DataHub v1.7.0.1 🖖 Patch release for the v1.7.0 line: authorization tightening, CVE dependency bumps, entity-graph-cache and lineage correctness fixes, optional optimistic locking for aspect writes, and the remainder of the custom-assertion stack. Requirements CLI / Python SDK: 1.7.0.9 Helm Chart: 1.1.0 Full upgrade guidance, including every breaking change and migration step: Updating DataHub — v…
DataHub v1.6.0.3 Patch release for the v1.6.0 LTS line. Focus is security and authorization hardening, plus a few ingestion and platform fixes. Full diff: v1.6.0.2...v1.6.0.3 Operator notes Python 3.11 is required on this hotfix line (ingestion CLI/images and related packages). Python 3.10 is no longer supported for v1.6.0.x (#19703). SecretService caller guard defaults to ENFORCE. Secret encrypt/…
What's Changed fix(sec): backport aiohttp 3.14.3 for CVE-2026-69244 to v1.6.0 by @rajatoss in #19983 Full Changelog: v1.6.0.3rc4...v1.6.0.3rc5
What's Changed chore(deps): security and auth backports for v1.6.0 by @david-leifker in #19967 Full Changelog: v1.6.0.3rc3...v1.6.0.3rc4
Full Changelog: v1.6.0.3rc2...v1.6.0.3rc3
Full Changelog: v1.6.0.3rc1...v1.6.0.3rc2
What's Changed fix(deps): bump mariadb-java-client to 2.7.14 for CVE-2026-55856/557/558 by @david-leifker in #19556 fix(deps): bump Jackson 2.22.2 and Parquet 1.18.1 on v1.6.0 by @david-leifker in #19701 fix(deps): bump Spring Framework, Boot, Security, and Kafka to latest 7.0/4.0 patches by @david-leifker in #19700 chore(python): require Python 3.11 on the v1.6.0 LTS hotfix line by @david-leifker…
What's Changed fix(executor): mask requirements logging in-process instead of cat by @rajatoss in #19641 fix(executor): route runner log echo through stdlib logging by @rajatoss in #19642 fix(executor): fail-closed masking at every publish choke point by @rajatoss in #19643 ci(release): surface docker-unified URL in the cut-tag summary by @anshbansal in #19646 Full Changelog: v1.8.0rc2...v1.8.0rc3
What's Changed feat(ingestion/montecarlo): add Monte Carlo connector by @alokr-dhub in #17685 fix(openlineage): assign domains to entities from the REST endpoint by @yjyspree in #19519 refactor(ui): alchemy-components convergence by @v-tarasevich-blitz-brain in #19575 refactor(ui): conf convergence by @v-tarasevich-blitz-brain in #19595 refactor(ui): converge app/sharedV2 with the SaaS frontend by…
What's Changed docs(cloud): add breaking change for context docs views by @manuelawei8 in #18843 perf(graphql): batch Container.entities count-only resolution to eliminate N+1 by @gdatahub in #18640 fix(ingest): exclude nltk 3.10.1, which silently breaks document chunking by @nwadams in #18847 ci(build): Use chainguard indexes for python packages by @devashish2203 in #18714 docs(ingest): clarify a…
What's Changed chore(cli): bump default cli by @david-leifker in #19605 Full Changelog: v1.7.0.1rc2...v1.7.0.1rc3
What's Changed fix(deps): bump httpclient5, Spring Boot, and OTel agent for v1.7.0.1rc1 CVEs by @david-leifker in #19565 fix(gms): backport IRSA credential leak fix to v1.7.0 by @david-leifker in #19581 fix(sec): backport ingestion secret-masking, GitPython, and image cache-bust fixes to v1.7.0 by @supersingh05 in #19591 Full Changelog: v1.7.0.1rc1...v1.7.0.1rc2
What's Changed fix(ingest): exclude nltk 3.10.1, which silently breaks document chunking by @nwadams in #18889 chore(release): backport custom assertion stack to v1.7.0 by @AdrianMachado in #18882 feat(optimistic-locking): optimistic locking, aspect advisory locks, and Hazelcast write gate to v1.7.0 by @Dutt23 in #19249 fix(sec): bump wire-runtime 5.2.0 → 6.3.0 for CVE-2026-45799 by @max-datahub i…
What's Changed fix(sec): backport security fixes and CVE dependency bumps to v1.6.0 by @supersingh05 in #19414 fix(policies): apply validator level aspect edit controls for user and group aspects (#19360) by @RyanHolstien in #19438 fix(sec): backport GMS /auth helper gate and timeseries view privileges to v1.6.0 by @david-leifker in #19529 Full Changelog: v1.6.0.1...v1.6.0.2
What's Changed fix(sec): backport security fixes and CVE dependency bumps to v1.6.0 by @supersingh05 in #19414 fix(policies): apply validator level aspect edit controls for user and group aspects (#19360) by @RyanHolstien in #19438 fix(sec): backport GMS /auth helper gate and timeseries view privileges to v1.6.0 by @david-leifker in #19529 Full Changelog: v1.6.0.1...v1.6.0.2rc1
What's Changed fix(security): backport security fixes to v1.6.0 by @supersingh05 in #18613 fix(release): backport v1.6.0 platform bugfixes from master by @david-leifker in #18683 fix(deps): bump lz4-java to 1.11.1 and jackson to 2.21.5 (security, v1.6.0) by @supersingh05 in #18741 fix(backport): v1.6.0 — transaction retry backoff/conflict API, PostgreSQL lock ordering, Spring 7.0.8 by @supersingh0…
Full Changelog: v1.6.0.1rc4...v1.6.0.1rc5
What's Changed fix(sec): bump wire-runtime 5.2.0 → 6.3.0 for CVE-2026-45799 by @supersingh05 in #19100 Full Changelog: v1.6.0.1rc3...v1.6.0.1rc4
Full Changelog: v1.6.0.1rc2...v1.6.0.1rc3
DataHub v1.7.0 Requirements CLI / Python SDK: 1.7.0 Helm Chart: 1.1.0 Full upgrade guidance, including every breaking change and migration step: Updating DataHub — v1.7.0. Upgrade path / ZDU: You must upgrade to v1.6.0 before upgrading to v1.7.0 — do not skip 1.6.0. Deploy v1.6.0 with Helm chart 1.0.3, let system-update complete, then upgrade to v1.7.0 with Helm chart 1.1.0. Enable Elasticsearch/O…
Full Changelog: v1.7.0rc1...v1.7.0rc2
fix(kafka): ship jose4j for SASL/OAUTHBEARER JWT validation (#18837) Co-authored-by: Cursor <cursoragent@cursor.com>
What's Changed fix(deps): bump lz4-java to 1.11.1 and jackson to 2.21.5 (security, v1.6.0) by @supersingh05 in #18741 fix(backport): v1.6.0 — transaction retry backoff/conflict API, PostgreSQL lock ordering, Spring 7.0.8 by @supersingh05 in #18798 Full Changelog: v1.6.0.1rc1...v1.6.0.1rc2
Security & Bugfix Full Changelog: v1.6.0...v1.6.0.1rc1
DataHub v1.6.0 Full upgrade guidance, including every breaking change and migration step: Updating DataHub — v1.6.0. Feature highlights UI and experience V2 UI only — Legacy V1 UI code is removed; V2 is the sole interface with an updated collapsible navigation and home hero toggler (#17468). Play 3 frontend — datahub-frontend runs on Play 3 and Apache Pekko for improved security and maintainabilit…
Full Changelog: v1.6.0rc1...v1.6.0rc2
Full Changelog: v1.5.0...v1.6.0rc1
Security Update Full Changelog: v1.5.0.6...v1.5.0.7
Full Changelog: v1.5.0.6...v1.5.0.7rc3
Full Changelog: v1.5.0.6...v1.5.0.7rc2