1.5.0 (2026-06-18)

Features

• auth/google: Require audience or clientId for mcpEnabled (#3450) (59f7b6e)
• Enable per source level flags for sql commenter (#3465) (ecce6b7)
• mcp: Add URL parameter binding for HTTP transport (#3112) (0cc7b37)
• scylladb: Adding support for ScyllaDB source and tool (#3119) (2dada83)
• server: Add support for toolset filtering in prebuilt CLI flag (#3245) (7cc4f65)
• skills: Generate skills offline without live source connections (#3388) (4c860b6)
• skills: Tolerate missing env vars during offline skills-generate (#3399) (ea5d3e5)
• source/cloud-storage: Restrict bucket and local path access (#3454) (2c3ca5d)
• tools/bigquery: Add per tool query label in BigQuery jobs (#1975) (3f6a49f)
• tools/dataplex: Add tools to support metadata enrichment workflow (#3270) (05289aa)
• tools/mysql: Add show-query-stats and list-all-locks tools for MySQL and Cloud SQL MySQL source (#2954) (a9693bd)
• tools: Decouple tool initialization from sources (#3355) (32a24e3)

Bug Fixes

• auth/dataplex: Fix failing source with service account credentials (#3369) (ba4deef)
• bigquery: Wire maximumBytesBilled into prebuilt config (#3385) (4abbf6e)
• Bound MCP HTTP body size (#3216) (d4f4342)
• config: Add doc/line context to parse errors (#2957) (4b097da)
• Escape delimiter characters in applyEscape to prevent SQL injection (#2811) (932519a)
• npm: Source binary version from cmd/version.txt (#3417) (6ffbdec)
• prebuilt/alloydb-omni: Require password env var explicitly (#3398) (fcbe3e7)
• server: Fail if MCP auth is enabled together with enable-api (#3435) (a6ff910)
• server: Return errors instead of panicking in InitializeConfigs (#3397) (f48b01d)
• source/cloudhealthcare: Validate pageURL parameter to prevent SSRF (#3453) (9abf47d)
• source/dataplex,source/datalineage: Specify cloud-platform scope for default credentials (#3376) (13e8c36)
• source/http: Implement SSRF guard (#3448) (24d7d29)
• tool/bigquery-execute-sql: Prevent dataset restriction bypass (#3452) (ca6d5e3)
• tool/mysql-get-query-plan: Prevent query execution bypass and statement injection (#3235) (7ed1e7b)
• tool/spanner-sql,tool/spanner-execute-sql: Use read-only annotations when readOnly is set (#3338) (8bde0ec)

1.4.0 (2026-06-04)

Features

• ci: Add support for windows/arm64 binary distribution (#3231) (10abf3b)
• datalineage: Add Data Lineage integration (#3285) (19353c3)
• server: Ignore unknown tools at startup with --ignore-unknown-tools flag (#3353) (5f0304f)
• tools/cloudsqlpg: Add remaining vector assist tools for Cloud SQL Postgres (#3203) (b514cbd)
• tools/spanner-search-catalog: Implement search_catalog tool (#3140) (defc086)

Bug Fixes

• auth/generic: Enforce issuer presence in opaque token validation (#3360) (1d8df0d)
• auth: Separate Google and Generic MCP OAuth verification (#3341) (dfd66ee)
• mcp: Support annotations and metadata within Tools to earlier MCP schemas (#3300) (9a88c72)
• oracle: Remove trailing semicolons from prebuilt tools (#3215) (fcad02d)
• server/auth: Centralize tool scopes validation (#3335) (adce4ab)
• server: Return null id for batch request rejection (#3333) (0b18d58)
• source/dataplex: Limit search results to pageSize (#3323) (905c1f6), closes #3308
• telemetry: Allow GCP project override (#2960) (3c83ba5)
• tool/bigquery: Prevent allowedDatasets bypass in forecast query (#3324) (45df461)
• tool/clickhouse: Handle ignored ProcessParameters error (#3340) (ddfd887)
• tools/clickhouse,tools/bigquery: Validate identifier parameters to prevent injection (#3219) (2f45f75)
• tools/looker: Escape filter values for unquoted parameters (#3289) (1711156)

1.3.0 (2026-05-21)

Features

• auth: Implement MCP auth tool-level scopes validation (#3049) (c528985)
• looker: Propagate client IP from incoming MCP requests to downstream SDK calls (#3253) (75da6c2)
• Setup SQLCommenter and allow client metadata (#3064) (9f1f9b3)
• tool/cloudsqladmin: Add cloud-sql-admin-execute-sql-many and cloud-sql-admin-sql-many (#3083) (ef300a8)

Bug Fixes

• auth/generic: Fix generic auth expiration field and integration with authRequired (#3251) (f4d16c0)
• Enforce toolset/promptset boundary on tools/call and prompts/get (#3036) (c739b80)
• tools/http: Prevent path traversal and base path scope escape (#3218) (80a6602)
• tools/looker: Return a 401 error to MCP client when Looker returns a 401 (#3233) (4f409a3)
• tools/looker: Strip wrapping quotes from filter values for unquoted parameters (#3273) (1e3de96)
• tools: Initialize query result slices to empty array (#3250) (60ddf48)

1.2.0 (2026-05-07)

Features

• Add support for HTTPS/TLS listener (#3126) (8bc385d)
• source/bigquery: Add maximumBytesBilled source config (#2724) (42f2d07)
• source/cloud-storage: Add bucket and object management tools (#3129) (8de9bcf)
• source/cloud-storage: Add Cloud Storage source with list_objects and read_object tools (#3081) (da27b37)
• source/cloud-storage: Add write/copy/move/delete object tools (#3139) (b225fc4)
• tools/knowledge-catalog: Search Data Quality Scans (#2444) (1c63551)

Bug Fixes

• Allow converting string literal block with list (#3050) (36ab2a9), closes #3023
• mcp: Implement router-level logger injection for MCP auth (#3067) (ccc7cf5)
• Prevent test.db from being created during unit tests (#3042) (d10d2ca)
• Remove hardcoded * allowed origin for sse (#3054) (c4c7bd9)
• sources/postgres: Apply URL encoding to query string params (#3020) (6b860f4)
• tool/looker-conversational-analytics: OAuth token in GDA payload fix (#3058) (6632d96)
• tools/bigquery-execute-sql: Avoid surfacing invalid queries as MCP 500s (#3056) (7ed92c8)
• tools/looker: Fix OAuth for Converational Analytics (#3044) (f9e3e55)

1.1.0 (2026-04-13)

Features

• tools/cloudsqlpg: Add vector assist tools for Cloud SQL Postgres (#2909) (7a6d849)

Bug Fixes

• looker: Convert configuration yaml to flat format (#3022) (45c05e3)

Docs Update

• knowledge-catalog: Rename dataplex to knowledge-catalog across docs (#3039) (45c05e3)

1.0.0 (2026-04-10)

⚠ BREAKING CHANGES

• tools/elasticsearch: add vector search support and remove query passing through param (#2891)
• tools/looker: refactor looker-git-branch tool into 5 separate tools (#2976)

Features

• auth: Support opaque token validation for generic authService (#2944) (c924701)
• cloudsqlpg: Run SELECT 1 after successful connection attempt (#2997) (6ed9700)
• tools/bigquerysql: Add semantic search support (#2890) (862c396)
• tools/elasticsearch-execute-esql: Add Tool to execute arbitrary ES/QL queries (#3013) (ae49fb7)
• tools/elasticsearch: Add vector search support and remove query passing through param (#2891) (d44e879)
• tools/looker: Refactor looker-git-branch tool into 5 separate tools (#2976) (b2472d4)
• tools/mysql: Add list-table-stats-tool to list table statistics in MySQL and Cloud SQL MySQL source. (#2938) (dc2c2b4)

0.32.0 (2026-04-08)

⚠ BREAKING CHANGES

• update repo name (#2968)

Features

• Add MCP tool annotations to all remaining tools (#2221) (ea09db9)
• bigquery: Add conversational analytics tools for Data Agents (#2517) (2490a4b)
• embeddingModel: Add Backend API selection fields (#2592) (912aa9e)
• skills: Add Claude Code support to generated scripts (#2966) (a1609e1)
• skills: Add codex user agent (#2973) (070e939)
• skills: Tool invocation via npx (#2916) (377dc5b)
• sources/singlestore: Add ConnectionParams to SingleStore Config (#2555) (73e2a8c)
• tool/dataplex-lookup-context: Relax project constraint and enforce location (#2952) (7ebfdf1)
• tools/looker: Looker agent management from MCP (#2830) (649d4ad)
• ui: Update to use /mcp endpoint (#2829) (c3059c2)

Bug Fixes

• bigquery: Add impersonateServiceAccount to prebuilt config (#2770) (9c3a748)
• quickstart: Robust tool lookup and modernize dependencies in Python samples (#2863) (4c0845d)
• skills: Fix skill generation template (#2914) (a01a15e)
• skills: Prevent empty strings overriding optional env vars in node scripts (#2963) (c52adeb)
• tests/bigquery: Implement uuid-based isolation and reliable resource cleanup (#2547) (479d842)
• tests/Bigtable: Implement uuid-based isolation and reliable resource cleanup (#2880) (a769f15)
• Update error for ConvertConfig function (#2993) (62bdabb)

Code Refactoring

• Update repo name (#2968) (3aae809)

0.31.0 (2026-03-26)

⚠ BREAKING CHANGES

• release upgraded docsite (#2831)
• http: sanitize non-2xx error output (#2654)
• add a new enable-api flag (#2846)
• remove deprecations and update tools-file flag (#2806)

Features

• Add a new enable-api flag (#2846) (7a070da)
• auth: Add generic authService type for MCP (#2619) (f6678f8)
• auth: Add Protected Resource Metadata endpoint (#2698) (b53dcf2)
• auth: Support manual PRM override (#2717) (283e4e3)
• dataplex: Add support for lookup context tool. (#2744) (facb69d)
• Remove deprecations and update tools-file flag (#2806) (ab64c95)

Bug Fixes

• ci: Remove search index generation from preview deployment workflow (#2859) (f8891b8)
• docs: Skip empty folders in pagination & reduce PR comment noise (#2853) (9ebd93a)
• http: Sanitize non-2xx error output (#2654) (5bef954)
• skills: Fix integer parameter parsing through agent skills (#2847) (4564efe)

Documentation

• Release upgraded docsite (#2831) (5b25ce0)

0.30.0 (2026-03-20)

Features

• cli: Add migrate subcommand (#2679) (12171f7)
• cli: Add serve subcommand (#2550) (1e2c7c7)
• skill: One skill per toolset (#2733) (5b85c65)
• source/oracledb: Add Oracle DB for MCP tools and configurations, updated tools and documentation (#2625) (e350fc7)
• tools/looker: Support git_branch tools for looker. (#2718) (70ed8a0)
• tools/dataplex-search-entries: Add scope support to search_entries tool (#2740) (10af468)

Bug Fixes

• cloudloggingadmin: Increase log injesting time and add auth test (#2772) (50b4457)
• oracle: Normalize encoded proxy usernames in go-ora DSN (#2469) (b1333cd)
• postgres: Update execute-sql tool to avoid multi-statements parameter (#2707) (58bc772)
• skills: Improve flag validation and silence unit test output (#2759) (f3da6aa)
• test: Address flaky healthcare integration test run (#2742) (9590821)

Reverts

• ci: Implement conditional sharding logic in integration tests (#2763) (1528d7c)

0.29.0 (2026-03-13)

⚠ BREAKING CHANGES

• source/alloydb: restructure prebuilt toolsets (#2639)
• source/spanner: restructure prebuilt toolsets (#2641)
• source/dataplex: restructure prebuilt toolsets (#2640)
• source/oss-db: restructure prebuilt toolsets (#2638)
• source/cloudsql: restructure prebuilt toolsets (#2635)
• source/bigquery: restructure prebuilt toolsets (#2637)
• source/firestore: restructure prebuilt toolsets (#2636)
• telemetry metrics updates as per semantic convention (#2566)

Features

• Add user agent to embeddings generation (#2572) (287251a)
• skill: Attach user agent metadata for generated skill (#2697) (9598a6a)
• skills: Add additional-notes flag to generate skills command (#2696) (73bf962)
• skill: Update skill generation logic (#2646) (c233eee)
• source/alloydb: Restructure prebuilt toolsets (#2639) (5f3f063)
• source/bigquery: Restructure prebuilt toolsets (#2637) (dc984ba)
• sources/bigquery: Support custom oauth header name (#2564) (d3baf77)
• source/cloudsql: Restructure prebuilt toolsets (#2635) (99613dc)
• source/dataplex: Restructure prebuilt toolsets (#2640) (acb9a80)
• source/firestore: Restructure prebuilt toolsets (#2636) (22ab7b9)
• source/oss-db: Restructure prebuilt toolsets (#2638) (5196c6a)
• source/spanner: Restructure prebuilt toolsets (#2641) (ea2b698)
• Telemetry metrics updates as per semantic convention (#2566) (131d764)
• tools/mongodb: Add tool annotations to MongoDB tools for improved LLM understanding (#2219) (b7a5f80)
• tools/serverless-spark: Add get_session_template tool (#2308) (a136e16)
• tools/serverless-spark: Add list/get sessions tools (#2576) (a554298)

Bug Fixes

• Improve list locks integration test for postgres (#2279) (d9ebe5d)
• mcp: Guard nil SSE session lookup and return 400 for missing session (#2681) (f66189f)
• oracle: Update oracle-execute-sql tool interface to match source signature (#2627) (81699a3)
• Return AllParams for GetParameter() for tools with templateParameter(#2734) (bfd7ba6)
• server/mcp: Scope defer span.End inside loop iteration (#2558) (c88a62d), closes #2549
• skill: Fix env variable propagation (#2645) (5271368)
• sources/looker: Looker and looker-dev prebuilt tools should share one source definition. (#2620) (df7f2fd)
• telemetry: Histogram buckets from OTel standard to MCP standards (#2729) (87cd4a0)
• ui: Remove module from script (#2703) (6943ab6)
• Update toolset attributes naming (#2554) (3d6ae4e)