diff --git a/snippets/releases/1.13.4.mdx b/snippets/releases/1.13.4.mdx new file mode 100644 index 00000000..6857519a --- /dev/null +++ b/snippets/releases/1.13.4.mdx @@ -0,0 +1,54 @@ + + +You can find the GitHub release [here](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.4-release). + +## Changelog + +OpenMetadata 1.13.4 is a maintenance release focused on connector reliability, search and lineage correctness, governance and MCP fixes, and a broad security cleanup across ingestion and platform dependencies. + +### 🔌 Connectors & Ingestion + +- **Hive: test connection failed when no metastore was selected** [#30380](https://github.com/open-metadata/OpenMetadata/issues/30380): The metastore step is optional again, restoring the pre-1.13 behaviour for Hive services that don't front a metastore. +- **Oracle: view definitions truncated by bulk LONG fetch** [#30319](https://github.com/open-metadata/OpenMetadata/issues/30319): Falls back to a per-view fetch when the bulk LONG read truncates, recovering full view DDL for downstream lineage. +- **BigQuery: dataset and table object caches collide across schemas** [#30973](https://github.com/open-metadata/OpenMetadata/issues/30973): Caches are keyed per schema, preventing cross-schema object collisions on large projects. +- **Fivetran: lineage lost when service names are unset; Table → Topic edges missing** [#31265](https://github.com/open-metadata/OpenMetadata/issues/31265): Falls back cleanly when service names are missing and adds Table → Topic lineage support. +- **KafkaConnect: Debezium lineage broken on single-database services** [#31280](https://github.com/open-metadata/OpenMetadata/issues/31280): Debezium source lineage now resolves against single-database KafkaConnect services. +- **BurstIQ: invalid system wallet failing silently** [#29727](https://github.com/open-metadata/OpenMetadata/issues/29727): Test connection surfaces an invalid system wallet with an actionable error. +- **Table-owner extraction using the inspector instead of the dialect** [#31479](https://github.com/open-metadata/OpenMetadata/issues/31479): The owner extractor now dispatches on the SQL dialect, matching how the rest of the connector routes queries. +- **Lineage parser: rows without a table name reaching the DB** [#31523](https://github.com/open-metadata/OpenMetadata/issues/31523): Parsed table references with no table name are skipped rather than persisted as broken rows. + +### 🔍 Search & Discovery + +- **Inherited domain lost on descendants when an asset is moved** [#30678](https://github.com/open-metadata/OpenMetadata/issues/30678): Moving an asset now propagates the inherited domain to all descendants in search. +- **Search connection pool starvation** [#31658](https://github.com/open-metadata/OpenMetadata/issues/31658): Bounds `httpclient5` connection-request timeouts so the search client stops starving under load. + +### 🛡️ Data Governance & Quality + +- **Read authorization depending on the requested fields projection** [#29835](https://github.com/open-metadata/OpenMetadata/issues/29835): Read authorization is now independent of the `fields` query parameter, closing a projection-based bypass. +- **Orphan test case 404s the whole test case listing** [#31379](https://github.com/open-metadata/OpenMetadata/issues/31379): A single stale test case no longer breaks paginated test-case listings. +- **Any-language recognizer normalization** [#28883](https://github.com/open-metadata/OpenMetadata/issues/28883): Recognizers behave consistently regardless of source language. + +### 🤖 MCP Server + +- **CORS headers, unused capability, and OAuth `iss` parameter** [#30673](https://github.com/open-metadata/OpenMetadata/issues/30673): Fixes MCP CORS headers, removes the unused resources capability, and populates the OAuth `iss` parameter. +- **Null `protected_resource_metadata` in the discovery response** [#30642](https://github.com/open-metadata/OpenMetadata/issues/30642): Omits the field entirely when unset instead of returning `null`. + +### ⚙️ Platform + +- **`/metadata/types/customProperties` returning non-custom properties** [#31171](https://github.com/open-metadata/OpenMetadata/issues/31171): The endpoint returns only custom properties, matching its name. +- **Container re-parenting via PATCH** [#24294](https://github.com/open-metadata/OpenMetadata/issues/24294): Containers can be re-parented through PATCH like other hierarchical assets. +- **Data Product reference indexing** [#30387](https://github.com/open-metadata/OpenMetadata/issues/30387): Search stays consistent after linked-entity updates on Data Products. + +### 🎛️ UI + +- **Related terms `+N` badge not expandable** [#31009](https://github.com/open-metadata/OpenMetadata/issues/31009): The `+N` badge on glossary related terms is clickable to reveal the full list. +- **Query Tab: UI backend integration** [#30688](https://github.com/open-metadata/OpenMetadata/issues/30688): UI-side backend calls for the Query Tab align with the current API surface. +- **Queries tab: badge count skeleton while loading** [#31688](https://github.com/open-metadata/OpenMetadata/issues/31688): The Queries tab shows a skeleton in the badge while the count fetches, instead of flashing `0`. + +### 🔒 Security + +- **`netty` → 4.1.137.Final** for CVE-2026-59903 [#31792](https://github.com/open-metadata/OpenMetadata/pull/31792). +- **`c3p0` 0.12.0 → 0.14.1** for CVE-2026-55223 [#31458](https://github.com/open-metadata/OpenMetadata/pull/31458). +- **`httpcore5` pinned to 5.4.3** for CVE-2026-54399 [#31513](https://github.com/open-metadata/OpenMetadata/pull/31513). + + diff --git a/snippets/releases/latest.mdx b/snippets/releases/latest.mdx index cdf0c478..6857519a 100644 --- a/snippets/releases/latest.mdx +++ b/snippets/releases/latest.mdx @@ -1,28 +1,54 @@ - + -You can find the GitHub release [here](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.3-release). +You can find the GitHub release [here](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.4-release). ## Changelog -OpenMetadata 1.13.3 is a maintenance release delivering data contract and governance workflow fixes, alert delivery fixes, a Snowflake foreign-key reflection fix, and UI fixes. +OpenMetadata 1.13.4 is a maintenance release focused on connector reliability, search and lineage correctness, governance and MCP fixes, and a broad security cleanup across ingestion and platform dependencies. ### 🔌 Connectors & Ingestion -- **Snowflake: foreign-key collisions across tables sharing a constraint name** [#30473](https://github.com/open-metadata/OpenMetadata/pull/30473): Foreign-key reflection is now keyed on `(fk_name, table_name)`, so cloned tables that reuse a constraint name no longer merge into a single constraint referencing another table's columns and getting rejected with `400 Invalid column name`. +- **Hive: test connection failed when no metastore was selected** [#30380](https://github.com/open-metadata/OpenMetadata/issues/30380): The metastore step is optional again, restoring the pre-1.13 behaviour for Hive services that don't front a metastore. +- **Oracle: view definitions truncated by bulk LONG fetch** [#30319](https://github.com/open-metadata/OpenMetadata/issues/30319): Falls back to a per-view fetch when the bulk LONG read truncates, recovering full view DDL for downstream lineage. +- **BigQuery: dataset and table object caches collide across schemas** [#30973](https://github.com/open-metadata/OpenMetadata/issues/30973): Caches are keyed per schema, preventing cross-schema object collisions on large projects. +- **Fivetran: lineage lost when service names are unset; Table → Topic edges missing** [#31265](https://github.com/open-metadata/OpenMetadata/issues/31265): Falls back cleanly when service names are missing and adds Table → Topic lineage support. +- **KafkaConnect: Debezium lineage broken on single-database services** [#31280](https://github.com/open-metadata/OpenMetadata/issues/31280): Debezium source lineage now resolves against single-database KafkaConnect services. +- **BurstIQ: invalid system wallet failing silently** [#29727](https://github.com/open-metadata/OpenMetadata/issues/29727): Test connection surfaces an invalid system wallet with an actionable error. +- **Table-owner extraction using the inspector instead of the dialect** [#31479](https://github.com/open-metadata/OpenMetadata/issues/31479): The owner extractor now dispatches on the SQL dialect, matching how the rest of the connector routes queries. +- **Lineage parser: rows without a table name reaching the DB** [#31523](https://github.com/open-metadata/OpenMetadata/issues/31523): Parsed table references with no table name are skipped rather than persisted as broken rows. + +### 🔍 Search & Discovery + +- **Inherited domain lost on descendants when an asset is moved** [#30678](https://github.com/open-metadata/OpenMetadata/issues/30678): Moving an asset now propagates the inherited domain to all descendants in search. +- **Search connection pool starvation** [#31658](https://github.com/open-metadata/OpenMetadata/issues/31658): Bounds `httpclient5` connection-request timeouts so the search client stops starving under load. ### 🛡️ Data Governance & Quality -- **Data contracts stuck at `Running` after a Data Quality pipeline completes** [#30531](https://github.com/open-metadata/OpenMetadata/pull/30531): The `testSuite` → `dataContract` reverse relationship is now persisted on contract create/update, so contract status resolves when the pipeline finishes instead of sitting at `Running` indefinitely. Regression from 1.13.0. -- **Sanitize poisoned governance trigger filters** [`5963637b`](https://github.com/open-metadata/OpenMetadata/commit/5963637bf54995861a015e383d7ce3792fdf8fb6): Event-based workflow trigger filters stored as an empty or placeholder value (`""`, `{}`) are now ignored instead of rejecting every event, and a 1.13.3 migration repairs affected `workflowDefinitions` rows in place. -- **Hide soft-deleted owners on the Test Suite detail page** [#30520](https://github.com/open-metadata/OpenMetadata/pull/30520): Editing owners on a logical Test Suite no longer fails with `array item index is out of range`; `TestSuiteResource.getByName` now honours `includeRelations`, matching every other detail page. -- **Intake form `formFields` support** [#30614](https://github.com/open-metadata/OpenMetadata/pull/30614): Added a `formFields` array with a per-field `required` flag to the `IntakeForm` schema, along with a migration that backfills it from the legacy `requiredFields`. Backend only in this release. +- **Read authorization depending on the requested fields projection** [#29835](https://github.com/open-metadata/OpenMetadata/issues/29835): Read authorization is now independent of the `fields` query parameter, closing a projection-based bypass. +- **Orphan test case 404s the whole test case listing** [#31379](https://github.com/open-metadata/OpenMetadata/issues/31379): A single stale test case no longer breaks paginated test-case listings. +- **Any-language recognizer normalization** [#28883](https://github.com/open-metadata/OpenMetadata/issues/28883): Recognizers behave consistently regardless of source language. + +### 🤖 MCP Server + +- **CORS headers, unused capability, and OAuth `iss` parameter** [#30673](https://github.com/open-metadata/OpenMetadata/issues/30673): Fixes MCP CORS headers, removes the unused resources capability, and populates the OAuth `iss` parameter. +- **Null `protected_resource_metadata` in the discovery response** [#30642](https://github.com/open-metadata/OpenMetadata/issues/30642): Omits the field entirely when unset instead of returning `null`. ### ⚙️ Platform -- **Skip notification recipients without contact information** [#30518](https://github.com/open-metadata/OpenMetadata/pull/30518): A team or user with no email address or webhook no longer discards every other recipient of the same alert; recipients are now resolved individually, matching the webhook path. +- **`/metadata/types/customProperties` returning non-custom properties** [#31171](https://github.com/open-metadata/OpenMetadata/issues/31171): The endpoint returns only custom properties, matching its name. +- **Container re-parenting via PATCH** [#24294](https://github.com/open-metadata/OpenMetadata/issues/24294): Containers can be re-parented through PATCH like other hierarchical assets. +- **Data Product reference indexing** [#30387](https://github.com/open-metadata/OpenMetadata/issues/30387): Search stays consistent after linked-entity updates on Data Products. ### 🎛️ UI -- **Tag and Glossary dropdowns not selectable in the Column Bulk Operations edit drawer** [#30634](https://github.com/open-metadata/OpenMetadata/pull/30634): The tag and glossary dropdowns now render inside the edit drawer, so options can be selected instead of having clicks swallowed by the drawer's focus containment. +- **Related terms `+N` badge not expandable** [#31009](https://github.com/open-metadata/OpenMetadata/issues/31009): The `+N` badge on glossary related terms is clickable to reveal the full list. +- **Query Tab: UI backend integration** [#30688](https://github.com/open-metadata/OpenMetadata/issues/30688): UI-side backend calls for the Query Tab align with the current API surface. +- **Queries tab: badge count skeleton while loading** [#31688](https://github.com/open-metadata/OpenMetadata/issues/31688): The Queries tab shows a skeleton in the badge while the count fetches, instead of flashing `0`. + +### 🔒 Security + +- **`netty` → 4.1.137.Final** for CVE-2026-59903 [#31792](https://github.com/open-metadata/OpenMetadata/pull/31792). +- **`c3p0` 0.12.0 → 0.14.1** for CVE-2026-55223 [#31458](https://github.com/open-metadata/OpenMetadata/pull/31458). +- **`httpcore5` pinned to 5.4.3** for CVE-2026-54399 [#31513](https://github.com/open-metadata/OpenMetadata/pull/31513). diff --git a/v1.13.x/releases/all-releases.mdx b/v1.13.x/releases/all-releases.mdx index 730fd856..9b823938 100644 --- a/v1.13.x/releases/all-releases.mdx +++ b/v1.13.x/releases/all-releases.mdx @@ -21,6 +21,7 @@ import ReleaseNotes13 from '/snippets/releases/1.13.0.mdx'; import ReleaseNotes14 from '/snippets/releases/1.12.14.mdx'; import ReleaseNotes15 from '/snippets/releases/1.13.1.mdx'; import ReleaseNotes16 from '/snippets/releases/1.13.2.mdx'; +import ReleaseNotes17 from '/snippets/releases/1.13.3.mdx'; # Releases @@ -34,12 +35,14 @@ import ReleaseNotes16 from '/snippets/releases/1.13.2.mdx'; icon="party-horn" title="Upgrade OpenMetadata" href="/v1.13.x/deployment/upgrade"> - Learn how to upgrade your OpenMetadata instance to 1.13.3! + Learn how to upgrade your OpenMetadata instance to 1.13.4! + + diff --git a/v2.0.x-SNAPSHOT/releases/all-releases.mdx b/v2.0.x-SNAPSHOT/releases/all-releases.mdx index 992d83af..47ad8623 100644 --- a/v2.0.x-SNAPSHOT/releases/all-releases.mdx +++ b/v2.0.x-SNAPSHOT/releases/all-releases.mdx @@ -21,6 +21,7 @@ import ReleaseNotes13 from '/snippets/releases/1.13.0.mdx'; import ReleaseNotes14 from '/snippets/releases/1.12.14.mdx'; import ReleaseNotes15 from '/snippets/releases/1.13.1.mdx'; import ReleaseNotes16 from '/snippets/releases/1.13.2.mdx'; +import ReleaseNotes17 from '/snippets/releases/1.13.3.mdx'; # Releases @@ -40,6 +41,8 @@ import ReleaseNotes16 from '/snippets/releases/1.13.2.mdx'; + +