-
chore(main): release 1.5.0 (#3379)
发布于
2026-06-18 23:34:12 +00:00 | 123 次提交 在此版本后已推送到 main🤖 I have created a release beep boop
1.5.0
(2026-06-18)Features
- auth/google: Require audience or clientId for mcpEnabled
(#3450)
(59f7b6e) - Enable per source level flags for sql commenter
(#3465)
(ecce6b7) - mcp: Add URL parameter binding for HTTP transport
(#3112)
(0cc7b37) - scylladb: Adding support for ScyllaDB source and tool
(#3119)
(2dada83) - server: Add support for toolset filtering in prebuilt CLI flag
(#3245)
(7cc4f65) - skills: Generate skills offline without live source connections
(#3388)
(4c860b6) - skills: Tolerate missing env vars during offline skills-generate
(#3399)
(ea5d3e5) - source/cloud-storage: Restrict bucket and local path access
(#3454)
(2c3ca5d) - tools/bigquery: Add per tool query label in BigQuery jobs
(#1975)
(3f6a49f) - tools/dataplex: Add tools to support metadata enrichment workflow
(#3270)
(05289aa) - tools/mysql: Add show-query-stats and list-all-locks tools for
MySQL and Cloud SQL MySQL source
(#2954)
(a9693bd) - tools: Decouple tool initialization from sources
(#3355)
(32a24e3)
Bug Fixes
- auth/dataplex: Fix failing source with service account credentials
(#3369)
(ba4deef) - bigquery: Wire maximumBytesBilled into prebuilt config
(#3385)
(4abbf6e) - Bound MCP HTTP body size
(#3216)
(d4f4342) - config: Add doc/line context to parse errors
(#2957)
(4b097da) - Escape delimiter characters in applyEscape to prevent SQL injection
(#2811)
(932519a) - npm: Source binary version from cmd/version.txt
(#3417)
(6ffbdec) - prebuilt/alloydb-omni: Require password env var explicitly
(#3398)
(fcbe3e7) - server: Fail if MCP auth is enabled together with enable-api
(#3435)
(a6ff910) - server: Return errors instead of panicking in InitializeConfigs
(#3397)
(f48b01d) - source/cloudhealthcare: Validate pageURL parameter to prevent SSRF
(#3453)
(9abf47d) - source/dataplex,source/datalineage: Specify cloud-platform scope
for default credentials
(#3376)
(13e8c36) - source/http: Implement SSRF guard
(#3448)
(24d7d29) - tool/bigquery-execute-sql: Prevent dataset restriction bypass
(#3452)
(ca6d5e3) - tool/mysql-get-query-plan: Prevent query execution bypass and
statement injection
(#3235)
(7ed1e7b) - tool/spanner-sql,tool/spanner-execute-sql: Use read-only
annotations when readOnly is set
(#3338)
(8bde0ec)
This PR was generated with Release
Please. See
documentation.
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
Co-authored-by: Yuan Teoh 45984206+Yuan325@users.noreply.github.com下载附件
- auth/google: Require audience or clientId for mcpEnabled