v3.5.8

What's Changed

• [release-3.5] Add pg_lake_iceberg.horizon_tls_ca_path by @sfc-gh-dachristensen in #780
• [release-3.5] Consume vended Azure SAS tokens (#679) by @sfc-gh-dachristensen in #789
• Backport #784: run attached workers with the caller's search_path (release-3.5) by @sfc-gh-mslot in #791
• [release-3.5] Do not let a catalog choose a vended secret's endpoint or account (#775, #787) by @sfc-gh-agedemenli in #790
• [release-3.5] pg_extension_base: pin the search_path of base workers (#792) by @sfc-gh-dachristensen in #798
• [release-3.5] Backport dbt planner fix and cache URL validation; qualify the tx data file temp table by @sfc-gh-dachristensen in #803
• [release-3.5] Do not crash on NULL map entries or on internal stub functions (#794) by @sfc-gh-dachristensen in #799
• [release-3.5] Check JSON types when reading Iceberg table metadata (#795) by @sfc-gh-dachristensen in #800
• [release-3.5] Do not let catalog responses delete local files or PANIC at commit (#797) by @sfc-gh-dachristensen in #802
• [release-3.5] pgduck_server: do not crash on NULL nested lists or long S3 URLs (#796) by @sfc-gh-dachristensen in #801
• [release-3.5] pgduck_server: fail the query instead of exiting on 1 GB result values by @sfc-gh-dachristensen in #805

Full Changelog: v3.5.7...v3.5.8