Changelog OpenMetadata 2.0.3 is a maintenance release focused on connector reliability across Snowflake, BigQuery, MSSQL, Tableau, Looker, and DynamoDB, two data-integrity migrations, several security fixes including a certificate-verification bypass and a SQL-injection fix, and correctness fixes across search, lineage, and data quality. 🔌 Connectors & Ingestion Airflow: pipelines showed a stale r…
Changelog OpenMetadata 2.0.1 is a maintenance release focused on connector reliability, UI polish across Context Center and Explore, data governance and quality correctness, search and lineage fixes, MCP hardening, and a broad security dependency cleanup. 🔌 Connectors & Ingestion MLflow: Unity Catalog model version resolution and search were broken #30856, #31387: Model versions now resolve correc…
Changelog OpenMetadata 2.0.2 is a maintenance release focused on connector reliability across Oracle, Databricks, Snowflake, BigQuery, Clickhouse, KafkaConnect, Grafana, and StarRocks, MCP tool consolidation and hardening, a governance rollout that restricts direct team membership to Group teams, several XSS and access-control fixes, and a broad security dependency cleanup. 🔌 Connectors & Ingestio…
Changelog OpenMetadata 1.13.6 is a maintenance release focused on connector reliability across Kafka Connect, Tableau, Snowflake, BigQuery, Athena, Airflow, Looker, Grafana, Mode and Doris, correct change events and alerting for ingestion-driven updates, access-control fixes on the follower and glossary bulk-asset endpoints, and a repair of the Data Insights data-asset charts. It also adds SQL Ser…
Changelog OpenMetadata 1.13.5 is a maintenance release focused on connector reliability across REST, MLflow, DB2, Glue, and KafkaConnect, search and governance correctness, UI fixes, and a broad security dependency cleanup that also raises the ingestion package's Python floor to 3.10. 🔌 Connectors & Ingestion Deploying an ingestion pipeline intermittently returned a 500 or timed out on Airflow 3.x…
Features Data Quality Revamp Dynamic Sampling by default: The Profiler now defaults to Dynamic Sampling instead of scanning 100% of rows, significantly reducing query cost and execution time on large tables. Cardinality distribution removed from defaults: Cardinality metrics are no longer collected on every run. If your workflows depend on distinct-value counts (classification, tagging, custom rul…
Changelog OpenMetadata 1.13.4 is a maintenance release focused on connector reliability, search and lineage correctness, governance and MCP fixes, and a broad security cleanup across ingestion and platform dependencies. 🔌 Connectors & Ingestion Hive: test connection failed when no metastore was selected #30380: The metastore step is optional again, restoring the pre-1.13 behaviour for Hive service…
This is a Release Candidate for the upcoming 2.0.0 release and there will be changes until the final release is published. DO NOT use this in PROD. Please, only use it in DEV/TEST environments to provide any feedback or migration issues you encounter.
Changelog OpenMetadata 1.13.3 is a maintenance release delivering data contract and governance workflow fixes, alert delivery fixes, a Snowflake foreign-key reflection fix, and UI fixes. 🔌 Connectors & Ingestion Snowflake: foreign-key collisions across tables sharing a constraint name #30473: Foreign-key reflection is now keyed on (fk_name, table_name), so cloned tables that reuse a constraint nam…
This is a Release Candidate for the upcoming 2.0.0 release and there will be changes until the final release is published. DO NOT use this in PROD. Please, only use it in DEV/TEST environments to provide any feedback or migration issues you encounter.
Changelog OpenMetadata 1.13.2 is a maintenance release delivering MCP tool enhancements, search and reindexing reliability fixes, security patches, connector improvements, data governance and quality updates, lineage fixes, and UI enhancements. 🔒 Security Jackson, Logback, Postgres & Calcite dependency pins #30396: Aligned Jackson, Logback, Postgres, and Calcite dependency pins with main to clear…
🔒 Security Patch MLflow authorization vulnerabilities #30046: Raised the mlflow-skinny requirement to a patched 3.13 or newer release to address CVE-2026-2635 and CVE-2026-8147. Patch PyArrow IPC vulnerabilities #30146: Raised the PyArrow requirement to >=23.0.1,<26 to address CVE-2026-25087 and CVE-2024-52338. Patch server dependency vulnerabilities bd31ff6 cd46662 #30391: Updated Jackson, Logbac…
Features MCP Services MCP (Model Context Protocol) is now a first-class service category with service entities, server entities, execution logs, test-connection support, REST resources, and UI pages. Usage analytics expose summary, history, tool breakdown, user breakdown, and current-user usage MCP OAuth now supports SAML SSO authentication Client secrets are not issued to public clients get_entit…
🔍 Search & Performance Fix OpenSearch alias swap failure on fresh installations #29723: Removed an unsupported must_exist field from the remove_index alias action that caused OpenSearch to reject alias swaps with HTTP 400 on fresh installs. Stop falsely abandoning healthy reindex jobs that hold a live lock #29547: Reindex jobs with a stale timestamp but a live coordinator lock are no longer incorr…
🔒 Security Netty CVE-2026-44249 #28880: Bumped netty-bom to 4.1.135.Final. Jackson-databind CVE-2026-54512/513/514 #29389: Bumped jackson-databind from 2.18.7 to 2.18.8. Spring, Micrometer & OpenTelemetry CVE patches #29111: Spring 6.2.18 → 6.2.19, Micrometer upgraded, and OpenTelemetry pinned to patch reported CVEs. ws CVE-2026-48779 #29122: Bumped ws to 8.21.0. handlebars CVE-2026-55760 #29221:…
🔒 Security sudo upgraded for CVE-2026-35535 #29343: Upgraded sudo in the ingestion image to patch CVE-2026-35535. Spring, Micrometer & OpenTelemetry CVE patches #29111: Spring 6.2.18 → 6.2.19 (CVE-2026-41850, CVE-2026-41851), Micrometer 1.14.5 → 1.15.12, and pinned OpenTelemetry to patch reported CVEs. ws bumped for CVE-2026-48779 #29122: Updated ws to 8.21.0. handlebars bumped for CVE-2026-55760…
OpenMetadata 1.12.11 is a maintenance release delivering security patches, MCP improvements, AI enhancements, search fixes, UI enhancements, ingestion stability improvements, and connector updates. 🔒 Security React-router-dom security upgrade #28677: Snyk security upgrade of react-router-dom from 6.30.3 to 6.30.4 to address reported vulnerabilities. Netty-bom bumped for CVE-2026-44249 #28880: Upda…
Changelog OpenMetadata 1.12.10 is a maintenance release delivering critical security patches, MCP enhancements, and targeted bug fixes across migrations, search, UI, and ingestion runtime. 🔒 Security Snyk high/critical dependency patches in ingestion #28623: High and critical Snyk findings patched across ingestion dependencies to address multiple CVEs. Jackson-core and CloudFront Snyk high patches…
Changelog OpenMetadata 1.12.9 is a maintenance release delivering new connector capabilities, performance improvements for workflow execution, and targeted bug fixes across search, ingestion, UI, and the OpenMetadata Python client. ✨ New Features Unity Catalog — incremental metadata extraction #28380: Unity Catalog connector now detects changed tables via information_schema.tables.last_altered and…
Changelog OpenMetadata 1.12.8 is a maintenance release focused on hardening the platform against newly disclosed CVEs, eliminating long-standing database hotspots in the search and tag pipelines, and tightening connector behavior across Databricks, Unity Catalog, Athena, Datalake, and OpenLineage. The release also lands several quality-of-life UI fixes around governance approvals, advanced search,…
fix(security): pin libthrift, provided jsonschema2pojo, bump azure-kv… …/sjm/reactor-netty, exclude netty-epoll (#28010) (#28035) * fix(security): pin libthrift 0.23.0 and exclude Jackson 3.x from jsonschema2pojo-core - Pin org.apache.thrift:libthrift to 0.23.0 in dependencyManagement. apache-jena-libs:4.10.0 transitively pulls libthrift:0.19.0 which is vulnerable to CVE-2026-43869 (fixed in 0.23.…
No content.
Improvements Platform: Enhanced search index performance and reduced memory footprint during reindex operations to minimize runtime impact #27153 Platform: Improved reliability of bulk indexing with better handling of large payloads and batching #27127 Governance: Refactored certification storage to improve consistency and auditability across entities #26448 Platform: Added support for SAML metada…