Improvements
- Governance: Refactor asset certification storage to tag_usage table for improved data integrity and reliability #26448
- Platform: Enhance Search Index performance and reliability #26669
- Platform: Add SAML metadata XML upload support #26862
- AI: Enforce payload size limits for vector embedding bulk operations #26943
- Platform: Improve reindex process memory usage and assign lower thread priority to reduce application impact #27153
Fixes
- Security: Bump MCP Java SDK from 1.1.0 to 1.1.1 to address CVE-2026-34237 #26886
- Security: Upgrade netty-bom to 4.1.132.Final to address CVE-2026-33870 and CVE-2026-33871 #26938
- Security: Enforce bot-type check on generateToken endpoint to prevent unauthorized JWT token generation #27078
- Security: Fix Vite vulnerability by upgrading to v7.3.2 #27131
- Platform: Fix MSAL token renewal on Safari causing session loss due to ITP blocking #27214
- Platform: Ensure auth token is updated before retrying failed requests #27140
- Platform: Fix MCP OAuth callback servlet registration fallback #26770
- Platform: Fix runtime spacy model loading for non-root containers #26753
- Platform: Fix bulk sink serialization that broke Data Quality test case search indexing #27202
- Platform: Fix 413 Request Too Large errors via iterative bisection for large bulk indexing batches #27127
- Discovery: Fix tier and certification popovers accessible to view-only users on data asset header #26880
- Discovery: Fix Tier filter incorrectly combining getTags API with aggregation #26826
- Discovery: Improve export modal UX with inline errors and count loading state #27096
- Governance: Fix data-contract handling of non-Boolean semantics rule results and unsupported entity types #26850
- Governance: Fix certification tags leaking into tags field on LIST and missing appliedBy audit trail #26876
- Governance: Restore certification data in storeMany/updateMany before applying certification batch #26958
- Data Observability: Fix Data Quality permissions check for creating test cases #27069
- Ingestion: Fix Airflow REST Client connection issues #26895
- Ingestion: Fix Clickhouse LowCardinality DataType parsing #26858
- Ingestion: Fix Teradata column descriptions not being ingested #26695
- Ingestion: Fix Pinot DB double data type handling #26680
- Ingestion: Fix S3 ingestion failure caused by Pydantic validation error on BucketArn extra field #27180
- Ingestion: Improve Looker error handling with better warnings and credential protection in logs #27236
- Ingestion: Handle case sensitivity for table constraints during ingestion #27244