2.0.8: Data API builder for Azure Databases

Changes:

New Features

• e128eb7 Introduce new authentication provider Unauthenticated as the default (#3075)
• 80a7f7d feat: dab init defaults runtime.rest.request-body-strict to false (#3166) [zure/data-api-builder#3165]
• 3199765 feat: Role inheritance for entity permissions + dab configure --show-effective-permissions (#3164) [zure/data-api-builder#3163]
• 26db37e Add default OTEL telemetry settings to dab init config generation (#3162) [zure/data-api-builder#3161]
• 883f4a1 [MCP] aggregate_records DML tool (#3199) [#3178, #3179]
• 0bc68fd Add dab auto-config-simulate CLI command (#3189)
• bf18263 Add currentRole to Health Summary Report at /health (#3158) [zure/data-api-builder#3157]
• a7c1be3 Add default dab-config.json to Docker image (#3168) [zure/data-api-builder#3160]
• 1dd0882 Add keyless REST PUT/PATCH support for entities with auto-generated primary keys (#3150)
• 4c26d60 Add CLI command dab auto-config (#3086) [#2964]
• e1e4359 Added per user connection pooling for OBO. (#3153)
• 99e30ba [OBO] Add CLI support for user-delegated authentication configuration (#3128) [#2898, #3151, zure/data-api-builder#3127]
• 2ec5fb6 Add On-Behalf-Of (OBO) user-delegated authentication for SQL (#3151) [#3122]
• b3db9a1 Update DAB to version 2.0 (#3120) [zure/data-api-builder#3118]
• 8881f37 Add centralized OpenTelemetry tracing for MCP tool execution (#3111)
• d28c38b Filter OpenAPI REST methods and fields based on role permissions (#2998) [#2787, #2783, #2486, #2896, zure/data-api-builder#2946]
• 5469784 REST Advanced Paths: Allow sub-directories in entity REST paths (#2999) [zure/data-api-builder#1085, #1566, #2373]
• c62092e Add HTTP Response Compression Support (#3003) [#2711, zure/data-api-builder#2636]
• 93a088f Create and execute query to return tables and interpolated names for Autoentities (#3082) [#2966, #2965]
• 3cf09f9 Implementation of Custom Tool in MCP (#3048) [#2877]
• de8f074 [MCP] Centralize JSON‑RPC error handling, standardize MCP response envelope, and add default anonymous role for stdio mode. (#3035)
• 499cd24 Support for .akv files to AKV variable replacement. (#2957)
• 9dad3d5 Add entity-level MCP configuration support (#2989) [#2948]
• e83ccd8 [MCP] Added support for --mcp-stdio flag to dab start (#2983)
• 08ca05f Added aspire sample (#2977)
• 2d12abc Adding Aspire! (#2797)

• ce95b57, ffd47a8 Addition of Nuget Core Package (#3474, #3475, #3550, #3617, #3620)

Improvements

• 46fa40e Set Unauthenticated as the authentication provider in the default Docker image config (#3248) [#3074, zure/data-api-builder#3074, zure/data-api-builder#3247]
• 94c60e2 Make parameter length based on underlying column length except for complex ops (#2627) [#2626]
• 25270b1 CodeQL Suppression for DefaultAzureCredential usage (#3233) [#3232]
• 2da7963 Inherit default values for EntityCacheOption.Enabled and EntityCacheOption.Level from RuntimeCacheOptions (#3155)
• c4c5943 Use DotNetCoreCLI@2 for Nuget Restore to avoid 120 second timeout, and add RuntimeIdentifiers="" (#3211)
• b2310d0 Update Validation for Autoentities (#3152) [#3131]
• a4fe457 Create Entities in-memory from Autoentities (#3129) [#3052]
• 29b0e6e Add level property and fix ttl-seconds validation for entity cache schema (#3097) [zure/data-api-builder#2981]
• 6d2e419 Update CODEOWNERS to include jerrynixon (#3139)
• 11da80a Bump dotnet-sdk from 8.0.417 to 8.0.418 (#3117)
• 6df62c0 Increase connection timeout in DW/MSSQL test pipelines (#3132)
• a971f79 Remove docker install task to fix pipeline failure (#3130)
• 2713b05 Add CLI parameter for data-source.health.name (#3059) [zure/data-api-builder#3058]
• b3efb1a Allow Entra authentication when connecting to Redis (#3047)
• 6f62845 Add Copilot repository instructions (#3090) [zure/data-api-builder#3089]
• b11ab1a Entity level check if MCP Tool is enabled (#3084) [#3017]
• f1a0170 Add server-level description field to MCP runtime configuration (#3016)
• 5b43e2b Added architecture diagram to the AI Foundry Integration doc (#3036)
• 725bf8c Added documentation for DAB MCP and AI Foundry integration setup. (#2971)
• 0e1b3c2 Changed the default auth provider from SWA to AppService (#2943)
• 9bbe252 Add schema and serialization support for autoentities wildcard enhancement (#2973)
• 3554118 Update variable replacement during deserialization to use replacement settings class and add AKV replacement logic. (#2882) [#2708, #2748, #2863]
• 7b31e9a Honoring incoming request role in determining allowed permissions for describe-entities MCP tool (#2956) [#2900]
• 3adf04f User provided dml-tools property serialization (#2952)
• 3b48c49 Expand ALL permissions in MCP describe_entities to explicit operations (#2951) [zure/data-api-builder#2935]
• 21dde31 Improve MCP tool descriptions for ChatGPT compatibility (#2937) [zure/data-api-builder#2936]
• d6d0f83 Updating the readme for clarity (pre-MCP) (#2918)

• 5c97b5c Add MCP notifications/message for log streaming to clients (#3484)
• 6925175 Add more descriptive message when OpenAPI role filter returns 404 (#3305)
• 6925175 Add int type to Json Data Type (#3327)
• 2a98cad Add missing CLI options for dab configure, add, and update (#3409)
• c8530b4 Change autoentities patterns.name default value (#3472)
• 3bc42d2 Implement autoentities property with hot-reload (#3297)
• 1cabd6d Implemented MCP Set Log Level (#3419)
• 1cabd6d Upgrade OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.13.0 to 1.15.3 (#3488)
• 0baa3ad Upgrade Hot Chocolate to version 16.0.0 (#3480)
• dfac448 Add DB metadata based parameter support for MCP tools (#3600, #3601, #3619)
• 2cbd73a Allow MCP agent to override log levels set by CLI and config file (#3544)

Bug Fixes

• 9563a20 Fix JSON schema: fix allow-credentials default, add missing descriptions, and relax required field constraints (#3236) [#2520, #2519, #2518, #2517, #2516]
• e14cca5 Fix duplicate entity groups in Swagger UI when entities have descriptions (#3099) [zure/data-api-builder#2968]
• fb4b2af Fix nested filter on self-referencing relationships (#3038) [zure/data-api-builder#3028]
• abcfb58 Fix LogLevel: CLI phase suppression and case-insensitive "Default" config key (#3203) [#3201]
• 041a722 Fix Location header to respect X-Forwarded-Proto and X-Forwarded-Host headers (#3095) [zure/data-api-builder#3032]
• 105fe18 Fix many-to-many relationship queries with custom schema linking objects (#3106) [#3071]
• 06e2251 Fix: URL-encoded special characters in $filter and $orderby break OData parsing (#3080) [zure/data-api-builder#3039]
• 77b44a0 Return default value when entity ttl is retrieved with entity cache enabled set to false (#3156)
• b5841fd fix(mcp): allow create_record for views and added tests to verify the same. (#3196) [#3194]
• fd416e2 Swap to MCP packages from our feed until EngThrive-MCP service connection is fixed (#3195) [#3154]
• 5be4abd Fix PostgreSQL health check connection string parsing (#3083) [zure/data-api-builder#2796]
• c017efe Fix: Restore EntityName after processing nested filter for CosmosDB (#3072) [#3070]
• b0ecbf6 [MCP] Prevent duplicating entities between custom tools and describe_entities (#3076) [#3043]
• 6e8ac9f Hot Reload test fix (#3018)
• 64f28dc [MCP] Fixed CLI bug in fields.primary-key updation when using update entity command. (#3077)
• 9025bb3 Fix by using custom bool parsing (#3054)
• ee2ce9e Bug fix for pagination nested entities resulting key not found error. (#3029) [#2374, #3026]
• 090e68e Fix serialization for StoredProcedureDefinition inheritance (#3045)
• 8d62beb Fix: Exclude stored procedures from health checks (#2997) [#2977, zure/data-api-builder#2982]
• 0b43e3b Partial fix for MCP test (#2925) [#2874]
• d98a4ea Suppress SM05137 in deserialization variable replacement settings (#3004)
• 7d76286 Fix the Serialization/Deserialization issue with $ prefix columns (#2944)
• dd72498 Refactor response for Read and Update MCP tools to use built in utility functions (#2984)
• 12e5ccf Skip PR validation for non-code paths (samples, docs, schemas, templates) (#2988) [#2977, zure/data-api-builder#2987]
• 7228e60 Bug fix for setting dml tools based on bool value as set in config (#2927) [#2942]
• 69b0b17 Fix for stored procedure empty cell bug (#2887)

• fc3fd97 Fix OData filter format in JWT string claims (#3510)
• 5c97b5c Fix LogLevel none to ensure no logs appear (#3318)
• 6925175 Add missing level-2 property to runtime.cache in dab.draft.schema.json (#3317)
• 6925175 Make CLI Log Labels consistent with ASP.NET Core (#3307)
• 6925175 Align behavior for multi-config files during deserialization and startup (#3321)
• 6925175 Fix invalid If-Match values to returnss proper 400 error (#3415)
• 6925175 Fix dab validate error messaging when logger is not available (#3311)
• 6925175 Omit redundant _NoAutoPK and _NoPK OpenAPI schemas when request-body-strict is false (#3325)
• 6925175 Update config validation logic for entities (#3306)
• 45f18e2 Fix CLI enum values in HelpText and error messages (#3444)
• d8e0aa4 Fix mismatch between Schema & CLI values and descriptions (#3417)
• 93edc20 Fix schema properties with missing or invalid default value (#3454)
• acd6bf7 Fix schema properties with missing or misleading descriptions (#3471)
• f6dd0df Fix failing MCP aggregate_records tool caused by groupby default value (#3294)
• 2811fba Fix for inconsistent MCP enabled check (#3303)
• 974d929 Fix structurally wrong dab init --graphql.multiple-create.enabled (#3407)
• 7f829a6 Remove .enabled suffix from individual DML tool configure option (#3408)
• c8530b4 Fix autoentities fail as it doesn't account for schema of tables (#3468)
• 3bc42d2 Fix logs for autoentities (#3299)
• 3bc42d2 Fix autoentities Schema/CLI mismatch (#3416)
• 3bc42d2 Fix autoentities error messages when using dab validate CLI command (#3416)
• 3bc42d2 Fix CLI overrides LogLevel value from config file (#3426)
• 1cabd6d Add missing MCP description property to Schema (#3405)
• 1cabd6d Changed default authentication provider to "Unauthenticated" in Schema (#3424)
• 1cabd6d Fix MCP description property to be set as instructions through MCP HTTP/SSE initialize (#3423)
• b54a75b Fix remove extraneous source.description schema property (#3552)
• e9da9b3 Filter disabled tools from tools/list discovery (#3613)
• 99ba6cc Fix default image config and improve logging for debuggability (#3597)
• 5e08f3c Fix MCP to allow users to choose their protocol version (#3622)
• 36a5fea Fix failing tests (#3637)
• ab7fa7e Apply null-omitting JSON serialization to MCP stdio result responses and validate wire output (#3616)
• 10f616e Fix propagate isError from CallToolResult to wire response (#3635)
• 2cbd73a Fix MCP logging to respect log-level set by config file (#3508)
• 2cbd73a Fix missing stored procedure paramters in describe_entities tool response (#3425)
• 5726ba7 Add column-level authorization check for GraphQL orderBy arguments (#3553)