open-metadata · chirag-madlani · Aug 21, 2026 · Aug 21, 2026
diff --git a/snippets/releases/1.13.4.mdx b/snippets/releases/1.13.4.mdx
@@ -0,0 +1,54 @@
+<Update label="1.13.4 Release" description="21st August 2026">
+
+You can find the GitHub release [here](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.4-release).
+
+## Changelog
+
+OpenMetadata 1.13.4 is a maintenance release focused on connector reliability, search and lineage correctness, governance and MCP fixes, and a broad security cleanup across ingestion and platform dependencies.
+
+### 🔌 Connectors & Ingestion
+
+- **Hive: test connection failed when no metastore was selected** [#30380](https://github.com/open-metadata/OpenMetadata/issues/30380): The metastore step is optional again, restoring the pre-1.13 behaviour for Hive services that don't front a metastore.
+- **Oracle: view definitions truncated by bulk LONG fetch** [#30319](https://github.com/open-metadata/OpenMetadata/issues/30319): Falls back to a per-view fetch when the bulk LONG read truncates, recovering full view DDL for downstream lineage.
+- **BigQuery: dataset and table object caches collide across schemas** [#30973](https://github.com/open-metadata/OpenMetadata/issues/30973): Caches are keyed per schema, preventing cross-schema object collisions on large projects.
+- **Fivetran: lineage lost when service names are unset; Table → Topic edges missing** [#31265](https://github.com/open-metadata/OpenMetadata/issues/31265): Falls back cleanly when service names are missing and adds Table → Topic lineage support.
+- **KafkaConnect: Debezium lineage broken on single-database services** [#31280](https://github.com/open-metadata/OpenMetadata/issues/31280): Debezium source lineage now resolves against single-database KafkaConnect services.
+- **BurstIQ: invalid system wallet failing silently** [#29727](https://github.com/open-metadata/OpenMetadata/issues/29727): Test connection surfaces an invalid system wallet with an actionable error.
+- **Table-owner extraction using the inspector instead of the dialect** [#31479](https://github.com/open-metadata/OpenMetadata/issues/31479): The owner extractor now dispatches on the SQL dialect, matching how the rest of the connector routes queries.
+- **Lineage parser: rows without a table name reaching the DB** [#31523](https://github.com/open-metadata/OpenMetadata/issues/31523): Parsed table references with no table name are skipped rather than persisted as broken rows.
+
+### 🔍 Search & Discovery
+
+- **Inherited domain lost on descendants when an asset is moved** [#30678](https://github.com/open-metadata/OpenMetadata/issues/30678): Moving an asset now propagates the inherited domain to all descendants in search.
+- **Search connection pool starvation** [#31658](https://github.com/open-metadata/OpenMetadata/issues/31658): Bounds `httpclient5` connection-request timeouts so the search client stops starving under load.
+
+### 🛡️ Data Governance & Quality
+
+- **Read authorization depending on the requested fields projection** [#29835](https://github.com/open-metadata/OpenMetadata/issues/29835): Read authorization is now independent of the `fields` query parameter, closing a projection-based bypass.
+- **Orphan test case 404s the whole test case listing** [#31379](https://github.com/open-metadata/OpenMetadata/issues/31379): A single stale test case no longer breaks paginated test-case listings.
+- **Any-language recognizer normalization** [#28883](https://github.com/open-metadata/OpenMetadata/issues/28883): Recognizers behave consistently regardless of source language.
+
+### 🤖 MCP Server
+
+- **CORS headers, unused capability, and OAuth `iss` parameter** [#30673](https://github.com/open-metadata/OpenMetadata/issues/30673): Fixes MCP CORS headers, removes the unused resources capability, and populates the OAuth `iss` parameter.
+- **Null `protected_resource_metadata` in the discovery response** [#30642](https://github.com/open-metadata/OpenMetadata/issues/30642): Omits the field entirely when unset instead of returning `null`.
+
+### ⚙️ Platform
+
+- **`/metadata/types/customProperties` returning non-custom properties** [#31171](https://github.com/open-metadata/OpenMetadata/issues/31171): The endpoint returns only custom properties, matching its name.
+- **Container re-parenting via PATCH** [#24294](https://github.com/open-metadata/OpenMetadata/issues/24294): Containers can be re-parented through PATCH like other hierarchical assets.
+- **Data Product reference indexing** [#30387](https://github.com/open-metadata/OpenMetadata/issues/30387): Search stays consistent after linked-entity updates on Data Products.
+
+### 🎛️ UI
+
+- **Related terms `+N` badge not expandable** [#31009](https://github.com/open-metadata/OpenMetadata/issues/31009): The `+N` badge on glossary related terms is clickable to reveal the full list.
+- **Query Tab: UI backend integration** [#30688](https://github.com/open-metadata/OpenMetadata/issues/30688): UI-side backend calls for the Query Tab align with the current API surface.
+- **Queries tab: badge count skeleton while loading** [#31688](https://github.com/open-metadata/OpenMetadata/issues/31688): The Queries tab shows a skeleton in the badge while the count fetches, instead of flashing `0`.
+
+### 🔒 Security
+
+- **`netty` → 4.1.137.Final** for CVE-2026-59903 [#31792](https://github.com/open-metadata/OpenMetadata/pull/31792).
+- **`c3p0` 0.12.0 → 0.14.1** for CVE-2026-55223 [#31458](https://github.com/open-metadata/OpenMetadata/pull/31458).
+- **`httpcore5` pinned to 5.4.3** for CVE-2026-54399 [#31513](https://github.com/open-metadata/OpenMetadata/pull/31513).
+
+</Update>
diff --git a/snippets/releases/latest.mdx b/snippets/releases/latest.mdx
@@ -1,28 +1,54 @@
-<Update label="1.13.3 Release" description="31st July 2026">
+<Update label="1.13.4 Release" description="21st August 2026">
 
-You can find the GitHub release [here](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.3-release).
+You can find the GitHub release [here](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.4-release).
 
 ## Changelog
 
-OpenMetadata 1.13.3 is a maintenance release delivering data contract and governance workflow fixes, alert delivery fixes, a Snowflake foreign-key reflection fix, and UI fixes.
+OpenMetadata 1.13.4 is a maintenance release focused on connector reliability, search and lineage correctness, governance and MCP fixes, and a broad security cleanup across ingestion and platform dependencies.
 
 ### 🔌 Connectors & Ingestion
 
-- **Snowflake: foreign-key collisions across tables sharing a constraint name** [#30473](https://github.com/open-metadata/OpenMetadata/pull/30473): Foreign-key reflection is now keyed on `(fk_name, table_name)`, so cloned tables that reuse a constraint name no longer merge into a single constraint referencing another table's columns and getting rejected with `400 Invalid column name`.
+- **Hive: test connection failed when no metastore was selected** [#30380](https://github.com/open-metadata/OpenMetadata/issues/30380): The metastore step is optional again, restoring the pre-1.13 behaviour for Hive services that don't front a metastore.
+- **Oracle: view definitions truncated by bulk LONG fetch** [#30319](https://github.com/open-metadata/OpenMetadata/issues/30319): Falls back to a per-view fetch when the bulk LONG read truncates, recovering full view DDL for downstream lineage.
+- **BigQuery: dataset and table object caches collide across schemas** [#30973](https://github.com/open-metadata/OpenMetadata/issues/30973): Caches are keyed per schema, preventing cross-schema object collisions on large projects.
+- **Fivetran: lineage lost when service names are unset; Table → Topic edges missing** [#31265](https://github.com/open-metadata/OpenMetadata/issues/31265): Falls back cleanly when service names are missing and adds Table → Topic lineage support.
+- **KafkaConnect: Debezium lineage broken on single-database services** [#31280](https://github.com/open-metadata/OpenMetadata/issues/31280): Debezium source lineage now resolves against single-database KafkaConnect services.
+- **BurstIQ: invalid system wallet failing silently** [#29727](https://github.com/open-metadata/OpenMetadata/issues/29727): Test connection surfaces an invalid system wallet with an actionable error.
+- **Table-owner extraction using the inspector instead of the dialect** [#31479](https://github.com/open-metadata/OpenMetadata/issues/31479): The owner extractor now dispatches on the SQL dialect, matching how the rest of the connector routes queries.
+- **Lineage parser: rows without a table name reaching the DB** [#31523](https://github.com/open-metadata/OpenMetadata/issues/31523): Parsed table references with no table name are skipped rather than persisted as broken rows.
+
+### 🔍 Search & Discovery
+
+- **Inherited domain lost on descendants when an asset is moved** [#30678](https://github.com/open-metadata/OpenMetadata/issues/30678): Moving an asset now propagates the inherited domain to all descendants in search.
+- **Search connection pool starvation** [#31658](https://github.com/open-metadata/OpenMetadata/issues/31658): Bounds `httpclient5` connection-request timeouts so the search client stops starving under load.
 
 ### 🛡️ Data Governance & Quality
 
-- **Data contracts stuck at `Running` after a Data Quality pipeline completes** [#30531](https://github.com/open-metadata/OpenMetadata/pull/30531): The `testSuite` → `dataContract` reverse relationship is now persisted on contract create/update, so contract status resolves when the pipeline finishes instead of sitting at `Running` indefinitely. Regression from 1.13.0.
-- **Sanitize poisoned governance trigger filters** [`5963637b`](https://github.com/open-metadata/OpenMetadata/commit/5963637bf54995861a015e383d7ce3792fdf8fb6): Event-based workflow trigger filters stored as an empty or placeholder value (`""`, `{}`) are now ignored instead of rejecting every event, and a 1.13.3 migration repairs affected `workflowDefinitions` rows in place.
-- **Hide soft-deleted owners on the Test Suite detail page** [#30520](https://github.com/open-metadata/OpenMetadata/pull/30520): Editing owners on a logical Test Suite no longer fails with `array item index is out of range`; `TestSuiteResource.getByName` now honours `includeRelations`, matching every other detail page.
-- **Intake form `formFields` support** [#30614](https://github.com/open-metadata/OpenMetadata/pull/30614): Added a `formFields` array with a per-field `required` flag to the `IntakeForm` schema, along with a migration that backfills it from the legacy `requiredFields`. Backend only in this release.
+- **Read authorization depending on the requested fields projection** [#29835](https://github.com/open-metadata/OpenMetadata/issues/29835): Read authorization is now independent of the `fields` query parameter, closing a projection-based bypass.
+- **Orphan test case 404s the whole test case listing** [#31379](https://github.com/open-metadata/OpenMetadata/issues/31379): A single stale test case no longer breaks paginated test-case listings.
+- **Any-language recognizer normalization** [#28883](https://github.com/open-metadata/OpenMetadata/issues/28883): Recognizers behave consistently regardless of source language.
+
+### 🤖 MCP Server
+
+- **CORS headers, unused capability, and OAuth `iss` parameter** [#30673](https://github.com/open-metadata/OpenMetadata/issues/30673): Fixes MCP CORS headers, removes the unused resources capability, and populates the OAuth `iss` parameter.
+- **Null `protected_resource_metadata` in the discovery response** [#30642](https://github.com/open-metadata/OpenMetadata/issues/30642): Omits the field entirely when unset instead of returning `null`.
 
 ### ⚙️ Platform
 
-- **Skip notification recipients without contact information** [#30518](https://github.com/open-metadata/OpenMetadata/pull/30518): A team or user with no email address or webhook no longer discards every other recipient of the same alert; recipients are now resolved individually, matching the webhook path.
+- **`/metadata/types/customProperties` returning non-custom properties** [#31171](https://github.com/open-metadata/OpenMetadata/issues/31171): The endpoint returns only custom properties, matching its name.
+- **Container re-parenting via PATCH** [#24294](https://github.com/open-metadata/OpenMetadata/issues/24294): Containers can be re-parented through PATCH like other hierarchical assets.
+- **Data Product reference indexing** [#30387](https://github.com/open-metadata/OpenMetadata/issues/30387): Search stays consistent after linked-entity updates on Data Products.
 
 ### 🎛️ UI
 
-- **Tag and Glossary dropdowns not selectable in the Column Bulk Operations edit drawer** [#30634](https://github.com/open-metadata/OpenMetadata/pull/30634): The tag and glossary dropdowns now render inside the edit drawer, so options can be selected instead of having clicks swallowed by the drawer's focus containment.
+- **Related terms `+N` badge not expandable** [#31009](https://github.com/open-metadata/OpenMetadata/issues/31009): The `+N` badge on glossary related terms is clickable to reveal the full list.
+- **Query Tab: UI backend integration** [#30688](https://github.com/open-metadata/OpenMetadata/issues/30688): UI-side backend calls for the Query Tab align with the current API surface.
+- **Queries tab: badge count skeleton while loading** [#31688](https://github.com/open-metadata/OpenMetadata/issues/31688): The Queries tab shows a skeleton in the badge while the count fetches, instead of flashing `0`.
+
+### 🔒 Security
+
+- **`netty` → 4.1.137.Final** for CVE-2026-59903 [#31792](https://github.com/open-metadata/OpenMetadata/pull/31792).
+- **`c3p0` 0.12.0 → 0.14.1** for CVE-2026-55223 [#31458](https://github.com/open-metadata/OpenMetadata/pull/31458).
+- **`httpcore5` pinned to 5.4.3** for CVE-2026-54399 [#31513](https://github.com/open-metadata/OpenMetadata/pull/31513).
 
 </Update>
diff --git a/v1.13.x/releases/all-releases.mdx b/v1.13.x/releases/all-releases.mdx
@@ -21,6 +21,7 @@ import ReleaseNotes13 from '/snippets/releases/1.13.0.mdx';
 import ReleaseNotes14 from '/snippets/releases/1.12.14.mdx';
 import ReleaseNotes15 from '/snippets/releases/1.13.1.mdx';
 import ReleaseNotes16 from '/snippets/releases/1.13.2.mdx';
+import ReleaseNotes17 from '/snippets/releases/1.13.3.mdx';
 
 # Releases
 
@@ -34,12 +35,14 @@ import ReleaseNotes16 from '/snippets/releases/1.13.2.mdx';
     icon="party-horn"
     title="Upgrade OpenMetadata"
     href="/v1.13.x/deployment/upgrade">
-    Learn how to upgrade your OpenMetadata instance to 1.13.3!
+    Learn how to upgrade your OpenMetadata instance to 1.13.4!
   </Card>
 </CardGroup>
 
 <ReleaseNotes />
 
+<ReleaseNotes17 />
+
 <ReleaseNotes16 />
 
 <ReleaseNotes15 />

diff --git a/v2.0.x-SNAPSHOT/releases/all-releases.mdx b/v2.0.x-SNAPSHOT/releases/all-releases.mdx
@@ -21,6 +21,7 @@ import ReleaseNotes13 from '/snippets/releases/1.13.0.mdx';
 import ReleaseNotes14 from '/snippets/releases/1.12.14.mdx';
 import ReleaseNotes15 from '/snippets/releases/1.13.1.mdx';
 import ReleaseNotes16 from '/snippets/releases/1.13.2.mdx';
+import ReleaseNotes17 from '/snippets/releases/1.13.3.mdx';
 
 # Releases
 
@@ -40,6 +41,8 @@ import ReleaseNotes16 from '/snippets/releases/1.13.2.mdx';
 
 <ReleaseNotes />
 
+<ReleaseNotes17 />
+
 <ReleaseNotes16 />
 
 <ReleaseNotes15 />