Commit graph

62 commits

Author SHA1 Message Date
sonika-shah
6c30d82f4c
fix(security): pin libthrift, provided jsonschema2pojo, bump azure-kv/sjm/reactor-netty, exclude netty-epoll (#28010)
* fix(security): pin libthrift 0.23.0 and exclude Jackson 3.x from jsonschema2pojo-core

- Pin org.apache.thrift:libthrift to 0.23.0 in dependencyManagement.
  apache-jena-libs:4.10.0 transitively pulls libthrift:0.19.0 which is
  vulnerable to CVE-2026-43869 (fixed in 0.23.0).

- Exclude tools.jackson.core:jackson-core and jackson-databind from
  jsonschema2pojo-core in common/pom.xml. jsonschema2pojo-core 1.3.x
  switched its internal Jackson to 3.x; the existing exclusion only
  covered the legacy com.fasterxml.jackson.core groupId, so 3.0.2 jars
  were leaking into the runtime classpath despite our annotator code
  using Jackson 2.x exclusively. Removes exposure to:
    - GHSA-2m67-wjpj-xhg9
    - CVE-2026-29062
    - GHSA-72hv-8253-57qq (3.x line)

* chore(security): bump azure-security-keyvault-secrets and simple-java-mail to fix transitive CVEs

- com.azure:azure-security-keyvault-secrets 4.10.0 → 4.10.7
  4.10.7 declares azure-core-http-netty 1.16.4, which uses
  reactor-netty-http 1.2.16. Replaces the second source path of
  reactor-netty-http 1.0.48 in the OM standalone dist.
  Fixes CVE-2025-22227 (the azure-kv path).

- org.simplejavamail:simple-java-mail 8.12.2 → 8.12.6
  Hygiene bump (4 patch versions). Note: simple-java-mail 8.12.6's
  master pom still pins angus-mail to 2.0.3, so the actual angus-mail
  fix for CVE-2025-7962 still relies on OM's existing
  <angus-mail.version>2.0.4</angus-mail.version> dep-management entry,
  which already wins for OM standalone (verified: openmetadata-1.12.7
  dist already ships angus-mail-2.0.4.jar).

* fix(security): switch libthrift fix from version-pin to exclusion; expand reasoning comments

libthrift (CVE-2026-43869):
  Replace the dependencyManagement pin to 0.23.0 with an explicit <exclusion>
  on apache-jena-libs. OM's source tree has zero org.apache.thrift imports and
  no references to RDF Thrift binary serialization (RDF_THRIFT, ThriftConvert,
  RDFFormat.*THRIFT) — the only consumer of libthrift in our dep tree is Jena's
  optional RDF Thrift I/O code path, which OM never exercises.

  libthrift 0.23.0 was published 2026-05-08 and no Jena release yet ships it
  (Jena 6.0.0 and 5.6.0 still ship libthrift 0.22.0, also vulnerable). Pinning
  would force a Jena-uncertified libthrift onto code Jena tests with 0.22.0;
  excluding the unused JAR is cleaner and self-cleaning when Jena bumps.

  Lucene/Solr (also in this dep tree) already excludes libthrift for the same
  reason — confirmed via lucene-solr-grandparent pom.

Jackson 3.x exclusion: expanded the comment in common/pom.xml to record the
upstream state (jsonschema2pojo-core 1.3.3 still pins jackson3.version=3.0.2)
and the verification that build succeeds with the exclusion.

* fix(security): mark jsonschema2pojo-core as <optional> instead of maintaining per-dep exclusion list

Per Copilot review on PR #28010 (line 66 of common/pom.xml): jsonschema2pojo-core
is build-time only — the annotator classes that reference it (PasswordAnnotator,
MaskedAnnotator, etc.) are invoked exclusively by the jsonschema2pojo-maven-plugin
at code-gen time, never on the runtime classpath of any deployed service.

Switch from a growing list of <exclusion> entries (which only caught the deps
known at the time each entry was added) to <optional>true</optional>. This stops
jsonschema2pojo-core AND every transitive dep it pulls — current and future —
from propagating to downstream consumers' runtime classpath.

Effect on the GHSA-2m67-wjpj-xhg9 / CVE-2026-29062 / GHSA-72hv-8253-57qq fix:
the jackson-core-3.0.2 / jackson-databind-3.0.2 jars (groupId tools.jackson.core)
no longer leak into the dist via this path. Verified:

  $ mvn -pl openmetadata-service dependency:tree -Dincludes='tools.jackson.core:*,org.jsonschema2pojo:*'
  (empty)

  $ mvn -pl openmetadata-spec -am install -DskipTests
  BUILD SUCCESS  (annotator code-gen still works — jsonschema2pojo-maven-plugin
                  pulls jsonschema2pojo-core via its own <dependencies> block,
                  and adds common.jar there too via openmetadata-spec/pom.xml)

* fix(security): revert libthrift exclusion → pin to 0.23.0; Jena statically references TException

The exclusion broke RDF tests:
  RdfInferenceConfigurationTest, RdfPropertyMapperTest,
  SparqlBuilderNestedFieldsTest, SqlToSparqlTranslatorTest
fail with `Could not initialize class org.apache.jena.rdf.model.ModelFactory`
and `org/apache/thrift/TException` (NoClassDefFoundError).

Even though OM never calls RDF Thrift I/O directly, several Jena classes
(ModelFactory, PrefixMappingImpl, etc.) statically reference
org.apache.thrift.TException at class-init time. Removing libthrift fails
class loading on the very first use of any Jena Model.

The grep for `org.apache.thrift` in OM source missed this because the
references are in Jena's own bytecode, not OM's source.

Reverting the exclusion. Pinning libthrift to 0.23.0 in dependencyManagement
remains the only available fix:
  - No Jena release ships the fix (latest 6.0.0 still uses 0.22.0;
    libthrift 0.23.0 was published 2026-05-08).
  - Exclusion breaks the build (above).
  - Pinning forces the fixed version onto Jena's classpath; libthrift
    maintains backwards-compatible binary protocol semantics, so Jena's
    runtime usage continues to work. CI will validate.

In-pom comment expanded to record this discovery so the trade-off doesn't
get re-litigated next round.

* chore: shorten security comments in poms

* fix(security): exclude netty-transport-native-epoll from azure-core-http-netty

GHSA-rwm7-x88c-3g2p / CVE-2026-42577 (AWS Inspector reports HIGH). The bug is
in netty 4.2.x epoll; we ship 4.1.x. The advisory's machine-readable
vulnerable_version_range is < 4.2.13.Final (overly broad), which causes
scanners to flag 4.1.x even though the buggy code path was never in 4.1.

Bumping our netty to 4.2.13.Final is blocked by Azure SDK / gRPC / AWS SDK /
reactor-netty all targeting 4.1.x. Instead, exclude the Linux native binding
JAR (the only thing in our tree that is named io.netty:netty-transport-native-epoll)
so the flagged artifact stops shipping in the dist. Netty's standard pattern is
to call Epoll.isAvailable() and fall back to NioEventLoopGroup when the native
binding is absent — the exact same code path already used on macOS/Windows
deployments. netty-transport-classes-epoll (the Java classes, required by
reactor-netty/lettuce/AWS-netty-nio-client bytecode references) stays.

Verified:
  mvn -pl openmetadata-service -am dependency:tree \
      -Dincludes='io.netty:netty-transport-native-epoll'
  -> empty (was: 4.1.133.Final-linux-x86_64)

* fix(security): align reactor-netty-http dep-mgmt pin to 1.2.16

Per Copilot review on PR #28010 (line 19): the bump of azure-kv to 4.10.7 was
described as bringing reactor-netty-http 1.2.16, but the existing dep-mgmt pin
to 1.2.14 was overriding the transitive (mvn dependency:tree confirmed 1.2.14
was the actual resolved version).

Bump the pin 1.2.14 → 1.2.16 to match what azure-core-http-netty 1.16.4 ships
transitively. Both are above the CVE-2025-22227 fix line (≥ 1.2.8), so this is
a pin-alignment cleanup, not a security delta.

* fix(security): switch jsonschema2pojo-core from <optional> to <scope>provided</scope>

Semantically more correct for a build-time-only dep. The annotator classes
(PasswordAnnotator, MaskedAnnotator, etc.) are invoked only by
jsonschema2pojo-maven-plugin at code-gen time in its own classloader; the
runtime classpath of any deployed service never needs jsonschema2pojo-core.

<scope>provided</scope> says exactly that:
  - on compile + test classpath (so annotators compile)
  - excluded from runtime / dist packaging by default
  - not propagated to downstream consumers

Same scanner outcome as <optional>true</optional> — Jackson 3.x JARs still
don't ship in the dist — but cleaner expression of intent. CVE coverage
unchanged: GHSA-2m67-wjpj-xhg9, CVE-2026-29062, GHSA-72hv-8253-57qq.

Verified:
  mvn -pl openmetadata-spec -am install -DskipTests → BUILD SUCCESS
  mvn -pl openmetadata-service dependency:tree -Dincludes='tools.jackson.core:*,org.jsonschema2pojo:*' → empty

* fix(security): switch netty-epoll exclusion from dep-mgmt to per-direct-dep

Per Copilot review on PR #28010: the previous parent-pom dep-management entry
for azure-core-http-netty with <exclusion> on netty-transport-native-epoll
did work (verified via mvn dependency:tree — exclusion DOES propagate to
transitive resolution in dep-mgmt), but Copilot raised a concern that pinning
azure-core-http-netty to 1.16.4 would block future Azure SDK bumps if a newer
SDK requires a higher azure-core-http-netty.

Same refactor as already applied to ai-platform PR #669. Remove the parent
dep-mgmt entry; apply per-direct-dep <exclusions> on the 3 azure-* deps that
transitively bring azure-core-http-netty in openmetadata-service:
  - azure-security-keyvault-secrets
  - azure-identity
  - azure-storage-blob

Exclusion now travels with whatever azure-core-http-netty version each SDK
chooses; SDK bumps are no longer blocked by a hardcoded version.

Verified: mvn -pl openmetadata-service dependency:tree -Dincludes='io.netty:netty-transport-native-epoll'
returns empty.

* fix(security): extend netty-epoll exclusion to azure-identity-extensions

Per gitar-bot review on PR #28010: add the netty-transport-native-epoll
<exclusion> to azure-identity-extensions for consistency with the 3 other
azure-* direct deps in openmetadata-service/pom.xml that already have it
(azure-security-keyvault-secrets, azure-identity, azure-storage-blob).

Defensive: today's resolution is already clean because Maven's
nearest-definition rule picks the directly-declared azure-identity:1.15.2
(with our exclusion) over the transitive azure-identity:1.7.1 brought by
azure-identity-extensions:1.0.0. Adding the exclusion here protects against
a future refactor that removes the direct azure-identity declaration.

Verified: mvn -pl openmetadata-service dependency:tree -Dincludes='io.netty:netty-transport-native-epoll'
still returns empty.

---------

Co-authored-by: Shailesh Parmar <shailesh.parmar.webdev@gmail.com>
2026-05-11 14:08:26 +05:30
Karan Hotchandani
c8501f2f4f
preparing 1.12 branch (#24870) 2025-12-17 18:36:03 +05:30
Mohit Yadav
c0d7a574d7
chore(release): Prepare Branch for 1.10.0-SNAPSHOT (#23034)
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2025-08-21 21:43:01 +05:30
Mohit Yadav
30b5634522
Fix Vulnerabilities (#22813) 2025-08-07 13:59:24 +05:30
Mohit Yadav
e40210f137
Fix Vulnerabilities (#22805) 2025-08-07 10:59:29 +05:30
Mohit Yadav
b92e9d0e06
chore(release): Prepare Branch for 1.9.0-SNAPSHOT (#22742)
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2025-08-04 20:00:25 +05:30
sonika-shah
5a124873e1
add name tag in pom.xml of all modules (#22104) 2025-07-02 22:48:11 +05:30
Ashish Gupta
73aaa34b75
update the snapshot to 1.8.0 (#20925) 2025-04-24 10:46:36 +05:30
Akash Jain
0f6d0523d8
feat: Bump Versions to 1.7.0-SNAPSHOT on Main Branch (#20847)
* feat: Bump Versions to 1.7.0-SNAPSHOT on Main Branch

* fix(script): Add a condition for "-SNAPSHOT" is version update script
2025-04-16 15:21:01 +05:30
Suresh Srinivas
5eebb89ac6
Upgrade dependencies for release 1.6 (#17676) 2024-09-02 15:18:08 -07:00
Mohit Yadav
e4073c7824
Bump Openmetadata Snapshot version (#17621) 2024-08-29 01:51:20 +05:30
Chirag Madlani
6c1a12a95f
chore: Update main branch for 1.5.0 Release (#16860) 2024-07-01 16:46:16 +05:30
Sriharsha Chintalapani
5571851e53
Pluggable API/Features Limits (#16782)
* Limits

* Limits

* - Mismatched Types

* Update Limits config response

* Update Limits feature response

* Limits

* Limits

* - Mismatched Types

* Update Limits config response

* Update Limits feature response

* Limits: add entity resource enforcer

* Limits: fix rebase

* update limits enforcement

* Add OperationContext to limits

* chore: Bump versions to `1.4.0`

* chore: Bump Ingestion Versions to `1.4.0.1` for Release

* chore: Bump Ingestion Versions to `1.4.0.1`  in Dockerfiles for Release

* Remove Retry From Abstract Event Consumer (#16405)

(cherry picked from commit f8ed079731)

* Fix Migrations: Add postgres migrations (#16403)

(cherry picked from commit 9416a7ac5f)

* Add Null Check for isAdmin (#16407)

* Remove Retry From Abstract Event Consumer

* - Add Check for null Or Empty in isAdmin

* - Fix Test

(cherry picked from commit fe2db2d63c)

* Fix OpenLineage ingestor (#16416)

* Fix OpenLineage ingestor

* py format

---------

Co-authored-by: ulixius9 <mayursingal9@gmail.com>

* Minor: added whats new for 1.4.1 (#16420)

* Minor: added whats new for 1.4.1

* added note in to whats new

* Fix SSL issue (#16412)

* chore: Bump Versions for `1.4.1` Release

* chore(release): Prepare Branch for `1.4.2`

* [MINOR] partition migration issue with redshift servics (#16452)

* fix: partition migration issue with redshift servics

* chore: typo in sql comment

(cherry picked from commit 451d73593e)

* minor(ui): update what's new for 1.4.2 (#16457)

(cherry picked from commit d55981adfd)

* fix:  ingestion for dbt > 1.8.0 resource_type is not an enum (#16415)

* fix: resource_type is not an enum

* feat: add log to display finis

* improve readability

* use getattr to be compatible

* format

* Add Cache Query Param for Limits

* Only Parse view  query (#16470)

* add limit check during user creation via PUT

* add limit check during user creation via PUT

* MINOR: Kafka Setup SSL Arg Fix (#16469)

* Fix#16404 - Show Node level lineage by default (#16445)

* default to node layer

* update cypress

* code cleanup

* fix cypress

(cherry picked from commit f0cda8464f)

* Invalidate count of data asset after hard delete. add limit exception to ingestion client

* - Remove Change Description from Lineage (#16488)

(cherry picked from commit 9e5c5529a8)

* - Non Indexable fields should be remvoed at the end (#16499)

(cherry picked from commit f0b0f7a942)

* fix announcement not redirect from landing page (#16506)

* fix announcement not redirect from landing page

* minor changes

* change in cypress test

(cherry picked from commit ee7cddd169)

* Fix Schema Field Null Issue (#16510)

(cherry picked from commit 022772943f)

* feat(ui): limits integration with application (#16206)

* feat(ui): limits integration with application

* support pipelineSchedules via limit api

* enforce limit to all the modules

* update banner styling

* update

* support disable option for ManageButton

* limit version

* fix spotlight

* update tests

* Add name and version history to resource limits
Refactor the getEntityIcon function and add new icon mappings

* limit version

* hide access token tab

* fix version for all the entity

* fix tests

* fix DQ tests

* Add fallback for the icon

* Revert the fallback icon changes

* Apply the limit to the add ingestion button in the service details page

* Fix the data quality tab add test button not working

* fix banner styling

* minor fix

* Fix ingestion component unit test

* Add InlineAlert component

* update entityNameLabels mapping object

* Fix the incorrect link in LimitBanner

* update pricing page url

* Create the GlobalSettingsClassBase

* Update URLs for pricing page and upgrade options

* fix global settings uncaught error

* add parameters to the resource limit API

* implement inline alerts for service and alert creation form

* update PRIVILEGES for docker

* fix layout issues

* fix tests

---------

Co-authored-by: Aniket Katkar <aniketkatkar97@gmail.com>

* Add token limitations

* Add token limitations

* Add appType as part of schema in ingestion pipeline (#16519)

* #16489: fix the redirect issue to new tab for tags and glossary (#16512)

* fix the redirect issue to new tab for tags and glossary

* fix the redirect on cancel icon and unit test issue

* changes as per comments

(cherry picked from commit 8d312f0853)

* Fix  #16229 - Tag and Service filters for test cases (#16484)

* fix: added test case support for tags (inherit from table/column)]"

* feat: add tag and service filter for test cases

* feat: add tier query param

* fix: tests

(cherry picked from commit 6b00dde902)

* fix: None type is not iterable (#16496)

(cherry picked from commit 656da03b14)

* minor(ui): refresh token for OIDC SSO (#16483)

* minor(ui): refresh token for OIDC SSO

* remove frame window timeout issue

* increase iFrame timeout for oidc

(cherry picked from commit 1a6c4c9720)

* feat(ui): support tag & tier filter for test case (#16502)

* feat(ui): support tag & tier filter for test case

* fix tag filter

* allow single select for tier

* added service name filter

* update cypress for tags, tier & service

* add specific add for filters

* fix tier api call

(cherry picked from commit 5b71d79e8a)

* minor: sanitize activity feed editor content (#16533)

* Add appType as part of schema in ingestion pipeline (#16519)

* Fixed quicksight conn (#16537)

* fix: saml auth for new user not created (#16543)

* fix: saml auth for new user not created

* doc: add comment

* Fix#16491 -  fix lineage edge description update (#16538)

* fix lineage edge description update

* fix tests

(cherry picked from commit dff0aa8dbe)

* CYPRESS: fix announcement cypress (#16536)

* fix announcement cypress

* changes as per comments

* fix the cypress failure

(cherry picked from commit fcb87b5866)

* [MINOR] Fix Test Failure for EventRegistration

* [MINOR] Fix Test Failure for EventRegistration

* [MINOR] Fix Test Failure for EventRegistration

[MINOR] Fix Test Failure for EventRegistration

* Fix Event Handlers registration Issue (#16544)

* Fix Event Handlers Issue

* Review Comments

(cherry picked from commit d374e48b79)

* [MINOR] Fix Test Failure for EventRegistration

(cherry picked from commit 4563ad4fd1)

* Fix Topic Schema missing messageSchema (#16545)

(cherry picked from commit b612dd90c0)

* Add limits exception cache in rest client

* MINOR: Ignore Cluster Information from columns (#16495)

* minor: improve the block editor initial content history (#16540)

* Minor: fixed data quality page type issue (#16556)

* #16521: fix issue in userProfilePage for roles. teams and displayName (#16527)

* fix update on roles and backlink them in user profile page

* fix teams, displayName and profile pic issue

* sonar fix

* fix cypress issue

* minor changes

(cherry picked from commit 98945cb2db)

* Empty quick filters (#16402)

* initial commit for empty quick filters

* update progress

* fix field title

* cleanup

* add tests

* unit tests

* fix encoding of search query

* add cypress tests

* add cypress

* fix flaky cypress

* fix review comments

* revert tooltip changes

* fix tests

* fix tests

(cherry picked from commit 5930cd7a7a)

* Fix #16278 : Search to display Draft glossaryTerms on Explore page (#16462)

* Fix #16278 : Search to display Draft glossaryTerms as well on Explore page

* add term status quick filter

* change aggregation key for status field

* change aggregation key for status field

* add lowercase_normalizer in status filed for aggregate api

* add cypress tests

* fix cypress

---------

Co-authored-by: karanh37 <karanh37@gmail.com>
Co-authored-by: Karan Hotchandani <33024356+karanh37@users.noreply.github.com>
(cherry picked from commit ae5e9d61cc)

* [FIX] GlossaryTerm reviewers should be user or team only (#16372)

* add teams as reviewer

* Check Users to be reviewers

* Reviewers can be a team or user

* Fix check by id or name

* Review can be team or user both

* Validate Reviewers

* add multi select control

* - Fix Reviewers

* - Centralize Reviewer Relationship to EntityRepository

* - Sort

* add team as reviewer for glossary terms

* locales

* cleanup

* - Update Reviewer should remove existing reviewers

* fix selectable owner control

* fix code smells

* fix reviewer issue

* add glossary cypress

* fix patch issue on reviewers set to null

* update cypress tests

* fix cypress

* fix cypress

* fix reviewers in glossary task and supported cypress

* fix pytest

* Fix

* fix cypress

* fix code smells

* Inherited Reviewers need to be present always

* filter out inherited users

* fix cypress

* fix backend tests failure

* fix backend tests failure -checkstyle

* restrict owner to accept task in case of reviewer present

* fix pytest

---------

Co-authored-by: karanh37 <karanh37@gmail.com>
Co-authored-by: Pere Miquel Brull <peremiquelbrull@gmail.com>
Co-authored-by: Karan Hotchandani <33024356+karanh37@users.noreply.github.com>
Co-authored-by: Ashish Gupta <ashish@getcollate.io>
Co-authored-by: ulixius9 <mayursingal9@gmail.com>
Co-authored-by: sonikashah <sonikashah94@gmail.com>
(cherry picked from commit 9ec3d94e3b)

* Add testSuite tags, domain field and check for TestCase limits

* fix owner not showing after refersh in teams page (#16567)

(cherry picked from commit 119fcf8959)

* [ISSUE-16503] Fix createUser to use EntityResource (#16549)

* Fix createUser to use EntityResource

* fix broken tests

* Fix Tests - 3

(cherry picked from commit aeb020ae3b)

* what's new for 1.4.2 (#16568)

(cherry picked from commit c86468d992)

* address feedbacks

* fix error for bots page

* update banner text

* allow force fetch limit

* fix ingestion schedule

* Revert "Merge branch '1.4.2' into limits"

This reverts commit 8e965207a2, reversing
changes made to 4d16531965.

* Merge 1.4.2 (#16578)

* fix explore page conflicts

* fix tests

---------

Co-authored-by: Chirag Madlani <12962843+chirag-madlani@users.noreply.github.com>
Co-authored-by: Chira Madlani <chirag@getcollate.io>

* fix subheader

* Updating glossary reviewers should propagate reviewers in glossary term (#16580)

* highlight inherited reviewer in glossary

* locales

* use glossary name for search query

* fix glossary version cypress

* add union datatype for subfields

* Adding reviewer to glossary also adds them as an assignee to the task

* add glossary approval cypress

---------

Co-authored-by: sonikashah <sonikashah94@gmail.com>
(cherry picked from commit 4c8bf1cac1)

* Update documentation for Search Index apis (#16539)

(cherry picked from commit d3123c4914)

* cypress: fixed flakiness and announcment cypress (#16579)

* fetch latest limit for create / delete operations

* guard datAsset limit got topic, dashboard, mlmodel etc

* Fix: Ensure correct index mapping in Elasticsearch for clusterAlias (#16589)

* Fix: Ensure correct index mapping in Elasticsearch for clusterAlias

* Fix: Ensure correct index mapping in Elasticsearch for clusterAlias

(cherry picked from commit 8723b8c36a)

* cypress: fixed cypress AUT for mysql (#16446)

* cypress: fixed cypress AUT for mysql

* minor fix

* skip announcment redirection cypress

* Minor: Ensure correct index mapping in Elasticsearch for clusterAlias (#16598)

(cherry picked from commit 04543722a6)

* Fix Postgres Application listing (#16600)

* Fix Postgres Application listing

* Fix Listing

(cherry picked from commit 77dfe1f6af)

* fix limit related issue

* Fix Automations limits invalidation during the uninstall

* cypress: fixed 1.4.2 AUT cypress (#16602)

* cypress: fixed 1.4.2 AUT cypress

* fix cypress around announcement,user,glossary, lineage and mydata

* searchIndexApplication fix and minor changes

---------

Co-authored-by: Ashish Gupta <ashish@getcollate.io>

* test: add updateJWTTokenExpiryTime util (#16606)

(cherry picked from commit 8c173bed6a)

* OSS changes for adding automator cypress tests (#16611)

* Fix Test Suite Filter (#16615)

Co-authored-by: Sriharsha Chintalapani <harshach@users.noreply.github.com>
(cherry picked from commit 3db41f08e2)

* MINOR: Fix Profiler for SSL Enabled Source (#16613)

* Add Test Suite SSL (#16619)

* MINOR: Fix ssl connection in usage & lineage (#16625)

* Fix owner notification (#16629)

* - Fix Task notification not getting sent to owners

* - Fix Task notification not getting sent to owners

(cherry picked from commit cc2d581eb0)

* chore(release): Prepare Branch for `1.4.3`

* - Fix User Signup (#16667)

(cherry picked from commit b4cba8a850)

* - Fix User Signup - p2

(cherry picked from commit d9ae6f6db9)

* - Update What's new (#16669)

- fix vulnerability

(cherry picked from commit 1dcb1bd46f)

* Minor: Fix incorrect alert on signup page (#16666)

* Fix Application enforceLimits during install

* Wrap the add test button with limits wrapper for column profile tab

* fix errors

* fix tests

* fix pylint

* fix tests

* fix limits

* pylint

* fix schedule options

* fix glossary spec failure

* Add domain & tags to testSuite

* Update airflow-apis-tests-3_9.yml

---------

Co-authored-by: mohitdeuex <mohit.y@deuexsolutions.com>
Co-authored-by: Chira Madlani <chirag@getcollate.io>
Co-authored-by: Pablo Takara <pjt1991@gmail.com>
Co-authored-by: Akash-Jain <15995028+akash-jain-10@users.noreply.github.com>
Co-authored-by: Mohit Yadav <105265192+mohityadav766@users.noreply.github.com>
Co-authored-by: Ayush Shah <ayush@getcollate.io>
Co-authored-by: Maxim Martynov <martinov_m_s_@mail.ru>
Co-authored-by: ulixius9 <mayursingal9@gmail.com>
Co-authored-by: Shailesh Parmar <shailesh.parmar.webdev@gmail.com>
Co-authored-by: Teddy <teddy.crepineau@gmail.com>
Co-authored-by: Chirag Madlani <12962843+chirag-madlani@users.noreply.github.com>
Co-authored-by: Antoine Balliet <antoine.balliet@gorgias.com>
Co-authored-by: Suman Maharana <sumanmaharana786@gmail.com>
Co-authored-by: Karan Hotchandani <33024356+karanh37@users.noreply.github.com>
Co-authored-by: Ashish Gupta <ashish@getcollate.io>
Co-authored-by: Aniket Katkar <aniketkatkar97@gmail.com>
Co-authored-by: Sachin Chaurasiya <sachinchaurasiyachotey87@gmail.com>
Co-authored-by: Onkar Ravgan <onkar.10r@gmail.com>
Co-authored-by: Pere Miquel Brull <peremiquelbrull@gmail.com>
Co-authored-by: Mayur Singal <39544459+ulixius9@users.noreply.github.com>
Co-authored-by: sonika-shah <58761340+sonika-shah@users.noreply.github.com>
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2024-07-01 14:59:25 +05:30
Akash Jain
015d71c9de
chore: Update main branch for 1.5.0 Release (#16401) 2024-05-23 18:46:15 +05:30
Akash Jain
95bb221025
feat: Prepare main for next release cycle (#15139) 2024-02-12 16:56:50 +05:30
Sriharsha Chintalapani
ac5c1b11d7
#14217: remove logback dependency (#14256) 2023-12-06 10:42:53 +05:30
Mohit Yadav
3f8a931e39
Bump Pom Version to 1.3.0-SNAPSHOT (#14008)
* Bump Pom Version to 1.3.0-SNAPSHOT

* chore: Fix Makefile recipe

* fix: Prepare Main Branch for Next Feature Release

* fix: Syntax issue

---------

Co-authored-by: Akash-Jain <Akash.J@deuexsolutions.com>
2023-11-17 11:33:47 +05:30
Sriharsha Chintalapani
878fda47a1
Fix tests logging; do not initialize the search client if the search … (#12681)
* Fix tests logging; do not initialize the search client if the search config is not present

* Fix logging and parallelization defaults 1C

* Fix logging and parallelization defaults 1C

* Fix logging and parallelization defaults 1C

* Fix logging and parallelization defaults 1C

* Fix logging and parallelization defaults 1C

* Fix logging and parallelization defaults 1C
2023-07-31 23:35:08 -07:00
Suresh Srinivas
19e223eabd
Fix exceptions thrown as reflections scan non java classes (#12680) 2023-07-31 17:33:47 -07:00
Mohit Yadav
2c02052e21
Fix Pom versions (#12396) 2023-07-12 15:18:05 +02:00
Suresh Srinivas
4f2831f3bb
Upgrade dependencies for 1.2.0 release (#12280) 2023-07-04 20:03:40 -07:00
Sriharsha Chintalapani
9dbaabad44
Adding MD5 hash to fullyQualifiedName and names to simplify DB indexes for lookups and increasing the size of FQN (#11960)
* Fix fqn hash

* Add name & fqnHash and remove generated columns from top level

* Add name & fqnHash and remove generated columns from top level

* Add name & fqnHash and remove generated columns from top level

* Add name & fqnHash and remove generated columns from top level

* Add name & fqnHash and remove generated columns from top level

* Add name & fqnHash and remove generated columns from top level

* Add name & fqnHash and remove generated columns from top level

* Add name & fqnHash and remove generated columns from top level

* Add name & fqnHash and remove generated columns from top level

* merge commits

* merge commits

* merge commits

* Fix glossary import/export

* Fix BotResource Tests

* Fix BotResource Tests

* Fix Glossary Term tests

* Fix Glossary Term tests

* Fix Glossary Import/Export tests

* All backend tests are fixed.

* merge with main

* Fix tests and revert local changes

* Fix tests and revert local changes

* Fix NullPointerException for Glossary and Query

* Fix Tests

---------

Co-authored-by: Ayush Shah <ayush@getcollate.io>
2023-06-19 15:43:05 +05:30
Akash Jain
92d5bfa94e
fix: versions in main branch (#11478)
* fix: versions in main branch

* Prepare main branch for next release 1.1.0

* prepare main for latest release 1.0.1
2023-05-15 10:42:29 +05:30
Suresh Srinivas
17893f5bd9
Update dependencies for 1.0 release (#11013) 2023-04-12 06:49:56 -07:00
Mayur Singal
54b635dd60
1.0.0-alpha version upgrade (#10826) 2023-03-29 23:24:39 +05:30
Suresh Srinivas
460a9288a7
Update project dependencies (#9978) 2023-02-06 12:41:10 -08:00
Nahuel
b9a3c06104
Bump main branch to version 1.0.0 (#10040)
* Bump to version 0.13.2

* Bump mvn projects to 1.0.0-SNAPSHOT

* Bump python projects to 1.0.0.dev0

---------

Co-authored-by: Pere Miquel Brull <peremiquelbrull@gmail.com>
2023-02-02 12:56:14 +01:00
Sriharsha Chintalapani
28c8ce1386
Fix #9750: Refactor interfaces into openmetadata-spec module (#9751) 2023-01-30 11:47:30 -08:00
Parth Panchal
dbf0152c85
Added maven publish git action workflow (#9568) 2023-01-03 11:18:29 +05:30
Chirag Madlani
bf6fc5f93a
prepare(release) next release (#9479)
* prepare(release) next release

* airflow typo

Co-authored-by: Pere Miquel Brull <peremiquelbrull@gmail.com>
2022-12-27 20:15:46 +05:30
Nahuel
1732d85dd6
Fix: Update Maven dependencies (#8383)
* Update Maven dependencies

* Update Jetty dependency
2022-10-27 16:21:30 +02:00
Suresh Srinivas
82b81572ac
Update javadoc version (#8329) 2022-10-23 22:07:58 -07:00
Suresh Srinivas
7499277fcb
Update dependencies for release 0.13 (#7913)
* Update openmetadata-client module dependencies

* Update common module dependencies

* Update openmetadata-spec module dependencies

* Update openmetadata-ui module dependencies

* Update openmetadata-service module dependencies

* Upgrade remaining dependencies
2022-10-04 09:30:05 -07:00
Sriharsha Chintalapani
656b50dd3a
Fix #7469: Refactor OpenMetadata code modules (#7474) 2022-09-14 23:14:02 -07:00
Akash Jain
f2fc45ea41
feat: prepare-for-next-release-0-13-0 (#7348) 2022-09-09 01:25:41 +05:30
Nahuel
80ca224c39
Fix: Avoid store sensitive info in events repository using custom annotation (#6666)
* Avoid store sensitive infomation in created event when a Secrets Manager is configured

* Refactor code to start using custom annotations in the json schma deffinition

* Remove unused config object

* Add removed comment

* Add separated entity comparision for events in EntityResourceTest

* Add missing mask property in service connection schemas

* Update openmetadata-core pom.xml

* Missing import in openmetadata-core pom.xml
2022-08-12 15:56:37 -07:00
Parth Panchal
dd8b7fb5b0
Maven publish config changes in pom.xml (#6502)
* Config for maven publish

* Config for maven publish

* Config for maven publish

* Config for maven publish

* Config for maven publish

* Config for maven publish

* Config for maven publish
2022-08-03 10:49:44 +05:30
Suresh Srinivas
109b937fd4
Use JSON schema constraints to validate policies and other misc cleanup (#6451) 2022-07-30 15:23:18 -07:00
Nahuel
839d25217e
Fix: detected high severity vulnerabilities by Snyk (#6430)
* Fix detected high severity vulnrabilities by snyk

* Revert changes on ingestion/src/metadata/ingestion/source/database/mysql.py
2022-07-29 12:14:23 +02:00
Snyk bot
82c5592538
fix: upgrade com.auth0:java-jwt from 3.19.1 to 3.19.2 (#6272)
Snyk has created this PR to upgrade com.auth0:java-jwt from 3.19.1 to 3.19.2.

See this package in Maven Repository:
https://mvnrepository.com/artifact/com.auth0/java-jwt/

See this project in Snyk:
https://app.snyk.io/org/harshach/project/90e18217-fc70-4a90-bf04-270200cf86de?utm_source=github&utm_medium=referral&page=upgrade-pr
2022-07-22 22:41:27 -07:00
Vj-L
011651f078
"Updated the tags with latest tag" (#5962)
Co-authored-by: “Vijay” <“vijay.l@deuexsolutions.com”>
2022-07-08 16:43:39 +05:30
mohitdeuex
7f25b82408
[Backend][TaskNotification] Update the Group Id for to org.open-metadata (#5663) 2022-06-28 11:10:07 +05:30
Akash Jain
55e1be9ca4
feat: Prepare 0.11.0-snapshot version changes (#4505)
* updated version to 0.11.0-SNAPSHOT

* updated version to 0.11.0.dev* for ingestion

* docker version updates for metadata docker cli

* OM Server Env Variables from #4197 #4261 #4473
2022-04-27 00:41:17 +05:30
Akash Jain
540f5ca3b5
Fix: Prepare 0.10.0 snapshot (#4190)
* update pom versions to 0.10.0-SNAPSHOT

* fix version to latest release 0.9.1

* fix ingestion core version to 0.10.0
2022-04-19 17:40:42 +05:30
Suresh Srinivas
9f2ca9944f
Update the dependencies for 0.10 release (#4176) 2022-04-18 11:41:23 -07:00
Snyk bot
c311acc1b0
fix: common/pom.xml & pom.xml to reduce vulnerabilities (#3545)
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
2022-03-21 10:14:02 -07:00
Akash Jain
211a8a55e8
feat: Prepare 0.9.1-SNAPSHOT (#3297)
* prepare snapshot version for 0.9.1

* prepare dev version for ingestion 0.9.1

* prepare dev version for ingestion-core 0.9.1

* prepare Docker CI workflows for 0.9.1
2022-03-09 12:08:42 +05:30
Suresh Srinivas
aa64b8c990
Fixes #2841 - Upgrade maven dependencies for release 0.9 (#2842) 2022-02-17 23:37:50 -08:00
Akash Jain
20309cde64
fix:cherry pick from 0.8.0 and miscellaneous fixes (#2445)
* updating ingestion-core version to 0.8.0

* updating ingestion version to 0.8.0

* fixing file copy path

* update docker images to point to 0.8.0

* set up new release version

* reset ingestion version to 0.9.0.dev0

* reset ingestion-core version to 0.9.0
2022-01-26 14:00:27 +05:30
Sriharsha Chintalapani
bb847bc004
Revert "Use defaults of google java format action (#1845)" (#1912)
This reverts commit 782209ead5.
2021-12-23 19:22:47 -08:00