Changelog OpenMetadata 1.13.3 is a maintenance release delivering data contract and governance workflow fixes, alert delivery fixes, a Snowflake foreign-key reflection fix, and UI fixes. 🔌 Connectors & Ingestion Snowflake: foreign-key collisions across tables sharing a constraint name #30473: Foreign-key reflection is now keyed on (fk_name, table_name), so cloned tables that reuse a constraint nam…
This is a Release Candidate for the upcoming 2.0.0 release and there will be changes until the final release is published. DO NOT use this in PROD. Please, only use it in DEV/TEST environments to provide any feedback or migration issues you encounter.
Changelog OpenMetadata 1.13.2 is a maintenance release delivering MCP tool enhancements, search and reindexing reliability fixes, security patches, connector improvements, data governance and quality updates, lineage fixes, and UI enhancements. 🔒 Security Jackson, Logback, Postgres & Calcite dependency pins #30396: Aligned Jackson, Logback, Postgres, and Calcite dependency pins with main to clear…
🔒 Security Patch MLflow authorization vulnerabilities #30046: Raised the mlflow-skinny requirement to a patched 3.13 or newer release to address CVE-2026-2635 and CVE-2026-8147. Patch PyArrow IPC vulnerabilities #30146: Raised the PyArrow requirement to >=23.0.1,<26 to address CVE-2026-25087 and CVE-2024-52338. Patch server dependency vulnerabilities bd31ff6 cd46662 #30391: Updated Jackson, Logbac…
Features MCP Services MCP (Model Context Protocol) is now a first-class service category with service entities, server entities, execution logs, test-connection support, REST resources, and UI pages. Usage analytics expose summary, history, tool breakdown, user breakdown, and current-user usage MCP OAuth now supports SAML SSO authentication Client secrets are not issued to public clients get_entit…
🔍 Search & Performance Fix OpenSearch alias swap failure on fresh installations #29723: Removed an unsupported must_exist field from the remove_index alias action that caused OpenSearch to reject alias swaps with HTTP 400 on fresh installs. Stop falsely abandoning healthy reindex jobs that hold a live lock #29547: Reindex jobs with a stale timestamp but a live coordinator lock are no longer incorr…
🔒 Security Netty CVE-2026-44249 #28880: Bumped netty-bom to 4.1.135.Final. Jackson-databind CVE-2026-54512/513/514 #29389: Bumped jackson-databind from 2.18.7 to 2.18.8. Spring, Micrometer & OpenTelemetry CVE patches #29111: Spring 6.2.18 → 6.2.19, Micrometer upgraded, and OpenTelemetry pinned to patch reported CVEs. ws CVE-2026-48779 #29122: Bumped ws to 8.21.0. handlebars CVE-2026-55760 #29221:…
🔒 Security sudo upgraded for CVE-2026-35535 #29343: Upgraded sudo in the ingestion image to patch CVE-2026-35535. Spring, Micrometer & OpenTelemetry CVE patches #29111: Spring 6.2.18 → 6.2.19 (CVE-2026-41850, CVE-2026-41851), Micrometer 1.14.5 → 1.15.12, and pinned OpenTelemetry to patch reported CVEs. ws bumped for CVE-2026-48779 #29122: Updated ws to 8.21.0. handlebars bumped for CVE-2026-55760…
OpenMetadata 1.12.11 is a maintenance release delivering security patches, MCP improvements, AI enhancements, search fixes, UI enhancements, ingestion stability improvements, and connector updates. 🔒 Security React-router-dom security upgrade #28677: Snyk security upgrade of react-router-dom from 6.30.3 to 6.30.4 to address reported vulnerabilities. Netty-bom bumped for CVE-2026-44249 #28880: Upda…
Changelog OpenMetadata 1.12.10 is a maintenance release delivering critical security patches, MCP enhancements, and targeted bug fixes across migrations, search, UI, and ingestion runtime. 🔒 Security Snyk high/critical dependency patches in ingestion #28623: High and critical Snyk findings patched across ingestion dependencies to address multiple CVEs. Jackson-core and CloudFront Snyk high patches…
Changelog OpenMetadata 1.12.9 is a maintenance release delivering new connector capabilities, performance improvements for workflow execution, and targeted bug fixes across search, ingestion, UI, and the OpenMetadata Python client. ✨ New Features Unity Catalog — incremental metadata extraction #28380: Unity Catalog connector now detects changed tables via information_schema.tables.last_altered and…
Changelog OpenMetadata 1.12.8 is a maintenance release focused on hardening the platform against newly disclosed CVEs, eliminating long-standing database hotspots in the search and tag pipelines, and tightening connector behavior across Databricks, Unity Catalog, Athena, Datalake, and OpenLineage. The release also lands several quality-of-life UI fixes around governance approvals, advanced search,…
fix(security): pin libthrift, provided jsonschema2pojo, bump azure-kv… …/sjm/reactor-netty, exclude netty-epoll (#28010) (#28035) * fix(security): pin libthrift 0.23.0 and exclude Jackson 3.x from jsonschema2pojo-core - Pin org.apache.thrift:libthrift to 0.23.0 in dependencyManagement. apache-jena-libs:4.10.0 transitively pulls libthrift:0.19.0 which is vulnerable to CVE-2026-43869 (fixed in 0.23.…
No content.
Improvements Platform: Enhanced search index performance and reduced memory footprint during reindex operations to minimize runtime impact #27153 Platform: Improved reliability of bulk indexing with better handling of large payloads and batching #27127 Governance: Refactored certification storage to improve consistency and auditability across entities #26448 Platform: Added support for SAML metada…