26.3.13.20001 Altinity Antalya

Changes compared to 26.3.10.20001 Altinity Antalya

Backward Incompatible Change

• Turn system.replicated_partition_exports table into a history table by removing the TTL. Closes #1281 (#1917 by @arthurpassos)

Performance Improvements

• Replace the export partition local manifests lock by a multiversion container. Yet another attempt to reduce lock contention observed while slow writes / commits to iceberg backed by ice-rest-catalog (#1912 by @arthurpassos)

Improvements

• Add caching for REST catalog vended credentials. Added a new setting vended_credentials_cache_ttl: maximum cache entry lifetime (in seconds) for vended credentials (REST catalogs only). Default 300; 0 disables caching. (#1923 by @zvonand)
• Profile events for Iceberg catalogs (#1868 by @ianton-ru)
• Applies to part and partition export the same auto cast ClickHouse INSERT ... SELECT does. Current rules in this PR: Schema column count must match Check is done by column position, not by name. Lossy casts are allowed if export_merge_tree_part_allow_lossy_cast=1 (#1779 by @arthurpassos)

Bug Fixes (user-visible misbehavior in an official stable release)

• Fix aggregation flow with remote initiator (#1872 by @ianton-ru)
• Fixed system.tables.partition_key and system.tables.sorting_key returning empty strings for Iceberg tables that have no data snapshot, including all empty tables and (more frequently) tables accessed via the Glue catalog. Also added a defensive guard against Iceberg V1 metadata files missing sort-orders. (#1874 by @il9ue)
• Fix cluster functions with hive partitioning (#1863 by @ianton-ru)
• Fix Iceberg read optimization returning NULL for every column when reading manifests without per-file column statistics (e.g. pyiceberg with default settings). Affects icebergLocal, icebergS3, icebergAzure, icebergHDFS, and all *Cluster variants (#1991 by @zvonand)

Build/Testing/Packaging Improvements

• Use gh artifacts with aws s3 fallback to lower usage costs. (#1837 by @MyroTk)
• Upgrade Ubuntu Docker image packages to apply available security fixes (#1972 by @CarlosFelipeOR via #1974)
• Update libssl in the Ubuntu Docker image to fix an existing CVE. (#1925 by @CarlosFelipeOR)

Build report

Packages

Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinityantalya as either .deb, .rpm, or .tgz

Docker images

Available for both AMD64 and Aarch64: altinity/clickhouse-server:26.3.13.20001.altinityantalya