1.5.0 (2026-06-18)
Features
- auth/google: Require audience or clientId for mcpEnabled (#3450) (59f7b6e)
- Enable per source level flags for sql commenter (#3465) (ecce6b7)
- mcp: Add URL parameter binding for HTTP transport (#3112) (0cc7b37)
- scylladb: Adding support for ScyllaDB source and tool (#3119) (2dada83)
- server: Add support for toolset filtering in prebuilt CLI flag (#3245) (7cc4f65)
- skills: Generate skills offline without live source connections (#3388) (4c860b6)
- skills: Tolerate missing env vars during offline skills-generate (#3399) (ea5d3e5)
- source/cloud-storage: Restrict bucket and local path access (#3454) (2c3ca5d)
- tools/bigquery: Add per tool query label in BigQuery jobs (#1975) (3f6a49f)
- tools/dataplex: Add tools to support metadata enrichment workflow (#3270) (05289aa)
- tools/mysql: Add show-query-stats and list-all-locks tools for MySQL and Cloud SQL MySQL source (#2954) (a9693bd)
- tools: Decouple tool initialization from sources (#3355) (32a24e3)
Bug Fixes
- auth/dataplex: Fix failing source with service account credentials (#3369) (ba4deef)
- bigquery: Wire maximumBytesBilled into prebuilt config (#3385) (4abbf6e)
- Bound MCP HTTP body size (#3216) (d4f4342)
- config: Add doc/line context to parse errors (#2957) (4b097da)
- Escape delimiter characters in applyEscape to prevent SQL injection (#2811) (932519a)
- npm: Source binary version from cmd/version.txt (#3417) (6ffbdec)
- prebuilt/alloydb-omni: Require password env var explicitly (#3398) (fcbe3e7)
- server: Fail if MCP auth is enabled together with enable-api (#3435) (a6ff910)
- server: Return errors instead of panicking in InitializeConfigs (#3397) (f48b01d)
- source/cloudhealthcare: Validate pageURL parameter to prevent SSRF (#3453) (9abf47d)
- source/dataplex,source/datalineage: Specify cloud-platform scope for default credentials (#3376) (13e8c36)
- source/http: Implement SSRF guard (#3448) (24d7d29)
- tool/bigquery-execute-sql: Prevent dataset restriction bypass (#3452) (ca6d5e3)
- tool/mysql-get-query-plan: Prevent query execution bypass and statement injection (#3235) (7ed1e7b)
- tool/spanner-sql,tool/spanner-execute-sql: Use read-only annotations when readOnly is set (#3338) (8bde0ec)