2.1.5: Data API builder for Azure Databases

Changes:

New Features:

• 7d4e27e Add Vector data type support in SQL (#3714) (#3677)
• 15fcfa5 161f4d9 Add JSON data type support in SQL (#3691) (#3720) (#3738) (#3751)
• 7ad4f49 Add groupby/aggregation support for PostgreSQL in GraphQL (#3741)
• 56f0fc2 Add read-only support for PostgreSQL array columns (#3402)
• eb3a58b Add support for DateTime filters in PostgreSQL (#3728)
• 57a195c Database policy support for PUT/PATCH operations in PostgreSQL (#3694)
• b2cf224 Allow multi-segment runtime REST/GraphQL paths (e.g. /api/v2) (#3684)
• a5a4879 Add a configurable Host/Origin allowlist for the MCP endpoint (#3736)
• 90ccf42 Add application-name telemetry (#3683)
• 2210289 Add a non-root Dockerfile variant for dual image publishing (#3520)
• 7f6ddd6 Enable the internal text embedding API (#3441)
• a0af7b1 Redis-backed caching of internal embeddings (#3532)
• 9b9511a Add the Microsoft.DataApiBuilder.Core NuGet package (#3550)

Improvements:

• 84c58b7 Upgrade to .NET 10 and Microsoft.Data.SqlClient 6.x (#3656)
• c6ecc3c aa5551f Upgrade Hot Chocolate to version 16.6.4 (#3480) (#3803)
• 8f3c217 Refuse to start in production when EasyAuth providers lack Azure environment signals (#3699)
• 7a0d7e3 Restrict the POST /configuration endpoint to loopback (#3669)
• 0c7d7c5 Gate MCP describe_entities schema visibility by caller role and permissions (#3737)
• 94e579f Align MCP create_record/update_record with the shared authorization helper (#3730)
• d80baa2 Add column-level authorization checks for GraphQL orderBy arguments (#3553)
• fba075a Add an MCP probe to the comprehensive health endpoint (#3685)
• 02a32a1 Add Hot-Reload for MCP tools (#3747)

Bug Fixes:

• dc1196d Bind database authorization policy claim values as typed OData parameters so claim contents cannot be reinterpreted as policy syntax (#3756, #3794)
• 7ae1372 Fix MySQL PUT/PATCH row-level update database policy handling (#3734)
• fe2a3a8 Fix entity description not surfaced in GraphQL (#3732)
• 032eff9 Fix column mapping in GroupBy and aggregation queries (#3750)
• 091a627 Fix missing WHERE clause in the DWSQL upsert UPDATE branch (#3698)
• 9391685 Fix GraphQL aggregation disabled when the runtime.graphql config section is absent (#3450)
• eb800ee Fix SESSION_CONTEXT bug (#3724)
• d105795 Add Linux & OSX ARM-64 Architecture Versions for Nuget Package (#3815)
• b86e343 Do not register SWA auth scheme when auth property is omitted (#3813)
• 29da187 Fix concurrent same-key PUT and PATCH upserts (#3787)
• 4a097e2 Bound GraphQL nested-filter recursion depth (#3776)
• 404c2e0 Return 200 empty payload for cached reads with empty result (#3822)
• 404c2e0 Resolve Custom JWT auth provider to the registered Bearer scheme (#3821)
• cd004db Fix multi config files with autoentities fails validation (#3723)
• 4665a8e Fix whitespace handling in MCP read_records select lists (#3786)