1. ee73ec9 [#12176] feat(design-docs): add policy-on-tag design (#12177) by roryqi · 13 hours ago main
  2. 4091d5c [#12272] feat(clickhouse): map ClickHouse Date32 to Gravitino DateType and verify Enum round-trip (#12275) by StormSpirit · 16 hours ago
  3. a2daf95 [#8674] fix(authz): Isolate Ranger catalog owner roles by catalog ID (#12517) by roryqi · 20 hours ago
  4. 7e26ce9 [#12526] feat(trino-connector): Support Starburst SPI compatibility (#12527) by Yuhui · 22 hours ago
  5. 0c6c9c2 [#12521] feat(job): Support filtering and sorting jobs by time in listJobs (#12522) by Jerry Shao · 33 hours ago
  6. 3b4d1d9 [#12532] improvement(core): support group owners in batchGetOwner (#12533) by roryqi · 34 hours ago
  7. d38268a [#11829] fix(doris): support replication allocation property (#11877) by hutiefang76 · 35 hours ago
  8. 15dffd5 [#12505] docs: Add user documentation for tag assignment values (#12510) by roryqi · 2 days ago
  9. 62c5a2f [#12508] feat(job): Expose job queuedAt and startedAt across the public surface (#12509) by Jerry Shao · 2 days ago
  10. 138f6ff [#12210] docs: Add Semantic Model design (#12424) by mchades · 2 days ago
  11. b7ffc2e [MINOR] docs: Add Spark REST catalog registration design (#11280) by FANNG · 2 days ago
  12. 402dd20 [#12452] improvement(core): add OCC for catalog writes (#12455) by Qi Yu · 2 days ago
  13. 94d2d02 [#12287] feat(server): Add bulk user access-control APIs (#12288) by jarred0214 · 3 days ago
  14. 0bf03bd [#12495] feat(job): Expose job finishedAt across the public surface (#12497) by Jerry Shao · 3 days ago
  15. 6b81835 [#12488] feat(kms): Identify keys by provider and keyId (#12489) by Nevin Zheng · 3 days ago
  16. ac4eff7 [#12441] feat(client-python): Support tag assignment values (#12442) by roryqi · 3 days ago
  17. 8868eb2 [#12493] feat(idp): Add optional comment to idp_group_meta (#12494) by MaSai · 3 days ago
  18. 7b6cf6b [#12475] improvement(common): make CallerContext an immutable value object (#12476) by YangJie · 3 days ago
  19. 101e347 [#12468] fix(lance): validate the identifier in ListNamespaces at schema level (#12469) by FANNG · 4 days ago
  20. e7b6816 [#12363] improvement(storage): Make MySQL index names unique and give table_version_info a primary key (#12364) by shaoyu-li · 4 days ago
  21. 672a349 [MINOR] fix(ci): Update Docker setup actions (#12477) by Qi Yu · 4 days ago
  22. eff51a3 [MINOR] docs(fileset): Restructure the fileset catalog pages around a runnable path (#12434) by Qi Yu · 5 days ago
  23. 16db87b Feature/trino connector oauth2 user forwarding (#12045) by Mark Hoerth · 5 days ago
  24. 7bbe3a5 [#12451] improvement(core): add OCC for metalake writes (#12454) by Qi Yu · 5 days ago
  25. 550f701 [#12440] improvement(core): Replace the entity change log listener retry/EXIT policy with a cache-clear fallback (#12445) by Qi Yu · 5 days ago
  26. 5d40ec4 [#11926] Encode Trino dialect Hive views using Trino's native Presto View format (#12294) by Yuhui · 5 days ago
  27. 58e0e17 [#12421] docs: Fix links after documentation restructure (#12426) by hutiefang76 · 8 days ago
  28. dde8546 [#11968] test(iceberg): cover role narrowing in Iceberg credential vending (#12461) by Bharath Krishna · 8 days ago
  29. a77aef2 [#12300] feat(client:client-java): TLS support at the HTTPClient layer- #12300 (#12449) by Octavio Herrera Contreras · 8 days ago
  30. 5871b08 [#12447] fix(mcp-server): Preserve the authorization scheme for static credentials (#12439) by Mark Hoerth · 8 days ago
  31. ee2eaf9 [#12448] improvement(docker, mcp): Allow the MCP server image to run as a non-root user (#12446) by Mark Hoerth · 9 days ago
  32. 06d0b43 [#12427] test(iceberg): fix cloud credential vending ITs in deploy mode (#12428) by Bharath Krishna · 9 days ago
  33. bb6b039 [#12151] improvement(core): complete cached entity change-log coverage (#12374) by Qi Yu · 9 days ago
  34. 9951a4d [#12049] design-docs: design document for Idempotency-Key support in Iceberg REST server (#12050) by Akshay Thorat · 9 days ago
  35. 1347c18 [MINOR] improvement(common): cache Credential ServiceLoader lookup in CredentialFactory (#12423) by YangJie · 9 days ago
  36. bb93bf9 [#12416] fix(core): Cascade cache invalidation to hierarchical schema descendants (#12417) by Qi Yu · 10 days ago
  37. 8419409 [#12322] improvement(client-python): Deserialize audit timestamps as datetime (#12323) by Zhiguo Wu · 10 days ago
  38. 38de02e [#12324] fix(client-python): serialize property field in RemoveCatalogPropertyRequest (#12325) by Phước · 10 days ago
  39. 2e256b3 [#12367] test(iceberg): add a MinIO container for credential vending ITs (#12410) by Bharath Krishna · 10 days ago
  40. d1731cf [#12299] feat(server-common): CI-enforced tests for server-side HTTPS and mTLS (#12389) by Octavio Herrera Contreras · 10 days ago
  41. 989ab1f [#12379] feat(core): Support assignment values in REST and Java client (#12384) by roryqi · 10 days ago
  42. 2731083 Docs: update the table maintenance section (#12401) by Mark Hoerth · 10 days ago
  43. bf20d60 [#12359] docs: Remove remaining Since Version references (#12409) by Qi Yu · 10 days ago
  44. 2622c18 Docs: document the health and readiness endpoints (#12402) by Mark Hoerth · 10 days ago
  45. d5d90f4 [#12297] feat(secret): Support fileset create-time secretBindings/secretReferences (#12366) by MaSai · 11 days ago
  46. e85e654 [#12230] fix(auth): stop a lost JCasbin role policy load from denying forever (#12231) by Qi Yu · 11 days ago
  47. 3642546 Docs: update the security section (#12391) by Mark Hoerth · 11 days ago
  48. fd74312 build(deps): bump fastmcp from 3.4.2 to 3.4.5 in /mcp-server (#12311) by dependabot[bot] · 11 days ago
  49. a98f018 [MINOR] fix(auth): Handle missing parent catalog during metadata id resolution (#12214) by jarred0214 · 11 days ago
  50. 0aae0c6 build(deps): update fakeredis requirement from <2.37.0 to <2.38.0 in /mcp-server (#12312) by dependabot[bot] · 12 days ago
  51. a2f687a [#12357] fix: Relocate Jackson in Iceberg Aliyun bundle (#12358) by roryqi · 13 days ago
  52. e51be54 [#11833] feat(core): Add JDBC-backed paginated list/count APIs for users and groups (#11882) by MaSai · 2 weeks ago
  53. f338449 [#12379] feat(core): Support assignment values in common and core (#12380) by roryqi · 2 weeks ago
  54. 1fbd8f0 [#12298] feat(design-docs): Design doc pinning the exact TLS API for the Java client (#12370) by Octavio Herrera Contreras · 2 weeks ago
  55. 43844e1 [#11968] docs(auth): document the X-Gravitino-Active-Roles header (#12365) by Bharath Krishna · 2 weeks ago
  56. 92999da [#12369] fix(mcp-server): use FastMCP.enable() for --include-tool-tags (#12368) by Bharath Krishna · 2 weeks ago
  57. 09a7f4c [#12297] feat(secret): Add SecretManager and typed SecretBinding/SecretReference (#12375) by MaSai · 2 weeks ago
  58. cfa855d [#12233] feat(storage): Store tag assignment values (#12354) by roryqi · 2 weeks ago
  59. 4c45a86 [#11089] feat(lance): enable auxiliary-mode metadata authentication for Lance REST (#11113) by Shane · 2 weeks ago
  60. 33808f6 [MINOR] Split the metalake, partition, model, statistics, job, and view pages (#12328) by Mark Hoerth · 2 weeks ago
  61. e9bb6b7 [MINOR] Add object concept pages and reduce the manage-* pages to the API (#12327) by Mark Hoerth · 2 weeks ago
  62. c3c2ead [#11194] feat(maintenance): Add builtin-iceberg-expire-snapshots job (#11206) by Akshay Thorat · 2 weeks ago
  63. 9f5affd [#12335] feat(authz): Add user by-id listener events and audit mappings (#12336) by MaSai · 2 weeks ago
  64. 155ba1e [#11968] test(auth): add integration test for X-Gravitino-Active-Roles (#12175) by Bharath Krishna · 2 weeks ago
  65. 4f19f13 [MINOR] Split tags and policies into concept and API pages (#12326) by Mark Hoerth · 2 weeks ago
  66. 97da744 [#12270] fix(glue): Ignore blank AWS static credentials (#12271) by Xu Bai · 2 weeks ago
  67. 39029b3 [#11961] refactor(core): Simplify EntityCache and remove relation data from CaffeineEntityCache (#12006) by Qi Yu · 2 weeks ago
  68. 5d18c76 [#12330] feat(core): Add group by-id APIs and alterGroupById via GroupChange (#12331) by MaSai · 3 weeks ago
  69. c24892b build(deps-dev): bump banks from 2.4.2 to 2.4.5 in /clients/client-python (#12315) by dependabot[bot] · 3 weeks ago
  70. 424cc10 [#12341] improvement(server): define optimistic-lock conflict response (#12349) by Qi Yu · 3 weeks ago
  71. 668af43 [#12129] feat(mcp-server): add read tools for views (#12130) by Bharath Krishna · 3 weeks ago
  72. 4be59c2 [#12218] feat(secret): Add secret provider registry and discovery API (#12295) by MaSai · 3 weeks ago
  73. 5f41856 [#12330] feat(core): Add user by-id APIs and alterUserById via UserChange (#12332) by MaSai · 3 weeks ago
  74. 551c233 [#12095] feat(auth): reject assumption of unheld active roles with 403 (#12167) by Bharath Krishna · 3 weeks ago
  75. cbf0198 [#12233] refactor(core): Support relation targets (#12234) by roryqi · 3 weeks ago
  76. 1773ede [#12218] feat(secret): Add GravitinoSecretProvider SPI and in-memory provider (#12215) by MaSai · 3 weeks ago
  77. 496f41e [MINOR] Remove Since Version references across the doc set (#12321) by Mark Hoerth · 3 weeks ago
  78. f350927 [#12289] web-v2(UI): fix about retains the previous sub-path when switching filesets (#12292) by Qian Xia · 3 weeks ago
  79. 3cd9553 [#12255] fix(lance): authenticate the Lance REST service to the Gravitino server (#12256) by Mark Hoerth · 3 weeks ago
  80. f1e0a25 [MINOR] docs: Update server configuration and relational backend storage pages (#12291) by Mark Hoerth · 3 weeks ago
  81. 50c5b95 [#11135] improvement(authz): Cache parsed OGNL AST to avoid re-parsing per authorization (#12253) by YangJie · 3 weeks ago
  82. 8bb68bc [#12252] docs: add entity secrets SPI and in-memory provider design (#12249) by MaSai · 3 weeks ago
  83. f077ce8 [#12277] fix(ci): Guard cherry-pick conflict PRs with title, label, and CI check (#12276) by MaSai · 3 weeks ago
  84. 4432fec [#12283] fix(ci): Disable Git automatic maintenance before paths-filter (#12284) by roryqi · 3 weeks ago
  85. 3744070 [#4723] feat(spark): support Paimon Spark Procedure (#11845) by Yang Zhang · 3 weeks ago
  86. 86415e5 [#11910] fix(clickhouse): fix GraphiteMergeTree classification and add missing type mappings (#11915) by StormSpirit · 3 weeks ago
  87. 72a25d5 [#12248] test(catalog-kafka): wait for topic deletion in testNameSpec (#12268) by mchades · 3 weeks ago
  88. e6f3a47 [MINOR] docs: update the access control page (#12247) by Mark Hoerth · 3 weeks ago
  89. 29d40aa [#12200] fix(web-v2): Gate metalake fetch until OAuth token is ready (#12203) by Phước · 3 weeks ago
  90. 304ea72 [#12125] feat(design-docs): Add tag assignment values design (#12126) by roryqi · 3 weeks ago
  91. 4d60cc7 [MINOR] docs: update the Trino Iceberg REST engine page (#12242) by Mark Hoerth · 3 weeks ago
  92. 74de33a [#12237] fix(iceberg): de-flake IcebergClassLoaderPoolIT by tolerating concurrent JdbcCatalog view-migration on a shared iceberg_tables (#12240) by Qi Yu · 3 weeks ago
  93. 7dadbf7 [MINOR] refactor(flink-connector): Add overridable toGravitinoType hook to BaseCatalog (#12244) by Yuhui · 3 weeks ago
  94. 7270c75 [#12238] fix(core): Make PostgreSQL table version soft delete idempotent (#12243) by Qi Yu · 3 weeks ago
  95. f3a2551 [#11736] fix(core): retry failed entity change log listeners and do not remove logs when polling. (#11739) by Qi Yu · 3 weeks ago
  96. 02cafdb [#12163] feat(api): Add tag assignment value APIs (#12162) by roryqi · 4 weeks ago
  97. b368aaf [#12051] fix(flink-connector): Move Paimon Hadoop options to Hadoop conf (#12121) by jarred0214 · 4 weeks ago
  98. ab2645a [#12112] fix(authz): Align group load authorization (#12113) by roryqi · 4 weeks ago
  99. e1afb70 [#11881] fix(clickhouse): distinguish MATERIALIZED/ALIAS from DEFAULT via default_kind (#11886) by StormSpirit · 4 weeks ago
  100. e4e66e4 [#3767] refactor(client-python): Share authorization integration test setup (#11994) by Henry Chen · 4 weeks ago