributed query (opens in a new tab) cluster mode now enables mutual TLS (mTLS) by default for secure communication between schedulers and executors. Internal cluster communication includes highly privileged RPC calls like fetching Spicepod configuration and expanding secrets. mTLS ensures only authenticated nodes can join the cluster and access sensitive data.
Key Features:
spice cluster tls init and spice cluster tls add commands for generating CA certificates and node certificates with proper SANs (Subject Alternative Names)--role, --scheduler-address, --node-mtls-*) with --scheduler-address implying --role executorSchedulerGrpcServer, ClusterService) are isolated on port 50052 with mTLS enforced--allow-insecure-connections flag to disable mTLS requirement for local development and testingQuick Start:
For more details, refer to the Distributed Query Documentation (opens in a new tab).
Network-Attached Storage Connectors: New data connectors (opens in a new tab) for SMB (Server Message Block) and NFS (Network File System) protocols enable direct federated queries against network-attached storage without requiring data movement to cloud object stores.
Key Features:
Example spicepod.yaml configuration:
For more details, refer to the Data Connectors Documentation (opens in a new tab).
Improved Query Performance and Security: Spice now supports prepared statements, enabling parameterized queries that improve both performance through query plan caching and security by preventing SQL injection attacks.
Key Features:
SDK Support:
| SDK | Support | Min Version | Method |
|---|---|---|---|
| gospice (opens in a new tab) (Go) | ✅ Full | v8.0.0+ | SqlWithParams() with typed constructors (Int32Param, StringParam, TimestampParam, etc.) |
| spice-rs (opens in a new tab) (Rust) | ✅ Full | v3.0.0+ | query_with_params() with RecordBatch parameters |
| spice-dotnet (opens in a new tab) (.NET) | ❌ Not yet | - | Coming soon |
| spice-java (opens in a new tab) (Java) | ✅ Full | v0.5.0+ | queryWithParams() with typed Param constructors (Param.int64(), Param.string(), etc.) |
| spice.js (JavaScript) |
Example (Go):
Example (Java):
For more details, refer to the Parameterized Queries Documentation (opens in a new tab).
The Spice Cayenne data accelerator (opens in a new tab) has been improved with several key enhancements:
Example spicepod.yaml configuration:
For more details, refer to the Cayenne Documentation (opens in a new tab).
Expanded AI Provider Support: Spice now supports Google embedding and chat models via the Google AI provider, expanding the available LLM options for AI inference workloads alongside existing providers like OpenAI, Anthropic, and AWS Bedrock.
Key Features:
Example spicepod.yaml configuration:
For more details, refer to the Google LLM Documentation (opens in a new tab) (see docs PR #1286 (opens in a new tab)).
Parameterized Query Support for Java: The Spice Java SDK (opens in a new tab) v0.5.0 introduces parameterized queries using ADBC (Arrow Database Connectivity), providing a safer and more efficient way to execute queries with dynamic parameters.
Key Features:
double → Float64, String → Utf8)Param class with typed factory methods (Param.int64(), Param.string(), Param.decimal128(), etc.) for precise control over Arrow typesExample:
Maven:
For more details, refer to the Spice Java SDK Repository (opens in a new tab).
Unified Telemetry Endpoint: OTel metrics ingestion has been consolidated to the Flight port (50051), simplifying deployment by removing the separate OTel port (50052). The push-based metrics exporter continues to support integration with OpenTelemetry collectors.
Note: This is a breaking change. Update your configurations if you were using the dedicated OTel port 50052. Internal cluster communication now uses port 50052 exclusively.
spice cloud CLI commands for cloud deployment managementsnapshots_create_interval for periodic acceleration snapshots independent of refresh cyclescaching refresh mode, enabling multi-layer acceleration where a persistent cache feeds a fast in-memory cachedynamodb_auth: iam_role parametertemp_directory parameter for shuffle filesDistributeFileScanOptimizer plansmax_message_size configuration for Flight serviceOTel ingestion has been moved to the Flight port (50051), removing the separate OTel port 50052. Port 50052 is now used exclusively for internal cluster communication. Update your configurations if you were using the dedicated OTel port.
Distributed query cluster mode now requires mTLS for secure communication between cluster nodes. This is a security enhancement to prevent unauthorized nodes from joining the cluster and accessing secrets.
Migration Steps:
spice cluster tls init and spice cluster tls add--node-mtls-* arguments--allow-insecure-connections to opt out of mTLSRenamed CLI Arguments:
| Old Name | New Name |
|---|---|
--cluster-mode | --role |
--cluster-ca-certificate-file | --node-mtls-ca-certificate-file |
--cluster-certificate-file | --node-mtls-certificate-file |
--cluster-key-file | --node-mtls-key-file |
--cluster-address | --node-bind-address |
--cluster-advertise-address | --node-advertise-address |
--cluster-scheduler-url | --scheduler-address |
Removed CLI Arguments:
--cluster-api-key: Replaced by mTLS authenticationNo major cookbook updates.
The Spice Cookbook (opens in a new tab) includes 84 recipes to help you get started with Spice quickly and easily.
To try v1.11.0-rc.1, use one of the following methods:
CLI:
Homebrew:
Docker:
Pull the spiceai/spiceai:1.11.0-rc.1 image:
For available tags, see DockerHub (opens in a new tab).
Helm:
AWS Marketplace:
🎉 Spice is available in the AWS Marketplace (opens in a new tab)!
| ❌ Not yet |
| - |
| Coming soon |
| spicepy (opens in a new tab) (Python) | ❌ Not yet | - | Coming soon |
chunking crate. by @Jeadie (opens in a new tab) in #8431 (opens in a new tab)aggregate_pushdown_optimization -> optimizer_duckdb_aggregate_pushdown by @ewgenius (opens in a new tab) in #8485 (opens in a new tab)runtime-datafusion by @Jeadie (opens in a new tab) in #8490 (opens in a new tab)make lint-rust-fix with make lint-rust by @Jeadie (opens in a new tab) in #8499 (opens in a new tab)captured_plan outputs to be captured even if they would be filtered out otherwise by @phillipleblanc (opens in a new tab) in #8501 (opens in a new tab)model.datasets to allowlist on tools by @Jeadie (opens in a new tab) in #8714 (opens in a new tab)tools from auto-defaults by @Jeadie (opens in a new tab) in #8725 (opens in a new tab)text-to-sql dispatch in testoperator by @Jeadie (opens in a new tab) in #8705 (opens in a new tab)ghcr.io. by @Jeadie (opens in a new tab) in #8732 (opens in a new tab)testoperator_dispatch.yaml by @Jeadie (opens in a new tab) in #8740 (opens in a new tab)testoperator run text-to-sql. by @Jeadie (opens in a new tab) in #8745 (opens in a new tab)auth/iam_role_source to DynamoDB connector by @krinart (opens in a new tab) in #8808 (opens in a new tab)