Skip to content

1.12.14-release

Pre-release
Pre-release

Choose a tag to compare

@uditduhan23 uditduhan23 released this 28 Jul 10:15

🔒 Security

  • Patch MLflow authorization vulnerabilities #30046: Raised the mlflow-skinny requirement to a patched 3.13 or newer release to address CVE-2026-2635 and CVE-2026-8147.
  • Patch PyArrow IPC vulnerabilities #30146: Raised the PyArrow requirement to >=23.0.1,<26 to address CVE-2026-25087 and CVE-2024-52338.
  • Patch server dependency vulnerabilities bd31ff6 cd46662 #30391: Updated Jackson, Logback, Apache HttpComponents, Apache Calcite, PostgreSQL JDBC, Netty, and Jetty to patched versions.
  • Harden ingestion container images #30024 #30454: Removed unused operating-system packages, switched to slimmer runtime components where appropriate, and installed available Debian security updates.
  • Patch UI dependency vulnerabilities 4ce8b3a: Updated Axios, ws, js-yaml, brace-expansion, fast-uri, and related packages across both UI workspaces.

🔍 Search & Performance

  • Preserve the latest search preview ranking #30086: Search Settings now discards superseded preview responses, so an older, slower request cannot overwrite the ranking for the latest field-weight changes.
  • Fix Test Suite reindexing failures #30220: Test Suite keyset reads now bind their pagination parameters correctly, preventing reindexing from failing with a missing named-parameter error.

🛡️ Data Governance & Quality

  • Keep Test Suite results aligned with the latest selection #29561: The Data Quality Test Suites page now ignores stale responses when users switch tabs, pages, searches, or owner filters quickly.

⚙️ Apps & Ingestion

  • Fix Data Retention relationship cleanup #29981: Relationship cleanup now reads relationType from the relationship JSON, preventing partial-failure errors on PostgreSQL and MySQL.
  • Fix MySQL ingestion image builds #30264: Added pkg-config to the ingestion base images so mysqlclient can build successfully.

🧬 Lineage

  • Fix lineage PNG downloads and loading feedback #29362: PNG exports now use a browser-compatible download flow, display the loading indicator before rendering begins, and allow more time for large lineage graphs.