2.0.7-release

Changelog

OpenMetadata 2.0.7 is a maintenance release that improves connector reliability and search consistency. It also strengthens governance workflows and access controls. The release fixes user interface (UI) issues across activity feeds, bulk editing, lineage, and intake forms. It also includes security updates for server, ingestion, and frontend dependencies.

🔌 Connectors and Ingestion

This release includes the following connector and ingestion fixes:

• Google Cloud Pub/Sub test connections ignored service account impersonation #35831: Publisher, subscriber, and schema clients now use the configured impersonated identity instead of falling back to application default credentials.
• Microsoft SQL Server connection tests could time out on large schemas #35906: Table and view checks now use limited catalog probes instead of sorting the entire catalog.
• Unity Catalog lineage dropped upstream tables ingested under another service #35919: Cross-database lineage now searches configured services in order and reports unresolved upstream assets as warnings.
• Hex lineage appeared as manually created lineage #35946: Hex table-to-dashboard edges now record DashboardLineage as their source.
• dbt Cloud test results were missing when dbt test wasn't the final run step #35947: Ingestion now reads run_results.json from every run step and keeps the latest result for each test.
• Power BI reports were ingested without their pages #36062: Each report page is now ingested as a chart under its report without requiring an additional API request.
• Tableau ingestion could delete data models while the Metadata API was rebuilding #36067: Runs that reconcile data models now stop safely during a Tableau backfill instead of treating partial results as deleted data.
• Power BI BigQuery lineage failed when SQL contained comment markers inside strings #36232: Native-query extraction now preserves SQL literals, line breaks, and comments for accurate parsing.
• IOMETE and Teradata installations could resolve incompatible drivers #36243: Dependency ranges now select compatible Apache Arrow Database Connectivity (ADBC) versions by Python version and updated Teradata drivers.
• Auto-classification could fail while loading the English language model #36177: Ingestion now avoids the preshed release that causes tokenizer hash overflows.
• Doris operator images included unused MariaDB libraries with known vulnerabilities #36052: Doris now uses PyMySQL, allowing unused native libraries to be removed from operator images.

🛡️ Data Governance and Access Control

This release includes the following governance and access-control fixes:

• Domain-scoped policies allowed assets to be moved into unauthorized domains #35798: Domain changes now validate access to the destination domain and reject unauthorized moves with a clear 403 response.
• Users could assign domains to themselves without administrator approval #35846: Only administrators can now add or change a user's domains.
• Soft-deleting a user permanently removed their metadata tasks #35964: Soft deletion now preserves tasks so they remain available if the user is restored.
• The Updated by workflow rule saved display names and never matched entities #36056: The rule now displays a person's display name while saving the account name used by entity updates.
• Governance workflow history could become slow and grow without a retention limit #36059: Indexed lookups improve run-history reads, and a configurable retention period removes eligible completed runs while preserving active and latest runs.
• Bulk glossary term creation skipped per-term authorization #36071: Every term is now checked for limits and CREATE permission before any terms are written.
• Automation updates could overwrite their original execution inputs #36212: PUT and PATCH updates now preserve the saved request and workflow type while continuing to update status, response, and description.

🔍 Search and Discovery

This release includes the following search fixes:

• OpenSearch vector indexes could fail with already_closed_exception while the cluster appeared healthy #36208: Recreated indexes now store vectors in _source, avoiding closed derived-source readers during searches and embedding updates.
• Search results could retain stale metadata after entity changes #36255: Entity writes and recursive operations now refresh affected search documents. Renames and moves also refresh copied tags, labels, references, and team memberships.

🔗 MCP Server and Authentication

This release includes the following Model Context Protocol (MCP) server and authentication fixes:

• MCP claim mappings failed when a source claim name contained a colon #36213: OAuth claim mappings now parse colon-containing claim names without silently dropping them.
• MCP OAuth failed when OpenMetadata used a non-root BASE_PATH #36224: MCP routes and login forms now respect the configured context path. Base URLs and OpenID discovery use the same path.
• Requests outside Jersey could reuse cached identity state from an earlier request #36222: A request cleanup filter now clears entity and security contexts before and after MCP, WebSocket, and single sign-on requests.
• Impersonated requests could reach credential endpoints through alternate URL forms #36233: Restrictions now bind to the routed resource method and block impersonated credential creation or privilege grants.

⚙️ Platform and Operations

This release includes the following platform fixes:

• Profiler settings could be overwritten when the saved configuration failed to load #36091: The Save action now remains unavailable until the stored configuration loads successfully.
• Pipeline summary filters could expose unauthorized results or mishandle quoted values #36133: Summary endpoints now enforce view permissions and bind filter values instead of interpolating them into SQL.

🎛️ UI and Lineage

This release includes the following UI and lineage fixes:

• Activity feed items hid the column and field that a conversation referenced #35859: Feed cards now show a field path after the entity name, including nested columns.
• Map fields in agent forms were difficult to read and could submit untouched rows #35895: Map entries now appear as aligned key-value rows with accessible labels, and unused rows are removed on submission.
• Bulk edit interactions were unreliable #36116: The grid now supports selecting text and copying or pasting tags. Search also finds values consistently.
• Temporary table lineage nodes showed empty breadcrumbs and uneven spacing #36239: Temporary nodes now omit empty breadcrumbs and center their labels.
• Intake form table headings didn't align with their fields #36304: Header widths now apply to the correct layout elements so every heading lines up with its column.

🔒 Security

This release includes the following security updates:

• Frontend networking and Markdown dependencies contained known vulnerabilities #35873: qs and fast-uri move to patched versions. follow-redirects and markdown-it are also updated.
• Server dependencies contained authentication and configuration vulnerabilities #35885: Jetty moves to 12.1.14 and Logback to 1.5.38. Avatica moves to 1.29.0.
• UI build and runtime dependencies contained known vulnerabilities #35976, #36110, #36201: Vite, PostCSS Selector Parser, and Storybook receive patched versions. DOMPurify, Undici, and Serialize JavaScript are also updated.
• Ingestion Python packages required security and compatibility updates #36078, #36106, #36124: Ingestion images now use patched package tooling and Requests. Snowflake Connector for Python and related dependencies are also updated.
• The Amazon Web Services SDK included a vulnerable shaded JSON parser #36095: The software development kit (SDK) moves to a patched 2.57.x release that includes an updated Jackson Core.
• The bundled Node.js runtime contained Brotli and TLS vulnerabilities #36085: OpenMetadata now standardizes on Node.js 22.23.4 across builds and development environments.
• Server images trusted certificate authorities removed from current Java trust stores #36088, #36235: Image builds now remove the affected emSign and AAA Certificate Services roots.
• Context Center images included unused Apache Tika and optical character recognition components #36090: The unused packages and their vulnerable transitive dependencies are no longer installed.
• Server images included unused encryption and audio libraries with known vulnerabilities #36108, #36214: Image builds now remove ssl_client, alsa-lib, and unused desktop libraries while retaining required image and font support.
• Network, archive, and database drivers contained known vulnerabilities #36107, #36155, #36205: dnspython, Brotli, and MySQL Connector/J move to patched versions.
• Service connection details were readable by roles that couldn't edit the service #36266: Connection reads are now restricted to bots and principals with edit access.

Full Changelog: 2.0.6...2.0.7