v0.2.9

0.2.9 (2026-10-06)

Bug Fixes

• ci: rename the publish key to release, which is what hyperi-ci reads (#42) (df58666)
• clear the ruff S, ruff D and vulture findings on the package source (#52) (5db7eb3)
• give the hunt runner a ClickHouse user of its own (#54) (9f39032)
• keep ruff and ty out of .worktrees (#62) (3d6428e)
• mark @generated and @config as loader-descriptive, not parsed (#51) (3212d18)
• meta: add four Beats meta and hunt schemas (#58) (462dba8)
• meta: add the ECS 9.5.0 vocabulary as a pre-shipped meta schema (fccd354)
• meta: add the missing cloud fetcher metas (#56) (75b51ac)
• meta: add winlogbeat meta and hunt schemas (#48) (6bf2d86)
• meta: declare cardinality in the cloud metas (#57) (32b9a75)
• meta: fit four schemas to the rows DFE lands (#60) (6633db4), closes #55
• point the field maps at real ECS columns (#63) (c7428dc)
• raise the Python floor to 3.14 (#32) (74adcfd)
• render: fail on an index use case nothing can render (da528f0)
• say why dfe-schemas names its own coverage source (#53) (a06aa4a), closes #52
• schema: declare a column's cardinality once, not in two places (59ad28b)
• schemas: ship the filebeat hunt schema, and validate derived schemas at all (#47) (1de4218)
• schemas: ship the generated Elastic integration schemas (#55) (672ab11)
• stop documenting @captured as a loader directive (#50) (2460a9d)
• validate: parse a derived schema's base once per run (#59) (fa2d1cb)

What's Changed

• fix(render): fail on an index use case nothing can render by @catinspace-au in #40
• fix(meta): add the ECS 9.5.0 vocabulary schema by @catinspace-au in #41
• fix(schema): declare a column's cardinality once, not in two places by @catinspace-au in #43
• fix: raise the Python floor to 3.14 by @catinspace-au in #32
• fix(schemas): ship the filebeat hunt schema, and validate derived schemas at all by @catinspace-au in #47
• fix(meta): add winlogbeat meta and hunt schemas by @catinspace-au in #48
• fix: stop documenting @captured as a loader directive by @catinspace-au in #50
• fix: mark @generated and @config as loader-descriptive, not parsed by @catinspace-au in #51
• fix(ci): rename the publish key to release, which is what hyperi-ci reads by @catinspace-au in #42
• fix: clear the ruff S, ruff D and vulture findings on the package source by @catinspace-au in #52
• fix: say why dfe-schemas names its own coverage source by @catinspace-au in #53
• fix: give the hunt runner a ClickHouse user of its own by @catinspace-au in #54
• fix(schemas): ship the generated Elastic integration schemas by @catinspace-au in #55
• fix(meta): add the missing cloud fetcher metas by @catinspace-au in #56
• fix(meta): declare cardinality in the cloud metas by @catinspace-au in #57
• fix(meta): add four Beats meta and hunt schemas by @catinspace-au in #58
• fix(validate): parse a derived schema's base once per run by @catinspace-au in #59
• fix(meta): fit four schemas to the rows DFE lands by @catinspace-au in #60
• fix: keep ruff and ty out of .worktrees by @catinspace-au in #62
• fix: point the field maps at real ECS columns by @catinspace-au in #63

Full Changelog: v0.2.8...v0.2.9

v0.2.8

0.2.8 (2026-09-21)

Bug Fixes

• docs: add the README Context section and an architecture doc (#38) (f7e4d14), closes #32
• make: default PY to uv run python (6c79570), closes #25
• schema: name an index use case for the question, not the ClickHouse index (#39) (c7ced12)

What's Changed

• fix(make): default PY to uv run python by @catinspace-au in #36
• fix(docs): add the README Context section and an architecture doc by @catinspace-au in #38
• fix(schema): name an index use case for the question, not the ClickHouse index by @catinspace-au in #39

Full Changelog: v0.2.7...v0.2.8

v0.2.7

0.2.7 (2026-09-17)

Bug Fixes

• header: name the tokenizer ClickHouse actually has (8934979)
• tests: pass parametrize its argument names as a tuple (754fdb8)
• topics: the landing topic tiers where the deployment does (1dd39b4)

What's Changed

• fix(header): name the tokenizer ClickHouse actually has by @catinspace-au in #31
• fix(topics): the landing topic tiers where the deployment does by @catinspace-au in #34
• fix(tests): pass parametrize its argument names as a tuple by @catinspace-au in #35

Full Changelog: v0.2.6...v0.2.7

v0.2.6

What's Changed

• fix: one apply manifest, and the package is the only schema source of truth by @catinspace-au in #30

Full Changelog: v0.2.5...v0.2.6

v0.2.5

What's Changed

• fix(scripts): validate engine arguments on sources by @kazmosahebi in #28
• fix(sources): main uses timeseries header 1.0.1 by @kazmosahebi in #29

Full Changelog: v0.2.4...v0.2.5

v0.2.4

What's Changed

• fix(registries): schema allow-lists live here by @kazmosahebi in #27

Full Changelog: v0.2.3...v0.2.4

v0.2.3

What's Changed

• fix(meta): add the runZero meta schemas and the snapshot envelope by @catinspace-au in #26

Full Changelog: v0.2.2...v0.2.3

v0.2.2

What's Changed

• fix: the core landing table is main by @catinspace-au in #23
• fix(sources): ship the landing source definition by @kazmosahebi in #24

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• fix(tables): time-series tables take the deployment default retention by @catinspace-au in #22

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed

• feat: add a new additional schema for testing by @kazmosahebi in #2
• chore: add BUSL-1.1 licensing bundle by @kazmosahebi in #3
• Feat/add resource and field types by @kbrandt-hs in #4
• fix: JSON columns cannot be Nullable (CH 24.8, code 43) by @catinspace-au in #5
• fix: rename checkpoint customer_name to _org_id by @catinspace-au in #6
• fix(deps): put this repo under Renovate, which it never was by @catinspace-au in #7
• fix(ci): mint the dfe-engine checkout token from the org CI app by @catinspace-au in #10
• fix: render the deployed DDL from the YAML and gate CI on it by @catinspace-au in #11
• fix(ci): mint the App token from the client ID, not the app ID by @catinspace-au in #13
• fix: let a schema declare which common-header columns it drops by @catinspace-au in #12
• fix: render dfe_hunts.detection.sql and bring it under the drift gate by @catinspace-au in #16
• fix(ci): move onto current action majors by @catinspace-au in #15
• feat(meta): syslog, otel-logs and filebeat reference schemas with datagen scenarios by @catinspace-au in #17
• fix(meta): synthetic data terminology - rename the datagen key by @catinspace-au in #18
• fix: one home for schema artefacts -- drop the rendered DDL, bring the otel and engine-state tables in by @catinspace-au in #19
• fix(tables): partition-aligned 30-day retention by @catinspace-au in #20
• feat: pip-installable dfe-schemas package by @catinspace-au in #21

New Contributors

• @kazmosahebi made their first contribution in #2
• @kbrandt-hs made their first contribution in #4
• @catinspace-au made their first contribution in #5

Full Changelog: https://github.com/hyperi-io/dfe-schemas/commits/v0.2.0