v0.377.0

What's Changed

• Add rclone to the build Dockerfile, too by @llogiq in #7804
• [pipeline-manager] Grow a running pipeline's storage with PATCH by @xiasongh in #7656
• [SQL] Emit the type for each expression in the IR JSON by @mihaibudiu in #7805
• [connectors] Make the postgres runtime shutdown panic test robust on CI by @blp in #7808
• [pipeline-manager] Limit login JWKS refreshes by @swanandx in #7799
• [python] Make wait_for_completion() wait through a transient UNAVAILABLE status by @blp in #7798
• [dbsp] Exchange data between hosts over TLS with client certificates by @blp in #7713
• Bump dependencies flagged by the JFrog SBOM scan by @jyotshnayaparla-00 in #7823
• [web-console] Revoke the refresh token on sign-out by @Karakatiza666 in #7781
• [connectors] NATS: wait on the server for a library-recreated consumer. by @blp in #7824
• [python] Report a pipeline restart instead of an empty view in the aggtest harness by @bestouff in #7816
• [ci] Give the iceberg-rest catalog one sqlite connection. by @swanandx in #7834
• [python] Use storage sizes the Hyperdisk minimum allows in test_deployment_resources by @xiasongh in #7837
• Require confirmation for code from /create/ links, and restrict credentialed CORS by @Karakatiza666 in #7806
• Clarify the comments on retried transaction commits by @blp in #7822
• [connectors] Update iceberg-rust to 4dd8c946 by @swanandx in #7721
• [sqllib] Return an error instead of panicking when a nullable cast helper gets NULL. by @mihaibudiu in #7825
• [connectors] Judge Kafka test reads against the live high watermark by @bestouff in #7836
• [connectors] Retry DynamoDB writes through throttling and report health by @bestouff in #7736

Full Changelog: v0.376.0...v0.377.0