)]}' { "log": [ { "commit": "f74bcd880e76c59bba21c95858d826404e204b35", "tree": "3b9f756fff31aa64b4a9c70fde50131847e6da54", "parents": [ "178b76d46d712676ada4d0f058a480c7c68a82a2" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Wed Oct 14 08:54:23 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 08:54:23 2026 -0700" }, "message": "RANGER-5840: Update displayName from \u0027Polaris (draft)\u0027 to \u0027Polaris\u0027 (#1313)" }, { "commit": "178b76d46d712676ada4d0f058a480c7c68a82a2", "tree": "86fe3a7e62845f3a14e2bbc4e4fc73365f594fae", "parents": [ "fdda472fb2cf540d6e97b3f8b08bad0c29426793" ], "author": { "name": "Vishal Bhavsar", "email": "131423698+vibhavsar@users.noreply.github.com", "time": "Wed Oct 14 20:32:05 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 20:32:05 2026 +0530" }, "message": "RANGER-5839: Add Docker system tests to verify HDFS group-policy cases (#1312)" }, { "commit": "fdda472fb2cf540d6e97b3f8b08bad0c29426793", "tree": "2dc994a37d868ddc532e9f5a756f20f24a8f426c", "parents": [ "ac6bb535f3d1458a44d30b26b0f344b064def2dd" ], "author": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Wed Oct 14 02:11:05 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 04:41:05 2026 +0800" }, "message": "RANGER-5822: make application supplied context attributes accessible in expressions (#1302)" }, { "commit": "ac6bb535f3d1458a44d30b26b0f344b064def2dd", "tree": "5fb0cf63d02bd7609e5ff93b0c2e199946cd8c86", "parents": [ "49a657b9df090b74e167f24ab2adaedfd8f68f98" ], "author": { "name": "Vishal Bhavsar", "email": "131423698+vibhavsar@users.noreply.github.com", "time": "Mon Oct 12 20:16:41 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 12 20:16:41 2026 +0530" }, "message": "RANGER-5833 Add Docker system tests to verify Hbase denies operations for users without an explicit allow policy (#1303)" }, { "commit": "49a657b9df090b74e167f24ab2adaedfd8f68f98", "tree": "b5fa6673e6b7facf886101f8b78b515473af5471", "parents": [ "49f04a583e6e1e0ae0b4332021ed94b6b84fe56f" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Mon Oct 12 17:57:02 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 12 17:57:02 2026 +0530" }, "message": "RANGER-5835: Add Docker system tests for KMS DECRYPT_EEK on HDFS EZ (#1306)\n\n* RANGER-5835: Add Docker system tests for kms decrypt_eek on hdfs encryption zones\n\n* RANGER-5835: Optimised test execution time and few nitpicks" }, { "commit": "49f04a583e6e1e0ae0b4332021ed94b6b84fe56f", "tree": "b63168670fbc996884f269d950e66cecd687fcaa", "parents": [ "f56788a1bdb84b9297f17563813bb7c301e04ea9" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Mon Oct 12 13:20:13 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 12 13:20:13 2026 +0530" }, "message": "RANGER-5834: Extend functional test framework with multi-service docker container support (#1304)" }, { "commit": "f56788a1bdb84b9297f17563813bb7c301e04ea9", "tree": "58d2dc11e034d1f762c6f97c7987b6ebce838048", "parents": [ "38ce1db61473a581df59f5e6c7a7d2ecffc415ec" ], "author": { "name": "Vishal Bhavsar", "email": "131423698+vibhavsar@users.noreply.github.com", "time": "Fri Oct 09 14:34:43 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 09 14:34:43 2026 +0530" }, "message": "RANGER-5831: Add Docker system tests to verify Hive denies operations for users without an explicit allow policy (#1300)" }, { "commit": "38ce1db61473a581df59f5e6c7a7d2ecffc415ec", "tree": "204fd09758c791571235bf9cc3372c5688706c34", "parents": [ "3b90219ff91063d8fb86355cac168fc8b08c8ea1" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Fri Oct 09 12:53:59 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 09 12:53:59 2026 +0530" }, "message": "RANGER-5808: Validate JDBC connection configuration in Hive, Presto a… (#1255)\n\n* RANGER-5808: Validate JDBC connection configuration in Hive, Presto and Trino resource lookup clients\n\n* RANGER-5808: Reject host-less Hive JDBC URLs and block Trino dnsResolver\n\n* RANGER-5808: addressed review comments" }, { "commit": "3b90219ff91063d8fb86355cac168fc8b08c8ea1", "tree": "e91c1806a12b4503c0d2b58e86124793fb62adcf", "parents": [ "1a03f65710be5e49168702501e8e617137caf65a" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Thu Oct 08 13:04:41 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 13:04:41 2026 -0700" }, "message": "Revert \"RANGER-5759: Add Atlas notification-topic and post-notification privi…\" (#1298)\n\n* Revert \"RANGER-5759: Add Atlas notification-topic and post-notification privi…\"\n\nThis reverts commit f74d36dda0078dd12440f8372d4dc7289aceb797.\n\n* RANGER-5804: Remove unused timezone parameter in OpenSearchAuditMetricsHelper flagged by PMD" }, { "commit": "1a03f65710be5e49168702501e8e617137caf65a", "tree": "83d884cafaef06531062e4c4a351ec1c1f3e8615", "parents": [ "13ac77d572752f4faae617fd65b8dba83a7ffe28" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Thu Oct 08 09:49:53 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 09:49:53 2026 -0700" }, "message": "RANGER-5832: Remove duplicate dependency declarations in audit-dispatcher-hdfs and audit-dispatcher-solr POMs (#1301)" }, { "commit": "13ac77d572752f4faae617fd65b8dba83a7ffe28", "tree": "6e9eea0e8df6f3dedf21538fcce60108f83e1863", "parents": [ "f74d36dda0078dd12440f8372d4dc7289aceb797" ], "author": { "name": "Dineshkumar Yadav", "email": "59435896+dineshkumar-yadav@users.noreply.github.com", "time": "Thu Oct 08 10:55:51 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 10:55:51 2026 +0530" }, "message": "RANGER-5824 : Align Sqoop Ranger authorizer with other plugins (#1289)\n\nCo-authored-by: Dineshkumar Yadav \u003cdineshkumar@apache.org\u003e" }, { "commit": "f74d36dda0078dd12440f8372d4dc7289aceb797", "tree": "634f1e191503de2770f958a2e5d92f0de921728c", "parents": [ "18880728e7e8ed0630650658f774e28d684172d2" ], "author": { "name": "eoinmcdonnell113", "email": "eoinmcdonnell113@gmail.com", "time": "Wed Oct 07 15:28:41 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 07 12:28:41 2026 -0700" }, "message": "RANGER-5759: Add Atlas notification-topic and post-notification privi… (#1219)" }, { "commit": "18880728e7e8ed0630650658f774e28d684172d2", "tree": "e9e15ddee1f3fc3c22f6c801304fef3969ab682b", "parents": [ "1c98d68618115ccfc59b9b2643586883e4965c88" ], "author": { "name": "Vishal Bhavsar", "email": "131423698+vibhavsar@users.noreply.github.com", "time": "Wed Oct 07 18:20:48 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 07 18:20:48 2026 +0530" }, "message": "RANGER-5823: Adding public api test cases of policy and repo creation in docker based framework (#1287)" }, { "commit": "1c98d68618115ccfc59b9b2643586883e4965c88", "tree": "ba3a47e42e07659f9b84133d298e09e81afab85d", "parents": [ "78720dd5fe7f5b3cc2c725ee2ffb63880a6f60b9" ], "author": { "name": "Dhaval Rajpara", "email": "dhavalrajpara@apache.org", "time": "Wed Oct 07 17:54:26 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 07 17:54:26 2026 +0530" }, "message": "RANGER-5769 : Updating library dependencies in Ranger Admin React package-lock.json (#1246)" }, { "commit": "78720dd5fe7f5b3cc2c725ee2ffb63880a6f60b9", "tree": "0210f9a4e77d4dfec2e89f33a5779fba6e1ddac7", "parents": [ "edfedfeca8efe1cf7bd4372771c521731ceaca6c" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Wed Oct 07 16:20:28 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 07 16:20:28 2026 +0530" }, "message": "RANGER-5821: Align functional-tests/run-tests.sh with docker setup changes (#1288)\n\n* RANGER-5821: Align run-tests.sh with docker setup changes\n\n* RANGER-5821: Error fixes and improvements in hdfs and kms module\n\n* RANGER-5821: Update functional-tests/readme.md with latest changes" }, { "commit": "edfedfeca8efe1cf7bd4372771c521731ceaca6c", "tree": "a5a36715a995d9f68a5d5de6812f866b30c56d8b", "parents": [ "b7f823187f09711a45ce33db609105460b75f3c5" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Tue Oct 06 16:46:20 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 06 16:46:20 2026 +0530" }, "message": "RANGER-5737: Ranger Audit: Solr requests fail with 401 Authentication required due to incorrect hostname in URL (#1147)" }, { "commit": "b7f823187f09711a45ce33db609105460b75f3c5", "tree": "5addd47c5c9e59fdb097596217d93afc15dbc587", "parents": [ "a081ed080b6320c04c63a29a1166e9d27fb8207a" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Mon Oct 05 17:07:28 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 05 17:07:28 2026 +0530" }, "message": "RANGER-5818: Use the common hardened script engine for nestedstructure row-filter evaluation (#1283)" }, { "commit": "a081ed080b6320c04c63a29a1166e9d27fb8207a", "tree": "61f1875384a437aff64026e9cc77e0c49906ff6c", "parents": [ "920170ef2e9864fbb52785f3732b4c9f5c3c6903" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Mon Oct 05 17:06:03 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 05 17:06:03 2026 +0530" }, "message": "RANGER-5819: Make grant/revoke endpoint security patterns slash-insensitive (follow-up to RANGER-5677) (#1284)" }, { "commit": "920170ef2e9864fbb52785f3732b4c9f5c3c6903", "tree": "597326accc12fccf6cf61fb4aa84d962392ebdb0", "parents": [ "166f7220529a3abe915039795902f47f924a3bd4" ], "author": { "name": "abhiishek26", "email": "abhisinghbest53@gmail.com", "time": "Mon Oct 05 11:21:13 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 05 11:21:13 2026 +0530" }, "message": "RANGER-5556: Functional test patch for ServiceREST and TagREST for clusterless framework (#1276)" }, { "commit": "166f7220529a3abe915039795902f47f924a3bd4", "tree": "1aa9f2296cf4ade3d040075a6d3cee91e41cc1ee", "parents": [ "3a7590544aba27016d9d543aba09cb45f163ad9a" ], "author": { "name": "Ramesh Mani", "email": "rmani@cloudera.com", "time": "Fri Oct 02 16:35:41 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 02 16:35:41 2026 -0700" }, "message": "Update Ranger audit server to use OpenSearch Client version 3.10.0 (#1281)\n\nCo-authored-by: Ramesh Mani \u003crmani@apache.org\u003e" }, { "commit": "3a7590544aba27016d9d543aba09cb45f163ad9a", "tree": "5d877ba757ef97caa6b737b739442ad4a2f5b549", "parents": [ "e705ae87046912c63d186c32834701c91d2586aa" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Thu Oct 01 22:19:24 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 22:19:24 2026 -0700" }, "message": "RANGER-5816: Add support for header based authentication in audit-ingestor service (#1279)" }, { "commit": "e705ae87046912c63d186c32834701c91d2586aa", "tree": "045205a0ce6e7308621877b68537d639a7f2dec5", "parents": [ "4cfd669a23586525ab2adac73ee96b9c472655c1" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Thu Oct 01 09:07:19 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 09:07:19 2026 -0700" }, "message": "RANGER-5802: Fix maven-assembly-plugin warnings in distro build (#1242)\n\n* RANGER-5802: Fix maven-assembly-plugin warnings in distro build\n\nEvery build logged 203 assembly-plugin warnings (1385 log lines) caused by\nstale entries in the assembly descriptors:\n\n- 193 \"patterns were never triggered\": include/exclude patterns that match no\n artifact. Solr/ES audit destination jars left behind after RANGER-5632\n removed those dependencies (solr-solrj, httpasyncclient, httpcore-nio,\n httpmime, jetty-client); leftovers of the Jersey 1 -\u003e 2 and log4j\n migrations (hk2, javax.inject, osgi-resource-locator, commons-configuration\n 1.x, log4j, slf4j-log4j12, noggit); rules that can never match, such as a\n plugin jar listed in its own dependency filter and excludes with no\n matching include; and entries in a moduleSet that does not package them.\n\n- 10 \"filesystem-root relative reference, which is not cross platform\n compatible\": outputDirectory paths starting with \"/\" in the elasticsearch\n plugin descriptor. Normalized in the solr, schema-registry and admin-web\n descriptors as well.\n\nA pattern was dropped only when it was unmatched for every module of its\nmoduleSet. Packaging is unchanged: the file listings of all 30 tarballs are\nidentical before and after, both single-threaded and with -T 8.\n\nAlso fail the build-17 CI job when either warning appears, so stale\ndescriptor entries are caught in review instead of accumulating. A silent\nsymptom of the same warnings is a tarball that quietly loses jars.\n\n* RANGER-5802: Remove kms.xml patterns left stale by RANGER-5785\n\nRANGER-5785 upgraded google-cloud-kms from 2.3.0 to 2.96.0, which left four\ninclude patterns that match no artifact and log \"patterns were never\ntriggered\" warnings:\n\n- io.grpc:grpc-grpclb and io.opencensus:opencensus-proto in the ranger-kms\n dependencySet. They were transitive dependencies of google-cloud-kms 2.3.0\n and are no longer pulled in by 2.96.0.\n- protobuf-java and protobuf-java-util in the embeddedwebserver moduleSet.\n embeddedwebserver does not depend on protobuf; both jars already ship in\n ews/webapp/WEB-INF/lib through the ranger-kms dependencySet.\n\nPackaging is unchanged: the file listings of all tarballs are identical\nbefore and after this change." }, { "commit": "4cfd669a23586525ab2adac73ee96b9c472655c1", "tree": "f939d93ba7876ece4a55425949b7a5b856e5568b", "parents": [ "a93f26817e945fe25c136fdf3a3fb4d476b49536" ], "author": { "name": "Dineshkumar Yadav", "email": "59435896+dineshkumar-yadav@users.noreply.github.com", "time": "Thu Oct 01 15:33:29 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 15:33:29 2026 +0530" }, "message": "Revert \"RANGER-5730: Restrict role import createNonExist flag to roles only (#1142)\" (#1274)\n\nThis reverts commit 8dba0414abdff996f08fdd9a59bd3fb7958f4c87.\n\nCo-authored-by: Dineshkumar Yadav \u003cdineshkumar@apache.org\u003e" }, { "commit": "a93f26817e945fe25c136fdf3a3fb4d476b49536", "tree": "ca0b35ae4cc3ecff4416baab785e5d8dafb67549", "parents": [ "63e5bd7040954455f89c5f6f4615a92d18093510" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Wed Sep 30 15:47:44 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 15:47:44 2026 -0700" }, "message": "RANGER-5807: Exclude KMS privileges from config super users and fix RANGER-5627 related bugs (#1257)\n\nConfig super users/groups (ranger.admin.super.users/groups, RANGER-5627)\nnow get system admin privileges only, independent of Ranger DB roles:\n\n- Session: the super-user flag no longer makes isKeyAdmin() and\n isAuditKeyAdmin() true; key-admin and auditor flags from DB roles are\n cleared for super users.\n- Auditor block: blockAuditorRoleUser() no longer rejects super users.\n Before, isAuditUserAdmin() and isAuditKeyAdmin() were true for every\n super user, so it rejected them wherever auditors are rejected.\n- Roles: super users get ROLE_SYS_ADMIN only, whatever their roles in\n Ranger DB, for Spring authorities, the session and the profile.\n RangerSuperUserConfig.getSuperUserRoles replaces\n mergeConfigSuperUserRoles and getConfigSuperUserProfileRoles, whose\n result was always ROLE_SYS_ADMIN (plus ROLE_USER, which had no\n effect). A warning is logged when a super user also has a KMS role in\n Ranger DB.\n- KMS service-def create/update/delete follows system admin rules.\n- KMS entries are excluded from access audits and the admin audit log\n for super users.\n- Key Manager module removed from the session of all admins (DB sys\n admins are never assigned it either) and from the super-user profile.\n- User visibility (hasAccessToGetUserInfo, searchXUsers,\n checkUserAccessible) follows system admin rules, so KMS users are not\n visible/manageable by super users. As for system admins, searchXUsers\n only adds the non-KMS roles to the role filter; the per-user checks\n in hasAccessToGetUserInfo and checkUserAccessible do the enforcing.\n Two exceptions are kept in hasAccessToGetUserInfo: rangerusersync\n (when configured as a super user) still sees all users, as it does as\n a DB system admin, and a super user can always read its own user,\n even if its DB role is a KMS role.\n- New UserMgr.getDBRolesByLoginId returns DB portal roles without the\n merged super-user roles. checkUserAccessible uses it for the target\n user: before, a target that is a super user always carried\n ROLE_KEY_ADMIN, so system admins could not create or update any\n super-user account; now only a target with a KMS role in Ranger DB\n is rejected. createDefaultAccountUser also uses it to compare the\n existing roles of an external user.\n- Plugin grant/revoke is not blocked by DB auditor roles for super\n users. New RangerBizUtil.isConfigSuperUser keeps this exemption\n limited to config super users; a DB user with both system admin and\n auditor roles is still blocked, as before.\n- Config descriptions updated; unit tests updated and added.\n\nUserMgr.mapXXPortalUserToVXPortalUser replaced the role list of every\nmapped user with the config super-user roles ([ROLE_SYS_ADMIN]) whenever\nthe logged-in session was a config super user. With the auditor block\nfor super users lifted in the previous commit, within a super-user\nsession:\n\n- /users APIs reported every user as ROLE_SYS_ADMIN.\n- UserMgr.checkAccess saw every target as a system admin, so super users\n could update the profile (name, email, roles) of KMS users (key\n admin / key admin auditor) through PUT /service/users, which system\n admins cannot.\n- Role-change bookkeeping in XUserMgr compared new roles against the\n wrong existing roles (e.g. promoting a user to ROLE_SYS_ADMIN via\n setUserRolesByName/ByExternalID was a no-op).\n\nApply the config roles only when the mapped user is the logged-in super\nuser; other users keep their DB roles." }, { "commit": "63e5bd7040954455f89c5f6f4615a92d18093510", "tree": "f7248429d2aee8322fefc4e7b9e4f7fe09e17ea7", "parents": [ "f3c96eb08e4c5a822b8dd51ed0a6e163b3a59682" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Wed Sep 30 13:00:12 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 13:00:12 2026 +0530" }, "message": "RANGER-5804: Support Ranger Admin for displaying audit metrics from OpenSearch (#1251)\n\n* RANGER-5804: Support Ranger Admin for displaying audit metrics from OpenSearch\n\n* RANGER-5804: Support Ranger Admin for displaying audit metrics from OpenSearch - fix review comment" }, { "commit": "f3c96eb08e4c5a822b8dd51ed0a6e163b3a59682", "tree": "9b7777a95375f379b08e48813df997acaaedd3eb", "parents": [ "e9dd8a441a77bf3d34c48c829c163e6574235d02" ], "author": { "name": "OpenGuardrail", "email": "ravi.hackworks.irl@gmail.com", "time": "Wed Sep 30 08:16:40 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 12:46:40 2026 +0530" }, "message": "RANGER-5682: Add README for agents-common module (#1065)" }, { "commit": "e9dd8a441a77bf3d34c48c829c163e6574235d02", "tree": "b68dc9d67a3d99b65d56240503d32d8f3bcd9cdd", "parents": [ "97c53ffeb33512d348b10e63d76d4026493a778d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 30 12:33:05 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 12:33:05 2026 +0530" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.18.9 to 2.18.10 (#1264)\n\nBumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) from 2.18.9 to 2.18.10.\n- [Commits](https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.18.9...jackson-databind-2.18.10)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n dependency-version: 2.18.10\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "97c53ffeb33512d348b10e63d76d4026493a778d", "tree": "95464622f1bb348020f54b5f95d96e0f4a7cc15e", "parents": [ "b39c559b3d9f55966729f1bd367bebc868c2034a" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Wed Sep 30 12:03:15 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 12:03:15 2026 +0530" }, "message": "RANGER-5771: Improve Ranger Kafka Plugin to Prevent OOM During SRM St… (#1265)\n\n* RANGER-5771: Improve Ranger Kafka Plugin to Prevent OOM During SRM Startup\n\n* RANGER-5771: addressed review comments\n\n* RANGER-5771: addressed review comments\n\n* RANGER-5771: addressed review comments" }, { "commit": "b39c559b3d9f55966729f1bd367bebc868c2034a", "tree": "54311021c3f1481ae043a90ad719a560e663e883", "parents": [ "8bd65753ac91a91e3552a93f73c8cad5d39491c6" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Tue Sep 29 13:08:38 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 29 13:08:38 2026 -0700" }, "message": "RANGER-5809: Use Ranger Admin secure endpoints by default in plugins (#1259)" }, { "commit": "8bd65753ac91a91e3552a93f73c8cad5d39491c6", "tree": "f760ab8db20d81217533633367460568e67bdb84", "parents": [ "9f4d07dc5dcf7716b70bae064f082af18ef10ef5" ], "author": { "name": "Sanket-Shelar", "email": "121221985+Sanket-Shelar@users.noreply.github.com", "time": "Tue Sep 29 16:27:28 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 29 16:27:28 2026 +0530" }, "message": "RANGER-5541: Implement best coding practices for validating service configs (#916)" }, { "commit": "9f4d07dc5dcf7716b70bae064f082af18ef10ef5", "tree": "23bf8c40520e3aa27294061d0f3ff5c4aaf95965", "parents": [ "6847eb7b977b1027cdf8de68557299bc21492690" ], "author": { "name": "abhiishek26", "email": "abhisinghbest53@gmail.com", "time": "Tue Sep 29 15:24:20 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 29 15:24:20 2026 +0530" }, "message": "RANGER-5764:Enhancing RangerUserStore to include or exclude user group mappings (#1185)" }, { "commit": "6847eb7b977b1027cdf8de68557299bc21492690", "tree": "61a1aa8486ffa853ccc8470ccebbd016a8cf54a0", "parents": [ "d0f9fe978b929d71f953682b5d7792aa258cf7b4" ], "author": { "name": "KRISHNA CHAITANYA MUTTEVI", "email": "130595906+krishnamuttevi@users.noreply.github.com", "time": "Tue Sep 29 14:58:03 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 29 14:58:03 2026 +0530" }, "message": "RANGER-5110: Prevent entity soft deletion when LDAP DN is updated (#1162)\n\n* RANGER-5110: Prevent entity soft deletion when LDAP DN is updated with proper syncing of U\u0026G\n\n* RANGER-5110: Added the support for inter-syncsource dn updates \u0026 addressed reviewer comments\n\n* RANGER-5110: Addressed the review comments by moving the skip condition\n\n* RANGER-5110: Resolved the Merge Conflicts \u0026 Checkstyle error\n\n* RANGER-5110: Gate name-map DN removal on allowSyncSourceOverwrite" }, { "commit": "d0f9fe978b929d71f953682b5d7792aa258cf7b4", "tree": "e7f6b5c51a3de270227bfa1f29bb227aa8fdfde2", "parents": [ "83e92c92630de76d045887950c5147f50e4e4400" ], "author": { "name": "KRISHNA CHAITANYA MUTTEVI", "email": "130595906+krishnamuttevi@users.noreply.github.com", "time": "Tue Sep 29 11:05:25 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 29 11:05:25 2026 +0530" }, "message": "RANGER-5696: Added deltaSyncServerType config to optimize delta sync … (#1218)\n\n* RANGER-5696: Added deltaSyncServerType config to optimize delta sync filters for AD/LDAP\n\n* RANGER-5696: Added the getDeltaSyncFilter function" }, { "commit": "83e92c92630de76d045887950c5147f50e4e4400", "tree": "466cbfe7a6102f6fa89018c75491ab23251296f9", "parents": [ "5f88104f31cfa2477096f1341094f9ca1b8760b2" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Sun Sep 27 12:39:54 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Sep 27 12:39:54 2026 -0700" }, "message": "RANGER-5810: Rewrite README for Docker Hub installs, JDK 17 builds and PR workflow (#1260)" }, { "commit": "5f88104f31cfa2477096f1341094f9ca1b8760b2", "tree": "90a03bfeb97684640ec7602eb5aaf03281882b61", "parents": [ "072bbd4385201e48486f52178d4b3dd81bcefcba" ], "author": { "name": "Mahesh Bandal", "email": "maheshbandal@apache.org", "time": "Fri Sep 25 23:00:10 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 25 23:00:10 2026 +0530" }, "message": "RANGER-5797: Improve policy evaluation logic for _any access type and priority handling (#1234)" }, { "commit": "072bbd4385201e48486f52178d4b3dd81bcefcba", "tree": "7297866101a3fed3a9ffad0df2855f0565503e77", "parents": [ "fb2025626862761c7a70929dfbd5ef1e803c310b" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Thu Sep 24 08:38:32 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Sep 24 08:38:32 2026 +0530" }, "message": "RANGER-5793: Align delegated-admin checks for policy update and delete when access grants are unchanged (#1223)" }, { "commit": "fb2025626862761c7a70929dfbd5ef1e803c310b", "tree": "bfc29a218e052b6327fc3c105405d375f8a97a48", "parents": [ "ee4fcc1e808abe1933bd946138ac76b074b46df9" ], "author": { "name": "dhavalshah9131", "email": "dhavalshah9131@gmail.com", "time": "Tue Sep 22 22:21:14 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 22:21:14 2026 +0530" }, "message": "RANGER-5800 : UserGroup API require additional checks (#1245)\n\n* RANGER-5800 : UserGroup API require additional checks\n\n* RANGER-5800 : UserGroup API require additional checks UI changes\n\n---------\n\nCo-authored-by: Dhaval Shah \u003cdhavalshah9131@@gmail.com\u003e\nCo-authored-by: Dhaval Rajpara \u003cdhavalrajpara@apache.org\u003e" }, { "commit": "ee4fcc1e808abe1933bd946138ac76b074b46df9", "tree": "9c886b92f37aeb38da401d2156cc393f931c6d6d", "parents": [ "a8481cd86e1dff8bb26582ca4a5f4abf4c1d3256" ], "author": { "name": "dhavalshah9131", "email": "dhavalshah9131@gmail.com", "time": "Tue Sep 22 16:23:18 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 16:23:18 2026 +0530" }, "message": "RANGER-5787 : Refactoring the security zone API (#1229)\n\nCo-authored-by: Dhaval Shah \u003cdhavalshah9131@@gmail.com\u003e" }, { "commit": "a8481cd86e1dff8bb26582ca4a5f4abf4c1d3256", "tree": "d452a01590d3babea5caaf765bae8fbe1d710c88", "parents": [ "da5695f1fae2b007717786e2b406bffddbbdcbe0" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Mon Sep 21 15:14:31 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 15:14:31 2026 +0530" }, "message": "RANGER-5785: Upgrade google-cloud-kms (#1210)" }, { "commit": "da5695f1fae2b007717786e2b406bffddbbdcbe0", "tree": "6f46cbbdf37cc55e977d8993dc84d617d2215922", "parents": [ "f3efea682f31074860c5bb78916eb8e6fe694910" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Mon Sep 21 14:13:10 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 14:13:10 2026 +0530" }, "message": "RANGER-5799: Validate class assignability before instantiating configured service-def classes (#1237)" }, { "commit": "f3efea682f31074860c5bb78916eb8e6fe694910", "tree": "dcceb4902ec5ef422635808fb63a28fd27bfcd97", "parents": [ "d87bd9ee10d3cc802e1e705167a2d8383431d220" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Sun Sep 20 12:31:57 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Sep 20 12:31:57 2026 -0700" }, "message": "RANGER-5775: Fix docker compose warnings for unset RANGER_JVM_METASPACE variables (#1241)" }, { "commit": "d87bd9ee10d3cc802e1e705167a2d8383431d220", "tree": "9490453ded0454a722064861576410e0bd53d519", "parents": [ "32bd6de2f3862112339ec578b95f46795c3a57e1" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Sat Sep 19 13:28:25 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Sep 19 13:28:25 2026 -0700" }, "message": "RANGER-5801: Remove legacy v1 PublicAPIs and associated dead code (#1233)\n\nPublicAPIs (/service/public/api/repository, /service/public/api/policy) is\nsuperseded by PublicAPIsv2. Also remove code that becomes unused with it:\nXPolicyService, XRepositoryService, PublicAPIServiceBase, VXRepository,\nVXRepositoryList, VXPolicyList, VXPermObjList, the public-object conversion\nmethods in ServiceUtil, unused XPolicyService injections, and related tests." }, { "commit": "32bd6de2f3862112339ec578b95f46795c3a57e1", "tree": "281829934075cb19fb1e1ed4fee8b6d63a8de7bc", "parents": [ "2554f24a59ec5d88d5cdf8d5065471d4330cc953" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Sat Sep 19 13:04:02 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Sep 19 13:04:02 2026 -0700" }, "message": "RANGER-5355: Docs - add release notes, blog posts and project pages to the MkDocs site (#1240)\n\nPhase 1 of migrating Apache Ranger documentation to the MkDocs site.\n\n- Releases: release notes for 2.0.0 through 2.9.0 ported from cwiki, a\n summary page for 1.x and older releases, a releases index with dates,\n and a download and verification guide\n- Blog: port the five blog posts from docs/src/site/xdoc/blogs with\n their figures\n- Project: update the release process from the cwiki release guideline,\n expand the contributing guide, add community and security policy pages\n- mkdocs.yml: navigation for the new pages, Mermaid diagram support" }, { "commit": "2554f24a59ec5d88d5cdf8d5065471d4330cc953", "tree": "6baa2043e957cd499a268e3c985bba38bf33ed44", "parents": [ "1641c7d754130d99d4017f1cd6f4f2cc523a9f1e" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Sat Sep 19 13:03:32 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Sep 19 13:03:32 2026 -0700" }, "message": "RANGER-5554: Refactor Ranger Admin docker bootstrap to use runtime config only (#1236)\n\nRanger Admin container no longer runs setup.sh with install.properties: it is configured\nat runtime and prepares its own database, aligning it with Kubernetes-native deployment.\n\n- scripts/admin/configs/ranger-admin-site-\u003cdb\u003e.yaml is the complete Ranger Admin configuration\n for postgres, mysql and oracle; dba.py renders conf/ranger-admin-site.xml from it, while a\n ranger-admin-site.xml mounted in that directory is used as it is.\n- dba.py stores the DB password in the credential store, imports the core schema, applies pending\n DB/java patches and updates built-in user passwords from RANGER_*_PASSWORD, recording the same\n x_db_version_h entries as db_setup.py does.\n- create-ranger-services.py creates services once the readiness health check reports UP, queried\n as healthcheck user via trusted header authentication.\n- Dockerfile.ranger bakes all DB connectors into one image, selected at runtime by RANGER_DB_TYPE;\n unpacking in a build stage and hardlinking duplicate jars reduce the image from 1.34 GB to 0.76 GB.\n- Container logs show each bootstrap step, patch progress and the Ranger Admin log." }, { "commit": "1641c7d754130d99d4017f1cd6f4f2cc523a9f1e", "tree": "14b77f5e43ec58f6145ab255d695f11ea605c86f", "parents": [ "191548874d992f6db1c0c531a4d2426bc96c7628" ], "author": { "name": "eoinmcdonnell113", "email": "eoinmcdonnell113@gmail.com", "time": "Thu Sep 17 12:55:23 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Sep 17 22:25:23 2026 +0530" }, "message": "RANGER-5749: Limit concurrent Ranger Admin UI sessions per user (#1200)\n\n* RANGER-5749: Limit concurrent Ranger Admin UI sessions per user\n\nExpire the oldest UI session when ranger.session.limit.concurrency is exceeded so a new login succeeds. Default 0 means unlimited.\n\n* RANGER-5749: Address review comments on concurrent UI session limit\n\nKeep a single session listener, count only browser UI sessions, return 419 for AJAX kicks, and serialize find-and-expire per user.\n\n* RANGER-5749: Lowercase user-agent once in browser session check\n\nAvoid converting the user-agent on every prefix comparison.\n\n* RANGER-5749: Strengthen concurrent session lock test\n\n---------\n\nCo-authored-by: eoinmcdonnell113 \u003coldmcdonnell@gmail.com\u003e" }, { "commit": "191548874d992f6db1c0c531a4d2426bc96c7628", "tree": "ae6d20060446bfb145ea969d0e62924246a4a697", "parents": [ "ad5eddafe829f7bd378b0d45e391b2bded145ed7" ], "author": { "name": "Ramesh Mani", "email": "rmani@cloudera.com", "time": "Wed Sep 16 22:33:20 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 16 22:33:20 2026 -0700" }, "message": "RANGER-5750:Handle authorization of hbase:acl table in RangerAuthorizationCoprocessor in HBase Ranger plugin (#1201)\n\n* RANGER-5750:Handle authorization of hbase:acl table in RangerAuthorizationCoprocessor in HBase Ranger plugin\n\n* RANGER-5750:Handle authorization of hbase:acl table in RangerAuthorizationCoprocessor in HBase Ranger plugin - review comments addressed\n\n* RANGER-5750:Handle authorization of hbase:acl table in RangerAuthorizationCoprocessor in HBase Ranger plugin - review comments set#2 addressed\n\n---------\n\nCo-authored-by: Ramesh Mani \u003crmani@apache.org\u003e" }, { "commit": "ad5eddafe829f7bd378b0d45e391b2bded145ed7", "tree": "39fccfa6f635bfd78cfd648b34eeef6f061e9b20", "parents": [ "1f37dfca164ccfbb5bd314c5bdd877ba0c702b8d" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Mon Sep 14 11:41:40 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 14 11:41:40 2026 -0700" }, "message": "RANGER-5795: Support pluggable token supplier in Ranger REST client to obtain and refresh bearer tokens dynamically (#1227)" }, { "commit": "1f37dfca164ccfbb5bd314c5bdd877ba0c702b8d", "tree": "b84e7bdefb563ad10384ec875225f6e2e7cd73b6", "parents": [ "230efca5c2b8070109b914df972b86c429c2b23e" ], "author": { "name": "Vikas Kumar", "email": "talktovikasbit@gmail.com", "time": "Sun Sep 13 10:17:16 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Sep 13 10:17:16 2026 +0530" }, "message": "RANGER-5792: Align to best practices for User rest API (#1230)\n\n* RANGER-5792: Align to best practices for User rest API\n\n* Update RangerBizUtil.java\n\n* RANGER-5792: Align to best practices for User rest API-Fix for review comments\n\n---------\n\nCo-authored-by: Madhan Neethiraj \u003cmadhan@apache.org\u003e" }, { "commit": "230efca5c2b8070109b914df972b86c429c2b23e", "tree": "9e14e515d85606a0112c37fb182a03fea9c0374d", "parents": [ "2ede02ac8c59fedc9d3c650bd99802ae6362a979" ], "author": { "name": "Sanket-Shelar", "email": "121221985+Sanket-Shelar@users.noreply.github.com", "time": "Fri Sep 11 19:57:45 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 11 19:57:45 2026 +0530" }, "message": "Convert Tagsync into webapp and add metrics (#1107)\n\n* RANGER-4153: Ranger Tagsync - Convert to Web Application\n\n* RANGER-5706: Support for Tagsync as Webapp in Docker\n\n* RANGER-5707: Add/ Update metric details for Ranger TagSync" }, { "commit": "2ede02ac8c59fedc9d3c650bd99802ae6362a979", "tree": "f699dc8bb9d77b1e46c0d51436ac56acf85e10f9", "parents": [ "2ad565fe65aa2321ab2bf2c13d7c5efa99c75a8a" ], "author": { "name": "Mugdha Varadkar", "email": "fimugdha@users.noreply.github.com", "time": "Fri Sep 11 17:04:00 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 11 17:04:00 2026 +0530" }, "message": "RANGER-5698 : Disable Unix Authentication Service by default (#1171)\n\n* RANGER-5698 : Disable Unix Authentication Service by default\n\n* RANGER-5698 : Stop Curator leader latch only when Unix Auth listener exits" }, { "commit": "2ad565fe65aa2321ab2bf2c13d7c5efa99c75a8a", "tree": "d8d127f4d56dee43c2834b308a690e07c15d17d2", "parents": [ "b405486ed8b12ec27df3ea55558aef37d4b8e272" ], "author": { "name": "Ramachandran Krishnan", "email": "ramackri@gmail.com", "time": "Tue Sep 08 23:45:44 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 08 23:45:44 2026 +0530" }, "message": "RANGER-5720: DB patch 078 — x_audit_config table and audit server bootstrap (#1138)\n\n* RANGER-5720: DB patch 078 for audit partition plan global state\n\nAdd patch 078 and optimized schema updates for all DB backends: seed\nrangerauditserver with ROLE_ADMIN_AUDITOR and register RangerAuditPartitionPlan\nglobal state name for RANGER-5655 admin-managed partition plans.\n\n* RANGER-5720: Address Copilot review on patch 078 audit DB changes.\n\nDisable JDBC login for rangerauditserver (status\u003d0, empty password) for\nSPIFFE-only Admin access; fix Oracle app_data ALTER guard; use SQL Anywhere\nALTER COLUMN syntax.\n\n* RANGER-5720: Fix Oracle and SQL Server fresh-install schema for patch 078.\n\nOracle stores empty string as NULL on NOT NULL PASSWORD; use a space placeholder for rangerauditserver. Remove stale x_policy_ref_user_FK_upd_by CHECK from SQL Server optimized schema (patch 077 regression).\n\n* RANGER-5720: Address review on MySQL LONGTEXT and Oracle CLOB upgrade.\n\nUse LONGTEXT for app_data on MySQL so the partition plan can grow beyond\nTEXT limits. On Oracle upgrade, migrate VARCHAR2 app_data via add/copy/drop/\nrename instead of MODIFY to avoid ORA-22858.\n\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n\n* RANGER-5720: Add x_audit_config table for audit runtime settings.\n\nPer review feedback, store ingestor URL, per-service allowed users, and\ntopic partition count in x_audit_config (patch 078 + optimized schema on\nall DB backends). Seed defaults idempotently on fresh install and upgrade.\n\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n\n* RANGER-5720: Align x_audit_config with Option A config split.\n\nKeep ingestor URL and per-service allow-list in x_audit_config; partition\nrouting (topic, topicPartitionCount, plugins, buffer) stays in\nRangerAuditPartitionPlan JSON only. Drop topic-partitions from x_audit_config.\n\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n\n* Revert \"RANGER-5720: Align x_audit_config with Option A config split.\"\n\nThis reverts commit 3b337345bab9c9f5b29200fc417c467a848d5335.\n\n* RANGER-5720: Move audit config to x_audit_config table.\n\nStore ingestor URL, topic, partition plan JSON, and per-service allow-list\nin x_audit_config. Revert patch 078 changes to x_ranger_global_state\n(no app_data widen, no RangerAuditPartitionPlan row). Keep rangerauditserver\nmachine user setup in patch 078.\n\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n\n* RANGER-5720: Finalize patch 078 x_audit_config and add docker DB E2E tests.\n\nRename patch 078 to add-x_audit_config, store all audit runtime settings in\nx_audit_config (not x_ranger_global_state), fix Oracle upgrade SQL, drop a\nstale SQL Server FK CHECK from optimized schema, and add ranger-docker scripts\nto verify fresh install and 077→078 upgrade on all four docker DB backends.\n\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n\n* RANGER-5720: Align SQL Server patch UK constraint naming.\n\nUse x_audit_config$x_audit_config_UK_cfg_name in patch 078 to match\nRanger SQL Server convention and fresh-install schema.\n\n* RANGER-5720: Remove patch 078 docker DB test scripts.\n\nDrop db-test helpers from PR scope; patch 078 remains DB-only.\n\n---------\n\nCo-authored-by: ramk \u003cramk@cloudera.com\u003e\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e" }, { "commit": "b405486ed8b12ec27df3ea55558aef37d4b8e272", "tree": "8e5cd0af9cd104a5000c3e7516c5765a75411966", "parents": [ "2382a48178a186ebb13810fd0d3fa96e0a9807cc" ], "author": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Tue Sep 08 09:58:52 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 08 09:58:52 2026 -0700" }, "message": "RANGER-5784: add RangerAuthorizer.filterResources() API to return authorized resources (#1211)" }, { "commit": "2382a48178a186ebb13810fd0d3fa96e0a9807cc", "tree": "af62e3ca48e2456dd60b347395d15415603c0413", "parents": [ "37888b1bf1fa6d29f21460f5766c2df02c7d51e6" ], "author": { "name": "Dhaval Rajpara", "email": "dhavalrajpara1304@gmail.com", "time": "Tue Sep 08 17:46:32 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 08 17:46:32 2026 +0530" }, "message": "RANGER-3917 : Ranger UI should have the provision to display the audit metrics for each active plugin (#1209)" }, { "commit": "37888b1bf1fa6d29f21460f5766c2df02c7d51e6", "tree": "a3b4a95d056aecea32edb344802006c42ba92fc6", "parents": [ "5ed6267d2021937a092336baeafa83dbec10ff30" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Tue Sep 08 17:38:27 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 08 17:38:27 2026 +0530" }, "message": "RANGER-3905: Ranger metrics on audit throughput for each of the Ranger Service plugins (#1154)\n\n* RANGER-3905: Ranger metrics on audit throughput for each of the Ranger Service plugins\n\n* RANGER-3905: Ranger metrics on audit throughput for each of the Ranger Service plugins - fix review comment" }, { "commit": "5ed6267d2021937a092336baeafa83dbec10ff30", "tree": "cc1604533cd28237b576f03c87674e3bcba3d2bd", "parents": [ "6b77a1fa0cccade90bbe94e8fd099c3b9f29cf17" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Mon May 18 16:07:58 2026 +0530" }, "committer": { "name": "Kishor Gollapalliwar", "email": "kishor@apache.org", "time": "Tue Sep 08 15:32:30 2026 +0530" }, "message": "RANGER-5553: Incorrect Tags count reported in SummaryTOTALTAGS metric from /service/metrics/json API\n\nSigned-off-by: Kishor Gollapalliwar \u003ckishor@apache.org\u003e\n" }, { "commit": "6b77a1fa0cccade90bbe94e8fd099c3b9f29cf17", "tree": "b7d38bbcb8d896f69769138f0b75d435dbf4a9eb", "parents": [ "dc31370f9a7e33a25eb053acc7df1ef6bcc7f7f8" ], "author": { "name": "Ramachandran Krishnan", "email": "ramackri@gmail.com", "time": "Tue Sep 08 13:00:33 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 08 13:00:33 2026 +0530" }, "message": "RANGER-5789: Exclude third-party docs JS from Apache RAT check. (#1217)\n\nAdd RAT excludes for jquery.min.js and html5.js added in RANGER-5788.\nFixes build-17 failure: unapproved license on docs site resources.\n\nCo-authored-by: ramk \u003cramk@cloudera.com\u003e" }, { "commit": "dc31370f9a7e33a25eb053acc7df1ef6bcc7f7f8", "tree": "39904ee193580e9926e950d09cd35501d33078b9", "parents": [ "bd456e40fd4d4771a0687d9a6476b8a963c2d30a" ], "author": { "name": "Dineshkumar Yadav", "email": "59435896+dineshkumar-yadav@users.noreply.github.com", "time": "Tue Sep 08 12:29:01 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 08 12:29:01 2026 +0530" }, "message": "RANGER-5768 : Best practices: Align authorisation consistency across … (#1214)\n\n* RANGER-5768 : Best practices: Align authorisation consistency across GdsREST endpoints\n\n* RANGER-5768 : adding auditor check in GDS validator" }, { "commit": "bd456e40fd4d4771a0687d9a6476b8a963c2d30a", "tree": "3fc1f5ce2ce7002051efd920b31f1ae4650318ad", "parents": [ "ac36706b4ac5a82c7357137574a353cf7d5693b3" ], "author": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Mon Sep 07 22:39:33 2026 -0700" }, "committer": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Mon Sep 07 22:42:22 2026 -0700" }, "message": "RANGER-5788: blogs: fix incorrect rendering of blog contents\n" }, { "commit": "ac36706b4ac5a82c7357137574a353cf7d5693b3", "tree": "ce69e4543ecc2901968a543f2057bca196caeba5", "parents": [ "aa8d37f6a6640dadea26a3d19932bb81b98f8770" ], "author": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Mon Sep 07 22:02:28 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 07 22:02:28 2026 -0700" }, "message": "RANGER-5788: blogs: update to use styles from a common css (#1215)" }, { "commit": "aa8d37f6a6640dadea26a3d19932bb81b98f8770", "tree": "5849efc30664deb766f27dcd5e603cc3104e2f7b", "parents": [ "d9d2c44d23b669b68b7cee14b1a959fa498a2a51" ], "author": { "name": "Ramachandran Krishnan", "email": "ramackri@gmail.com", "time": "Mon Sep 07 14:18:11 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 07 14:18:11 2026 +0530" }, "message": "RANGER-5786: Skip kafka service user in dev_kafka audit filters. (#1212)\n\nAdd {\u0027users\u0027:[\u0027kafka\u0027],\u0027isAudited\u0027:false} to docker dev_kafka bootstrap\naudit filters so broker internal traffic is not audited.\n\nCo-authored-by: ramk \u003cramk@cloudera.com\u003e" }, { "commit": "d9d2c44d23b669b68b7cee14b1a959fa498a2a51", "tree": "74aedb5b72febb85836f2a54ce981b0af295dc2d", "parents": [ "364c4758ac2789b8c216ac430ba7284a92cdff61" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Thu Sep 03 17:35:27 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Sep 03 17:35:27 2026 -0700" }, "message": "RANGER-5767: Extend header based authn to support ROLEs in Ranger Admin (#1206)\n\nCo-authored-by: Madhan Neethiraj \u003cmadhan@apache.org\u003e" }, { "commit": "364c4758ac2789b8c216ac430ba7284a92cdff61", "tree": "3885ef0ce73ac230d0ef7a8bd24cc6df0d3f8497", "parents": [ "5053fa0ad08f8ed49859d311d4f58895a6daacf3" ], "author": { "name": "Vikas Kumar", "email": "talktovikasbit@gmail.com", "time": "Wed Sep 02 15:54:42 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 02 15:54:42 2026 +0530" }, "message": "RANGER-5414: Remove unused (dead code) RangerKMSStartUp and related classes (#1203)" }, { "commit": "5053fa0ad08f8ed49859d311d4f58895a6daacf3", "tree": "57c8f9e767df926f0f8cf113afc3af0348f91281", "parents": [ "0c62c8c61bca7a0ff17d9e154a8f1baf0621b383" ], "author": { "name": "hayden", "email": "sktpghks138@gmail.com", "time": "Tue Sep 01 10:16:13 2026 +0900" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 01 06:46:13 2026 +0530" }, "message": "RANGER-5466 Avoid hardcoded delta sync and unnecessary LDAP filter when delta sync is disabled (#827)\n\n* RANGER-5466 Avoid hardcoded delta sync and unnecessary LDAP filter when delta sync is disabled\n\n* RANGER-5466 Update ugsync tests for conditional delta sync filter\n\n* RANGER-5466 Simplify delta sync reset conditions per review" }, { "commit": "0c62c8c61bca7a0ff17d9e154a8f1baf0621b383", "tree": "39c5aa3dfbc346fdca7a1ce875da85aecb8d8411", "parents": [ "b222989f186a9318f82fd86654d772b6f3662026" ], "author": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Mon Aug 31 14:57:40 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 31 14:57:40 2026 -0700" }, "message": "RANGER-5775: update docker setup for low footprint of Ranger services, 256mb by default (#1198)" }, { "commit": "b222989f186a9318f82fd86654d772b6f3662026", "tree": "d448fef6cb9ab7dbefe1d3d56e0eb95202a67efb", "parents": [ "475dbbf436ad41877ca51f8470763380581b0a25" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Mon Aug 31 14:41:31 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 31 14:41:31 2026 -0700" }, "message": "RANGER-5766: Add support for SPIFFE Ids as usernames in Ranger (#1197)" }, { "commit": "475dbbf436ad41877ca51f8470763380581b0a25", "tree": "5afa4bc26e1defd26fe07195ff2262d5a3a0ff79", "parents": [ "ba5d6f0a2dbe9a7e1b5d82d2bc5203975ddd56fd" ], "author": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Mon Aug 31 08:48:03 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 31 08:48:03 2026 -0700" }, "message": "RANGER-5772: replace use of elasticsearch libraries with opensearch libraries in OpenSearchAuditDestination (#1195)" }, { "commit": "ba5d6f0a2dbe9a7e1b5d82d2bc5203975ddd56fd", "tree": "3a9605b05738c4c999735e7381809d73fff3aeaa", "parents": [ "0cbf3cf6a0c8fcd973f0054e332cb783aa046d84" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Mon Aug 31 17:57:42 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 31 17:57:42 2026 +0530" }, "message": "RANGER-5776: Prevent DB2HSM migration tool from overwriting existing keys in HSM (#1199)\n\n* RANGER-5776: Added the alias check for checking Master key presence in keystore\n\n* RANGER-5776: Added the missing unit tests for DB2HSMMKUtil and RangerSafenetKeySecure" }, { "commit": "0cbf3cf6a0c8fcd973f0054e332cb783aa046d84", "tree": "b577f5eb243d21c7af11d81fcd8fc6e615eed22a", "parents": [ "3e82ad6aa4d24599be18e4126077e65ca2bf9dea" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Mon Aug 31 14:20:07 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 31 14:20:07 2026 +0530" }, "message": "RANGER-5753: LDAP/Active Directory authentication does not validate local Ranger account status (#1174)\n\n* RANGER-5753: LDAP/Active Directory authentication does not validate local Ranger account status\n\n* RANGER-5753: addressed review comments\n\n* RANGER-5753: addressed review comments" }, { "commit": "3e82ad6aa4d24599be18e4126077e65ca2bf9dea", "tree": "0092929abc020e49e2e45c164c0fb487f3dd834c", "parents": [ "8c6add241973d4a62835be8b4f7f4ab3fd47046c" ], "author": { "name": "Gertjan Al", "email": "12525070+gertjanal@users.noreply.github.com", "time": "Fri Aug 28 18:29:55 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 28 09:29:55 2026 -0700" }, "message": "RANGER-5762: update Trino service-def to add access-type execute to resource schemafunction (#1181)" }, { "commit": "8c6add241973d4a62835be8b4f7f4ab3fd47046c", "tree": "90173bb950f649556fbb66daec53da4fcac2a3ab", "parents": [ "86871bd3d56ec128eba2fb1851573dcb0f773994" ], "author": { "name": "Dineshkumar Yadav", "email": "59435896+dineshkumar-yadav@users.noreply.github.com", "time": "Fri Aug 28 11:46:12 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 28 11:46:12 2026 +0530" }, "message": "RANGER-5748: Role resource type in Ozone repo is missing after upgrade (#1168)\n\n* RANGER-5748: Role resource type in Ozone repo is missing after upgrade\n\n* RANGER-5765: [Upgrade] PatchForOzoneServiceDefPolicyConditionUpdate_J10065 Not Working\n\n---------\n\nCo-authored-by: Rakesh Gupta \u003crakesh.gupta.dev264@gmail.com\u003e" }, { "commit": "86871bd3d56ec128eba2fb1851573dcb0f773994", "tree": "12021287b29f3cf6f7fff95b76c3bb575e7cf84a", "parents": [ "c14f4a0a29024745a3810b2e49d96d3132f6c80d" ], "author": { "name": "Dattatray Satam", "email": "dsatam99@gmail.com", "time": "Thu Aug 27 15:38:53 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 15:38:53 2026 +0530" }, "message": "RANGER-5757: Add unit test cases for ranger-tools: sizing module (#1179)" }, { "commit": "c14f4a0a29024745a3810b2e49d96d3132f6c80d", "tree": "a11690d8f4ff6883561f0a96abc3ebe00ea9c319", "parents": [ "724e3026ddc7e4d5821c1ac342b372dfe8d943f8" ], "author": { "name": "Dattatray Satam", "email": "38075104+dsatam99@users.noreply.github.com", "time": "Wed Aug 26 17:04:16 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 26 17:04:16 2026 +0530" }, "message": "RANGER-5574: Add unit test cases for ranger-tools: policyengine module (#1178)" }, { "commit": "724e3026ddc7e4d5821c1ac342b372dfe8d943f8", "tree": "0cab87e81ab137fc3df8118dd441b5e44db7a283", "parents": [ "2bb9e9c99392e785ee20db34c14c4f04dfe3ab3e" ], "author": { "name": "Dhaval Rajpara", "email": "dhavalrajpara1304@gmail.com", "time": "Tue Aug 25 22:04:58 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 22:04:58 2026 +0530" }, "message": "RANGER-5760 : [UI] Handle duplicate additional service configurations keys in service definition (#1182)" }, { "commit": "2bb9e9c99392e785ee20db34c14c4f04dfe3ab3e", "tree": "c9867a460de25f77f9ff2a0ab7bd9502905a2c7f", "parents": [ "79c7e42a19178f131e84fbd47787c0a558d86761" ], "author": { "name": "Dhaval Rajpara", "email": "dhavalrajpara1304@gmail.com", "time": "Tue Aug 25 22:04:34 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 22:04:34 2026 +0530" }, "message": "RANGER-5751 : service-config UI show duplicate entries for trino plugin (#1170)" }, { "commit": "79c7e42a19178f131e84fbd47787c0a558d86761", "tree": "a807770f1141ebd567e1bf81f4a732dd1aa907ba", "parents": [ "deddc84bf937d4da2ff6ca64e2363d8dfad9bf09" ], "author": { "name": "PradeeP AgrawaL", "email": "pradeep@apache.org", "time": "Tue Aug 25 13:12:56 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 13:12:56 2026 +0530" }, "message": "RANGER-5756: Make J10056 skip automatic reactivation of disabled external users (#1176)" }, { "commit": "deddc84bf937d4da2ff6ca64e2363d8dfad9bf09", "tree": "2e852a448aa39a9f2d176a386e9101deb28823ed", "parents": [ "2783d9a56bf87146ec21865bb7b8e644a07af573" ], "author": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Mon Aug 24 15:15:47 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 24 15:15:47 2026 -0700" }, "message": "RANGER-5761: blog: integrating applications with Apache Ranger (#1180)" }, { "commit": "2783d9a56bf87146ec21865bb7b8e644a07af573", "tree": "1d448ff27fda5c5e090153386d35e35540d7123c", "parents": [ "c227c010ed7334a431551580f18a4944e888cab1" ], "author": { "name": "Madhan Neethiraj", "email": "madhan@apache.org", "time": "Mon Aug 24 08:45:52 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 24 08:45:52 2026 -0700" }, "message": "RANGER-5755: add convenience constructers to authz-api model classes (#1175)" }, { "commit": "c227c010ed7334a431551580f18a4944e888cab1", "tree": "93eacfe7eed23338942c4bc5d1f51c8c0b38fd18", "parents": [ "8e7716cd3c36da395b8edc8470e328f736fbd984" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Mon Aug 24 11:16:54 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 24 11:16:54 2026 +0530" }, "message": "RANGER-5754: Fix timezone-sensitive test failures in MiscUtilTest (#1173)\n\n* RANGER-5754: Fixed incorrect DST offset in MiscUtil.getUTCDateForLocalDate\n\n* RANGER-5754: Fixed incorrect DST offset in StringUtil class of agents-common module" }, { "commit": "8e7716cd3c36da395b8edc8470e328f736fbd984", "tree": "21498f9f8b7f7b3b6b559fc8df22ab490f49bb93", "parents": [ "b68bd5371215283f6656190db3c1deec108546a1" ], "author": { "name": "Ramachandran Krishnan", "email": "ramackri@gmail.com", "time": "Sat Aug 22 16:39:19 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Aug 22 16:39:19 2026 +0530" }, "message": "RANGER-5723: Plugin SPIFFE outbound auth for audit-server destination (#1139)\n\n* RANGER-5723: Plugin SPIFFE outbound auth for audit-server destination\n\nAdd PluginHeaderAuthConfig, SpiffeIdentityResolver, and\nRangerRESTClient.setTrustedAuthHeaders(); wire SPIFFE headers into\nRangerAuditServerDestination when audit XML authn.header.enabled\u003dtrue.\n\n* RANGER-5723: Remove unused SPIFFE prefix-discovery helpers\n\nDrop configPrefixForServiceType, resolveEnabledConfigPrefix, and\nRANGER_CONFIG_PREFIX; audit destination passes an explicit config prefix to\nbuildSpiffeAuthHeaders.\n\n* RANGER-5723: Address PR review comments for SPIFFE outbound auth\n\nRemove redundant SPIFFE ID trim, add misconfiguration and REST client\nheader tests, and document that SPIFFE header auth is additive to authn.type.\n\n* RANGER-5723: Fix Checkstyle import order in TestRangerRESTClient\n\nAdd blank line between javax and java import groups required by\ndev-support/checkstyle.xml ImportOrder rule.\n\n* Update SpiffeIdentityResolver.java\n\n* Update SpiffeIdentityResolver.java\n\n* RANGER-5723: Fix checkstyle and address remaining PR review comments\n\nFix SpiffeIdentityResolver checkstyle violations, rename buildSpiffeAuthHeaders\nto buildTrustedAuthHeaders, and add generic authn.header.headers slot-based\nconfiguration with file:/env: value resolution.\n\n* RANGER-5723: Document trusted-header config modes and value specs\n\nExpand PluginHeaderAuthConfig Javadoc for legacy SPIFFE and generic slot\nconfiguration, including file:/env:/literal value spec examples.\n\n* RANGER-5723: Use header-name-as-property for trusted auth config\n\nAddress PR review: configure outbound trusted headers as\nauthn.header.{Header-Name}\u003dvalue specs (file:/env:/literal) instead\nof slot-based or legacy SPIFFE properties.\n\n* Update RangerAuditServerDestination.java\n\n* Update RangerAuditServerDestinationTest.java\n\n* Update TestRangerRESTClient.java\n\n* Update PluginHeaderAuthConfig.java\n\n* RANGER-5723: Drop outbound SPIFFE validation and SpiffeIdentityResolver\n\nAddress PR review: trusted outbound headers pass resolved values\nthrough without SPIFFE format checks; remove SpiffeIdentityResolver\nand obsolete tests for the old authn.spiffe.* resolution model.\n\n* Update PluginHeaderAuthConfig.java\n\n* Update PluginHeaderAuthConfig.java\n\n* RANGER-5723: Remove unnecessary property-name sorting in header auth config.\n\nHTTP header order does not affect auth; iterate props directly per review feedback.\n\n---------\n\nCo-authored-by: ramk \u003cramk@cloudera.com\u003e\nCo-authored-by: Madhan Neethiraj \u003cmadhan@apache.org\u003e" }, { "commit": "b68bd5371215283f6656190db3c1deec108546a1", "tree": "9ccd522198decbee8061d08b2ad84e422b158453", "parents": [ "c5e10dae576e20c3ad7d148331520dbadf02feef" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Sat Aug 22 10:17:52 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Aug 22 10:17:52 2026 +0530" }, "message": "RANGER-5742: Inconsistent handling of service config fields by name v… (#1152)\n\n* RANGER-5742: Inconsistent handling of service config fields by name vs. declared type\n\n* RANGER-5742: addressed review comment" }, { "commit": "c5e10dae576e20c3ad7d148331520dbadf02feef", "tree": "3ee343c2e515b0e232a74ff952dd58591c0a81f4", "parents": [ "d4a0759a4017daee93e91f05983e386448efa14b" ], "author": { "name": "Sanket-Shelar", "email": "121221985+Sanket-Shelar@users.noreply.github.com", "time": "Fri Aug 21 11:05:55 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 21 11:05:55 2026 +0530" }, "message": "RANGER-4458: Usersync Webapp, metrics and Docker changes (#1103)\n\n* RANGER-4458: Ranger Usersync - Convert to Web Application\n\n* RANGER-5701: Support for Usersync as WebApp in docker containers\n\n* RANGER-5702: Add/ Update metric details for Ranger UserSync" }, { "commit": "d4a0759a4017daee93e91f05983e386448efa14b", "tree": "ca0cfaea9417a9053a16fd4ee0553d9a69e5aea5", "parents": [ "e7aef11f89d873b803e830acc1871516ab26e26e" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Thu Aug 20 21:18:32 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 20 21:18:32 2026 -0700" }, "message": "RANGER-5680: Restructure audit services in docker compose and use OpenSearch as the default Index Store (#1167)" }, { "commit": "e7aef11f89d873b803e830acc1871516ab26e26e", "tree": "4613347dd054a26bb451fec303fd5207b19b5a5c", "parents": [ "1deedabc77ada41617c110eb8b0d15ef27388b29" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Thu Aug 20 11:14:51 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 20 11:14:51 2026 +0530" }, "message": "RANGER-5735: Improve authorization consistency across RoleREST endpoints (#1149)\n\n* RANGER-5735: Improve authorization consistency across RoleREST endpoints\n\n* RANGER-5735: added more tests" }, { "commit": "1deedabc77ada41617c110eb8b0d15ef27388b29", "tree": "7fd224ae135c8eb806883ff27f49744dda152a5a", "parents": [ "877a1cebcef829763a7935d70b3d61fbd8032f4d" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Thu Aug 20 11:13:42 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 20 11:13:42 2026 +0530" }, "message": "RANGER-5739: Recursive URL resource policy does not match resources expressed in the default-FileSystem URL form (scheme:///path) (#1150)" }, { "commit": "877a1cebcef829763a7935d70b3d61fbd8032f4d", "tree": "e8dd09c80962999c1d24db206732c7d7c9a0ae41", "parents": [ "2a3c370f345c1552859144972c91f164f7ee6e15" ], "author": { "name": "dhavalshah9131", "email": "dhavalshah9131@gmail.com", "time": "Wed Aug 19 18:29:58 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 19 18:29:58 2026 +0530" }, "message": "RANGER-5741 : Refactoring for Ranger KMS API (#1151)\n\nCo-authored-by: Dhaval Shah \u003cdhavalshah9131@@gmail.com\u003e" }, { "commit": "2a3c370f345c1552859144972c91f164f7ee6e15", "tree": "d09e092aff0336ff3bd84c77a7abc1685330afe2", "parents": [ "fe4227409efc16bc7fdf4341bec2b925b9a5917d" ], "author": { "name": "Mahesh Bandal", "email": "maheshbandal@apache.org", "time": "Wed Aug 19 12:27:58 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 19 12:27:58 2026 +0530" }, "message": "RANGER-5746: Improvement in Ranger policy engine (#1156)\n\n* RANGER-5746: Improvement in Ranger policy engine\n\nAlign resource-trie ignoreCase folding with matcher semantics" }, { "commit": "fe4227409efc16bc7fdf4341bec2b925b9a5917d", "tree": "88bcd6942dd0c1f4969fa72843454255f948609b", "parents": [ "c3dec8bdc1f577873ed397eb48ffc4ced404df28" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Tue Aug 18 20:10:04 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 18 20:10:04 2026 +0530" }, "message": "RANGER-5380: Unit tests for agents-audit module:core submodules [destination, model, test, utils] (#711)\n\n* RANGER-5380:UT for core submodules destination, model, test, utils\n\n# Conflicts:\n#\tagents-audit/core/src/test/java/org/apache/ranger/audit/utils/RangerJSONAuditWriterTest.java\n\n* RANGER-5380: Resolved test failures after latest rebase" }, { "commit": "c3dec8bdc1f577873ed397eb48ffc4ced404df28", "tree": "ee70a463c5501411f072640642bb231879d7cb5d", "parents": [ "4c601d6c3411ceb089dff6e08610b45cfbd5df21" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Tue Aug 18 18:06:17 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 18 18:06:17 2026 +0530" }, "message": "RANGER-5379: Unit tests for agents-audit module:package [org.apache.ranger.audit.provider] (#710)\n\n* RANGER-5379:UT for package org.apache.ranger.audit.provider\n\n* RANGER-5379: Replaced wrong import with correct one" }, { "commit": "4c601d6c3411ceb089dff6e08610b45cfbd5df21", "tree": "54d187eae7a4f9b31f0d6b009edeee233575e426", "parents": [ "130c7e9280e0864c0a533601e3a2a9cc250279e1" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Tue Aug 18 16:22:23 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 18 16:22:23 2026 +0530" }, "message": "RANGER-5378:Unit tests for agents-audit module:package [org.apache.ranger.audit.queue] (#709)\n\n* RANGER-5378:UT for org.apache.ranger.audit.queue package\n\n* RANGER-5378: Replaced wrong import with correct one" }, { "commit": "130c7e9280e0864c0a533601e3a2a9cc250279e1", "tree": "834bd5b60c4e3d0919e79bd28081f5ed39736019", "parents": [ "4e68f6e67aa8ad18900c763f86cf7130051998a4" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Tue Aug 18 14:04:59 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 18 14:04:59 2026 +0530" }, "message": "RANGER-5375: Unit tests for agents-audit module:submodules [dest-hdfc, orc-util] (#707)\n\n* RANGER-5375:UT for dest-hdfs and orc-util submodules\n\n* RANGER-5375: Modified test cases after rebase failures" }, { "commit": "4e68f6e67aa8ad18900c763f86cf7130051998a4", "tree": "c307d6816623d39b479ee59ce2ece74c89a9f140", "parents": [ "05145cd0ff47eedad660e94b085d9c68cc1cb348" ], "author": { "name": "Chinmay Hegde", "email": "hegdechinmay24@gmail.com", "time": "Tue Aug 18 12:08:58 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 18 12:08:58 2026 +0530" }, "message": "RANGER-5374:Unit tests for agents-audit module:submodules [dest-cloudwatch, dest-kafka, dest-log4j, dest-solr] (#706)\n\n* RANGER-5374:Unit tests for dest-cloudwatch,dest-kafka,dest-log4j,des-solr\n\n# Conflicts:\n#\tagents-audit/dest-cloudwatch/pom.xml\n#\tagents-audit/dest-kafka/pom.xml\n#\tagents-audit/dest-log4j/pom.xml\n\n* RANGER-5374: Resolved merge conflicts and rebased\n\n* RANGER-5374: Migrate Mockito API, fix assertions, add verification" }, { "commit": "05145cd0ff47eedad660e94b085d9c68cc1cb348", "tree": "a28eee24575768ccc93db04c27a36e4ad00f5f1a", "parents": [ "82fcc7827ab9f441ff84088b459b387ccc987275" ], "author": { "name": "Vyom Mani Tiwari", "email": "vyommani@gmail.com", "time": "Tue Aug 18 09:11:35 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 18 09:11:35 2026 +0530" }, "message": "RANGER-5747: Migrate NiFiClient and NiFiRegistryClient to use RangerDefaultHostnameVerifier (#1161)" }, { "commit": "82fcc7827ab9f441ff84088b459b387ccc987275", "tree": "1f500a0a7b476666b9353d3caa6c9cfde5f486b3", "parents": [ "ece62f616c52efe6a0d0e474fb68e84edc8b1b92" ], "author": { "name": "Abhishek Kumar", "email": "abhi@apache.org", "time": "Mon Aug 17 13:39:17 2026 -0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 17 13:39:17 2026 -0700" }, "message": "RANGER-5717: Disable SSO in docker, ensure readiness health check registers user in DB (#1158)" }, { "commit": "ece62f616c52efe6a0d0e474fb68e84edc8b1b92", "tree": "45dd3c7f5e271a4da60aab39d5f3c67065dc007b", "parents": [ "c872380a6fd0048e3e7ec7563a2a843acb43cdb1" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Sun Aug 16 00:37:52 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Aug 16 00:37:52 2026 +0530" }, "message": "RANGER-5348: Test Cases for agents-common Module: Package (plugin.model) (#761)" }, { "commit": "c872380a6fd0048e3e7ec7563a2a843acb43cdb1", "tree": "350ef3e9198f9ba65c422e8ae6e8a242d3157b7d", "parents": [ "8cf92131c8189e777f80573da40ca26ba6ce3057" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Sun Aug 16 00:36:43 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Aug 16 00:36:43 2026 +0530" }, "message": "RANGER-5350: Test Cases for agents-common Module: Packages (plugin.util, services.gds, services.tag) (#763)" }, { "commit": "8cf92131c8189e777f80573da40ca26ba6ce3057", "tree": "bc6f72ae9a9049d0361dcaf8181453f9191853e7", "parents": [ "5a30ede1404ef975fd6fba098815e9c0263f554c" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Sun Aug 16 00:34:10 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Aug 16 00:34:10 2026 +0530" }, "message": "RANGER-5349: Test Cases for agents-common Module: Packages (plugin.service, plugin.store) (#762)" }, { "commit": "5a30ede1404ef975fd6fba098815e9c0263f554c", "tree": "e454ff1bf6572ec373013dbbd4909ea83da512aa", "parents": [ "8dba0414abdff996f08fdd9a59bd3fb7958f4c87" ], "author": { "name": "Rakesh Gupta", "email": "rakesh.gupta.dev264@gmail.com", "time": "Sun Aug 16 00:32:56 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Aug 16 00:32:56 2026 +0530" }, "message": "RANGER-5347: Test Cases for agents-common Module: Packages (plugin.conditionevaluator, plugin.contextenricher, plugin.contextenricher.externalretrievers, plugin.geo) (#760)" }, { "commit": "8dba0414abdff996f08fdd9a59bd3fb7958f4c87", "tree": "27aa923722369ab086205ba23e7986ddac16ebb2", "parents": [ "2f1cb6a44a61447c237cd2ef6aba411462f60fb8" ], "author": { "name": "eoinmcdonnell113", "email": "eoinmcdonnell113@gmail.com", "time": "Fri Aug 14 05:33:08 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 14 15:03:08 2026 +0530" }, "message": "RANGER-5730: Restrict role import createNonExist flag to roles only (#1142)\n\nCo-authored-by: eoinmcdonnell113 \u003coldmcdonnell@gmail.com\u003e" }, { "commit": "2f1cb6a44a61447c237cd2ef6aba411462f60fb8", "tree": "a5b9a3de66ed66f1cd7d5f5f45be362473b4915b", "parents": [ "06c44cbeb99509f1e70fc2776b2b0abb251a9520" ], "author": { "name": "Ramachandran Krishnan", "email": "ramackri@gmail.com", "time": "Fri Aug 14 11:58:33 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 14 11:58:33 2026 +0530" }, "message": "RANGER-5744: Harden plugins-docker-build against Ozone KDC startup race (#1155)\n\nReduce flaky CI failures where ozone-datanode exits on Kerberos login\nbefore the Ranger KDC is fully ready in Docker Compose smoke tests.\n\nCo-authored-by: ramk \u003cramk@cloudera.com\u003e\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e" }, { "commit": "06c44cbeb99509f1e70fc2776b2b0abb251a9520", "tree": "d3c174b7399646b2eebac1fd5848640507f5439e", "parents": [ "30252c32edddda7b3cdfb7123c9c2bd7b092c593" ], "author": { "name": "Ramachandran Krishnan", "email": "ramackri@gmail.com", "time": "Fri Aug 14 11:57:16 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 14 11:57:16 2026 +0530" }, "message": "RANGER-5736: Fix MariaDB grant failure during Ranger Admin DB setup (#1144)\n\n* RANGER-5736: Fix MariaDB grant failure during Ranger Admin DB setup\n\nMariaDB returns error 1133 when dba_script.py grants privileges to a\nhost-specific user after wildcard grants with FLUSH PRIVILEGES. Detect\nMariaDB at runtime and adjust grant order, flush timing, and retry logic\nwithout changing behavior for Oracle MySQL or other DB flavors.\n\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n\n* RANGER-5736: Inline MariaDB grant fix, drop extracted helpers\n\nKeep grant/flush logic inline in grant_xa_db_user; retain only\ndetect_server_type() and user_hosts() as small MariaDB-specific helpers.\n\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n\n* RANGER-5736: Mirror MariaDB grant fix in KMS dba_script.py\n\nApply the same MysqlConf MariaDB detection, host order, flush timing,\nand grant retry logic to kms/scripts/dba_script.py for KMS Docker installs.\n\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n\n---------\n\nCo-authored-by: ramk \u003cramk@cloudera.com\u003e\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e" } ], "next": "30252c32edddda7b3cdfb7123c9c2bd7b092c593" }