1. 77eae69 [#13096] fix(trino-connector): Reuse service metadata when the user token is missing (#13097) by Yuhui · 7 hours ago main
  2. 6693442 [#13044][#13045] improvement(test): identify the server an integration test starts (#13048) by Qi Yu · 15 hours ago
  3. 6f83a81 [MINOR] test: Wait for Hive Metastore readiness in Python ITs (#13072) by Qi Yu · 16 hours ago
  4. bb9a7e5 [#13085] improvement(server): Allow catalog users to test existing catalog connections with stored configuration (#13086) by Jerry Shao · 16 hours ago
  5. faae94a [#12992]feat(core): complete OCC for jobs and job templates (#12994) by Qi Yu · 17 hours ago
  6. d1e7364 [MINOR] test(lance): Fix missing-schema assertion for Lance Spark 0.5.1 (#13084) by Qi Yu · 21 hours ago
  7. 5a9ee9a [#12682] improve(paimon): document optional Hadoop S3A support for Paimon catalog (#12683) by Qi Yu · 34 hours ago
  8. c619ba0 [#13066]improvement(server): Report unhealthy status after observed out-of-memory errors (#13067) by Qi Yu · 34 hours ago
  9. 55ef443 [#12970]improvement(core): Consolidate @Results into @ResultMap in PolicyMetaMapper (#12972) by LiJie20190102 · 35 hours ago
  10. b76d942 [#13068] fix(trino-connector): Enable Iceberg REST per-user sessions only under OAuth2 (#13078) by Yuhui · 2 days ago
  11. 1322029 [#13075] fix(catalog): inspect thread targets without resolving subclass fields (#13076) by Qi Yu · 2 days ago
  12. 1eb7f1b [MINOR] ci: orchestrate integration tests from Cron Integration Test (#13050) by Danhua Wang · 2 days ago
  13. 0e6ae74 [#13020] fix(hive): Skip HMS stats update for property/comment-only alterTable (#13021) by geyanggang · 2 days ago
  14. b6b0f24 [#12727] fix(server): Return 400 for invalid metadata object types (#13059) by Nevin Zheng · 2 days ago
  15. 172c903 [#13012] fix(catalog-glue): Fail fast and give actionable errors on missing AWS credentials (#13013) by Yuhui · 2 days ago
  16. 25f874f [#12982] fix(core): mask undeclared credential-like properties by name (#12983) by MaSai · 2 days ago
  17. 2fc0693 [#13041] fix(server): Add @ResponseMetered to JobOperations#cancelJob (#13046) by Abdullah · 2 days ago
  18. 7e3ee58 [#13029] fix(lance): Correct the Lance Spark Catalog class in the integration guide (#13030) by StormSpirit · 2 days ago
  19. 7478ab4 [#12975] fix(core): Preserve errors thrown by PrincipalUtils.doAs (#12976) by roryqi · 2 days ago
  20. e7fee43 [#13033] fix(iceberg): Map PostgreSQL JDBC auth failures to ConnectionFailedException (#13034) by MaSai · 2 days ago
  21. 3b6fe77 [#13040] fix(postgresql): Report unconstrained NUMERIC as an external type (#13042) by Yuhui · 2 days ago
  22. 56aedb2 [#13035] fix(core): Add PostgreSQL group-role batch upsert (#13037) by Qi Yu · 2 days ago
  23. 7694553 [#12953] feat(mcp-server): select the metalake per tool call (#12960) by Jerry Shao · 2 days ago
  24. ddf9fc7 [#13032] fix(catalog-jdbc-mysql): Preserve full type declaration for lossy MySQL column types (#13036) by Yuhui · 2 days ago
  25. 25de374 [#13024] fix(catalog-jdbc-postgresql): Quote table name in ALTER statements for mixed-case tables (#13026) by Yuhui · 2 days ago
  26. c013191 [#12949] fix(iceberg-rest): Forward access-delegation header on federated loadTable (#12950) by MaSai · 3 days ago
  27. 4deb094 [#12998] fix(catalogs): Preserve upstream error messages when wrapping exceptions (#12999) by MaSai · 3 days ago
  28. 5c8f5bf [#9418] fix(iceberg): inject GCS FileIO token from gcs-service-account-file (#12962) by MaSai · 3 days ago
  29. d648735 [#13010] fix(catalog-glue): Do not expose Glue VIRTUAL_VIEW objects as tables (#13011) by Yuhui · 3 days ago
  30. 0e38553 [#12996] fix(catalog-glue): Derive table location from the Glue database LocationUri (#12997) by Yuhui · 3 days ago
  31. 2559337 [#12990] fix(catalog-glue): Include the AWS error detail in Glue failure messages (#12991) by Yuhui · 3 days ago
  32. ea1d960 [#12986] fix(catalog): Release the ClassLoader of a dropped catalog (#12987) by Qi Yu · 3 days ago
  33. 96f257e [#12921] fix(server): Authenticate secrets-provider discovery under metalake (#12940) by MaSai · 3 days ago
  34. ade9e1b [#12988] fix(lance): reject nonempty Arrow input before table creation (#12989) by Qi Yu · 3 days ago
  35. c2e69d4 [#13007] fix(core,iceberg): Restore event dispatcher ordering (#13000) by roryqi · 3 days ago
  36. 9024b68 [#12978] feat(idp): add audit_info and allow self user get/password change (#12979) by MaSai · 4 days ago
  37. c5b9aff [MINOR] docs(open-api): Document job list filter combination and missing-timestamp sorting (#12981) by Jerry Shao · 4 days ago
  38. 0e98fd4 [#12958] fix(iceberg): Support Azure service principal authentication for ADLS FileIO (#12959) by roryqi · 4 days ago
  39. f451824 [#12287] feat(server): Add bulk role access-control APIs (#12732) by jarred0214 · 4 days ago
  40. 5aea36d [#12977] fix(server): Report dotted metadata names clearly (#12980) by roryqi · 4 days ago
  41. a7b80963 [#12652] improvement(core): add OCC for function writes (#12823) by Qi Yu · 4 days ago
  42. cf33ce8 [#12944] fix(core): Use ExponentiallyDecayingReservoir so infrequent operations don't report zero duration (#12946) by Jerry Shao · 4 days ago
  43. 415906b [#12653] improvement(core): add OCC for view writes (#12824) by Qi Yu · 4 days ago
  44. f47d6d1 [#12776] feat(core): Add OCC for policy metadata (#12782) by Qi Yu · 4 days ago
  45. eeb810a [MINOR] refactor(server): Reuse the shared user and group authorization expressions (#12973) by Qi Yu · 4 days ago
  46. bcf36c7 [#8771] feat(spark-connector): Add Spark 4.0 support, drop 3.3 and 3.4 (#12414) by YangJie · 4 days ago
  47. 3e7b550 [#12929] fix(flink-connector): Use catalog database instead of schema for PostgreSQL JDBC table scans (#12930) by Yuhui · 5 days ago
  48. 2c930e8 [#12450] improvement(catalog): Share AWS Glue credentials provider (#12575) by Xu Bai · 5 days ago
  49. 14f4995 [MINOR] refactor(flink): Allow catalogs to customize Flink type conversion (#12961) by Qi Yu · 5 days ago
  50. d460830 [#12405] fix(core): prevent silent authorization updates on closed catalogs (#12793) by Qi Yu · 5 days ago
  51. 099acc8 [#12176] feat(core): add policy-tag relation events (#12855) by roryqi · 5 days ago
  52. 41df961 [#12938] fix(jdbc): Resolve PostgreSQL database names before accepting catalogs (#12939) by Qi Yu · 5 days ago
  53. 096196e [#12246] fix(catalog-hive): Close Log4j LoggerContext in HiveClientClassLoader#close() to prevent Metaspace leak (#12925) by Yuhui · 5 days ago
  54. d326c6a [#12775] feat(core): Add OCC for tag metadata (#12781) by Qi Yu · 5 days ago
  55. b639f5c [#12760] fix(server): Cover root-mounted servlets with the request-context, audit, and custom filter chain (#12922) by Jerry Shao · 5 days ago
  56. ef731af [#12927] fix(function): Reject unresolved data types in new definitions (#12928) by mchades · 5 days ago
  57. 157a6f6 [#12403] fix(core): defer catalog wrapper cleanup with an operation lease (#12404) by Qi Yu · 5 days ago
  58. 15259af [#12872] fix(core): Capture and redact request query parameters in audit log entries (#12891) by Jerry Shao · 8 days ago
  59. a4bdfda [#12518] fix(trino-connector): Keep the engine types when applying projections (#12520) by qbhan · 8 days ago
  60. 1db4894 [#12407] fix(lance): Hydrate empty schema before table alteration (#12895) by Qi Yu · 8 days ago
  61. 8e41ced [#12879] fix(server): return accurate HTTP statuses for unsupported operations (#12880) by Qi Yu · 8 days ago
  62. 30687f6 [#12851] fix(iceberg-rest): Share the managed memory catalog in auxiliary mode (#12852) by roryqi · 8 days ago
  63. 7856f0e [#12875] improve(server): Reuse the shared table authorization expressions (#12876) by Qi Yu · 8 days ago
  64. c0871fa [#12840] fix(lineage): Validate and authorize lineage events (#12850) by roryqi · 8 days ago
  65. deb1e2d [#12783] fix(server): return JSON errors for the whole pre-resource-method WebApplicationException family (#12878) by Jerry Shao · 8 days ago
  66. b2067cd [#12892] fix(audit): Suppress internal operation audit events (#12893) by roryqi · 8 days ago
  67. 5027095 [#12712] fix(trino-connector): Add integration test for TLS + OAuth2 credential vending (#12713) by Yuhui · 8 days ago
  68. 5d150b1 [MINOR] fix(ci): Pin pnpm/action-setup to an ASF-allowlisted SHA (#12899) by Yuhui · 8 days ago
  69. 3afc9f1 [#12501][#12500] feat(core): Support FUNCTION and VIEW metadata object policies (#12503) by Arvin · 8 days ago
  70. dad9a08 [#11584] feat(iceberg-rest): Gate config endpoints by backend capabilities (#11634) by Akshay Thorat · 8 days ago
  71. 8e25f01 [#12885] fix(audit): Include role names in role assignment logs (#12886) by roryqi · 8 days ago
  72. 37f9d23 [#12871] fix(authz): Invalidate function grants after drop (#12873) by Qi Yu · 8 days ago
  73. 5bf0d8b [#12562] feat(lance): Add table mutation and deletion authorization (#12696) by Qi Yu · 8 days ago
  74. 67a06e6 [#12546] improvement(trino-connector): Report catalog registration status through system tables (#12547) by Yuhui · 8 days ago
  75. 3b01c6e [#12887] fix(server): Validate statistic name length (#12889) by roryqi · 8 days ago
  76. 2325b41 [#12794] feat(catalog): Support connection tests with proposed changes (#12798) by mchades · 9 days ago
  77. 91a5966 [#12589] fix(iceberg-catalog): Fix JDBC CommunicationsException after idle timeout for MySQL backend (#12662) by Arvin · 9 days ago
  78. cbadfbf [#12685] fix(core): Fix built-in policy supportedObjectTypes validation and error message (#12686) by Tanay Paul · 9 days ago
  79. 364e145 [#12834] fix(server): reject null request bodies in remaining REST operations (#12866) by Shuai Liu · 9 days ago
  80. e4d076a [#12783] fix(server): move malformed path-param handling to a Jersey ExceptionMapper (#12784) by Jerry Shao · 9 days ago
  81. 4a36036 [#12561] feat(lance): Add table creation authorization for Lance REST (#12695) by Qi Yu · 9 days ago
  82. 8494a3b [#12418] improvement(test): Add multi-node entity cache consistency tests (#12460) by Qi Yu · 9 days ago
  83. 7da9b6f [#12729] fix(authz): Authorize generic view operations (#12797) by mchades · 9 days ago
  84. 99156ff [#12750] improvement(core): omit reserved+hidden properties from API responses (#12751) by MaSai · 9 days ago
  85. 5b666b3 [#12709] improvement(spark-connector): Route lakehouse-iceberg catalogs through the Iceberg REST server (#12710) by Yuhui · 9 days ago
  86. d8066df [#12748] fix(clickhouse): preserve composite primary key on table load (#12765) by StormSpirit · 9 days ago
  87. 680054d [#12730] improvement(docker-image): Update kerberos-hive to 0.1.7 (#12829) by Qi Yu · 9 days ago
  88. d0c656a [#12560] feat(lance): Add table read and list authorization for Lance REST (#12694) by Qi Yu · 10 days ago
  89. 0dcc2ec [#12841] refactor(core): Remove external_id and enabled from user and group metadata (#12842) by MaSai · 10 days ago
  90. eb8bbed [#12848] fix(authz): Allow getting owner of disabled metalake (#12849) by roryqi · 10 days ago
  91. 65b613d [#12176] feat(core): add policy-on-tag core support (#12718) by roryqi · 10 days ago
  92. b3593b8 [#12837] fix(authz): Evaluate list denies by access path (#12838) by Qi Yu · 10 days ago
  93. 29a566b [#12788] fix(server): reject null request body before validate() in create/register/add operations (#12791) by Fayupable · 10 days ago
  94. ca33d31 [#12795] improvement(infra): Enable automatic GitHub Copilot code review (#12796) by Nevin Zheng · 10 days ago
  95. 3893386 [#12773] feat(idp-basic): add enabled flag for local IdP users (#12774) by MaSai · 10 days ago
  96. caa5a0b [#12730] fix(docker): bind-mount packages/ in kerberos-hive so the archives stop shipping in the image (#12731) by Sujeito Operator · 10 days ago
  97. d2100d6 [ #12236] improvement(storage): Replace inlined time-SQL literals with DatabaseTimeSQL constants (#12792) by LiJie20190102 · 10 days ago
  98. ea76f14 [#12777] fix: Avoid exposing service admins publicly (#12778) by roryqi · 10 days ago
  99. e713cad [#12676] feat(job): Persist and expose the resolved runtime job template (#12715) by Jerry Shao · 10 days ago
  100. 0080137 [#12761] fix(clickhouse): Propagate clustered table rename (#12763) by StormSpirit · 11 days ago