Duckle v0.5.5

Duckle v0.5.5 ships a Salesforce write-back sink, deep PostgreSQL/SSL connection control, in-database SQL pushdown, geometry data-quality tools, and a batch of connector, autodetect, and reliability fixes reported by the community.

New features

• Salesforce sink (snk.salesforce) - write back into Salesforce (insert / update / upsert / delete) via the sObject Collections API, over merged-roots TLS. Great for migration and reverse-ETL into your CRM. (#164, #165)
• Salesforce OAuth 2.0 client-credentials - both snk.salesforce and src.salesforce can now mint a fresh short-lived access token each run from a connected app (client id / secret / login URL), so you stop pasting a token that expires in ~2h. Because source and sink each authenticate from their own credentials, org-to-org migration works out of the box. Bearer-token auth still works unchanged. (#166)
• PostgreSQL advanced & SSL options - full libpq-style connection control: sslmode, client/root certificates, connect timeout, options, and arbitrary passthrough parameters, exposed in both the connection editor and the node form. (#161)
• Execute in Source + guaranteed remote-SQL pushdown - a new in-database processing node runs set-based SQL directly inside Postgres/MySQL and materializes the result, instead of pulling every row through the engine. (#115)
• Geometry Validation & Repair DQ tools - qa.geomvalidate, qa.geomrepair, and qa.geomempty, plus a robust CAST-to-GEOMETRY that accepts WKT. (#158)
• Bulk Rename & Cast editors - a column-picker Rename editor and an all-columns Cast/Convert-Type editor, both of which keep the Schema tab in sync as you edit. (#159, #160)
• MySQL custom ATTACH, editable stage SQL, masked secrets - custom DB ATTACH queries for special-character passwords and read-only bypass, editable plan-stage SQL, masked secrets in run logs, and live run status. (#157)
• snk.rest raw / plain-text body - post non-JSON payloads such as Influx Line Protocol / QuestDB ILP. (#147)

Fixes

• #163 - a REST/JSON source feeding an ESRI Shapefile sink now writes the .prj file; the coordinate reference system was previously dropped on the multi-process execution path.
• #162 - src.webhook now shows a proper Listener form (Port, Max requests, Timeout, Path filter) in the web and desktop editors instead of the generic outbound-REST dialog.
• #148 - "Autodetect from Source" now returns the real source schema for every connector by probing the driver, and keeps incomplete ATTACH-relational sources honestly marked unsupported at inspect time.
• #141 - SQL Server: fixed autodetect crashes on older TDS servers and on sql_variant / CLR-UDT columns, read XML columns instead of returning NULL, and switched to all-row JSON type inference.
• #142 - AI transform: honor a custom Base/Custom URI for other providers and align the prompt/column property keys so the LLM node actually runs.
• #120, #150, #151, #152, #153, #154 - GUI + engine batch: the Filter Rows duplicate port, Shapefile .prj generation, native GEOMETRY column recognition, joins on multiple keys, a single merge/join node, and honoring the SQL name alias field.
• #155 - ignore ~/.duckdbrc on startup and harden DB ATTACH for special-character passwords.
• #156 - release reliability: regenerate SHA256SUMS even when a build leg fails, and skip the LanceDB sidecar on the arm64 Linux runner.

Performance

• The embedded sidecar binaries are now zstd-compressed, cutting the desktop download by roughly 45%.

Download

Desktop apps and headless runners for Windows, macOS (Apple Silicon), and Linux are attached below. Verify against SHA256SUMS.txt.