You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@polaris.apache.org by yz...@apache.org on 2026/05/23 00:16:14 UTC
(polaris) branch yzou-generic-table-location-validation updated (bebf5c0ba7 -> 58095a17d2)
This is an automated email from the ASF dual-hosted git repository.
gh-yzou pushed a change to branch yzou-generic-table-location-validation
in repository https://gitbox.apache.org/repos/asf/polaris.git
omit bebf5c0ba7 fix tests
add 0c730504ee Update Generated Helm Docs after First RC (#4095)
add 1a7b21c54e Update dependency io.smallrye.config:smallrye-config-core to v3.17.1 (#4239)
add f8efd36332 CI: Use Zizmor defaults (#4223)
add b108564f6e CI: Make security workflows CodeQL + Zizmor a real PR-merge-gate (#4224)
add d6f5489f2c Revalidate grant entities before NoSQL grant or revoke (#4234)
add bb72f62e4e NoSQL: fix phantom grants for dropped/non-existent entities (#4233)
add 87ec6ae0fc Update registry.access.redhat.com/ubi9/openjdk-21-runtime Docker tag to v1.24-2.1776357028 (#4249)
add 40850e3f4b Update dependency software.amazon.awssdk:bom to v2.42.36 (#4248)
add d602d9c111 Update amazon/aws-cli Docker tag to v2.34.32 (#4247)
add 3fb71739f0 Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.1 (#4246)
add 473bd22c6b Add Polaris Community Meetings for 2026-04-02 and 2026-04-16 (#4241)
add 84c2a20a22 Fix text for host and port with profile update (#4244)
add 9fe8fc97b3 Use randomly picked port in RustfsContainer (#4242)
add ed1bbb2be2 Add BigQuery Metastore federation support (#4050)
add 9618be68fb Replace deprecated getOrComputeIfAbsent() API calls (#3944)
add c9e1492f39 Update cockroachdb/cockroach Docker tag to v26.1.3 (#4255)
add aaea9a32af Update dependency org.testcontainers:testcontainers-bom to v2.0.5 (#4256)
add 23b45f9a01 Create PolarisEvent only when event type is enabled by at least one event listener (#4064)
add 31738932fd Update dependency io.smallrye.config:smallrye-config-core to v3.17.2 (#4258)
add 523fe9e437 NoSQL: fix compilation warning (#4252)
add 4d2b25a9a8 Fix deprecation warning in RelationalJdbcIdempotencyStorePostgresIT (#4253)
add d349a90e60 Silence deprecated-for-removal warning in `PolarisEventListenerOldConfigurationTest` (#4254)
add b57b43f07b Simplify Spark configuration with credential vending (#4218)
add 16e6797736 JDBC: Replace coarse-grained synchronized methods with per-realm locking (#4054)
add ae03ac67c6 Update dependency mypy to >=1.20, <=1.20.2 (#4265)
add 1dff5f53ca Implement Apache Ranger Authorization Plugin (#3928)
add 7334a4dc41 Update dependency org.agrona:agrona to v2.4.1 (#4268)
add 0a6d7e677d CLI: Optimize generate_clients.py with dirs pruning (#4243)
add de255b20ba Fix spark jupyter guide (#4271)
add 5478b68fa0 NoSQL: filter ACL entries by direction in loadGrants (#4222)
add bce7b23837 Service: Self-annotate DefaultPolarisAuthorizerFactory and move to service module (#4267)
add 96452fcafe Update dependency pre-commit to v4.6.0 (#4266)
add 676c04db57 Regtests: harden MinIO client download and fail fast when setup breaks (#4279)
add e3cdc5c67a Fix Website Instructions for Releasing Documentation (#4280)
add cf93e09924 Cut CHANGELOG over, Add 1.4.0 Documentation Pages (#4264)
add 43c0cee2e3 Added Integration Tests to validate auto-upgrade of Graalvm version by Renovate-bot (#4275) (#4277)
add 4d90f53f2d Update dependency com.github.dasniko:testcontainers-keycloak to v4.2.1 (#4283)
add 3db08ecc05 Update ubuntu Docker tag to v26 (#4286)
add ff70dcda1b Consolidate security workflows and add Docker image scan (#4289)
add efe2d54da3 Releasey: make Helm index/artifacthub-repo.yml transfer idempotent (#4290)
add 6aa00949e0 Update amazon/aws-cli Docker tag to v2.34.37 (#4295)
add 62003dcda7 Update dependency software.amazon.awssdk:bom to v2.42.41 (#4296)
add 00574055d6 Update dependency com.puppycrawl.tools:checkstyle to v13.4.1 (#4299)
add e3b3ce4965 Update docker.io/prom/prometheus Docker tag to v3.11.3 (#4301)
add fef4da0a2d Update registry.access.redhat.com/ubi9/openjdk-21-runtime Docker tag to v1.24-2.1777030053 (#4305)
add 5c65b8f3f1 Remove the replace-new-location-prefix-with-catalog-default catalog property (#4298)
add 034b5de568 Fix Artifact Hub badge (#4288)
add 734298b434 Fix Helm chart README link to docs (#4287)
add f1ec35bc07 Suppress Hibernate Validator HV000271 deprecation warnings (#4294)
add 88b416bd23 Add PyPI Publishing to Automated Release (#4220)
add cbbcc2db9d Update Manual Instructions to Include Changing Link on the Binary Distribution Page (#4303)
add a9cd69e38a Fix banned-dependency handling wrt detached/copied configuations (#4307)
add 8996b12d90 Update Gradle to v9.5.0 (#4310)
add 22f60db79d docs: add AGENTS.md coding guidelines for AI agents (#4276)
add 19e2bc62e2 Narrow SKIP_CREDENTIAL_SUBSCOPING_INDIRECTION scope (#4284)
add b1ec6450c7 Update dependency com.fasterxml.jackson:jackson-bom to v2.21.3 (#4311)
add cfb175441d Update dependency org.postgresql:postgresql to v42.7.11 (#4312)
add f9064ccac1 Fix `RealmContextFilterTest` relying config-overrides becoming system properties (#4313)
add d0eba46767 Adapt CacheInvalidationSender + test to dynamic Quarkus management port (#4314)
add b7789e36a9 Bump Quarkus to 3.34.6 (#4297)
add b18c048add Reject invalid entity names in the REST layer (#4282)
add 67c9964b34 Source RootCredentialsSet from Quarkus config (#4319)
add 7553da8acf Update registry.access.redhat.com/ubi9/openjdk-21-runtime Docker tag to v1.24-2.1777302154 (#4325)
add 7fb4ad4da0 Update dependency org.mongodb:mongodb-driver-sync to v5.7.0 (#4323)
add 8a1ee3fc74 Update dependency jupyterlab to v4.5.7 [SECURITY] (#4322)
add 739ce2bd18 chore(deps): bump jupyterlab from 4.5.6 to 4.5.7 in /regtests (#4321)
add c971909e31 Update docker.io/openpolicyagent/opa Docker tag to v1.16.0 (#4320)
add 224618f767 Update dependency com.auth0:java-jwt to v4.5.2 (#4316)
add 9bf182cf0c Add Polaris Community Meeting 2026-04-30 record and notes (#4327)
add 1a9f913ba7 Build: suppress deprecation warning in PolarisCatalogUtils (#4262)
add af21bdd33c Update plugin com.gradle.develocity to v4.4.1 (#4250)
add e583fbeabf Add integration test for Hive Metastore federation (#4315)
add 9c0daa6e50 Update docker.io/openpolicyagent/opa Docker tag to v1.16.1 (#4334)
add 4bb7800857 Update github/codeql-action digest to e46ed2c (#4335)
add f957a60a32 Update hadoop dependencies from 3.4.3 to 3.5.0 (#4127)
add da4bbf58b7 Update dependency boto3 to ~=1.43.1 (#4318)
add e80d492742 Update download links for 1.4.1 release (#4338)
add 253456ada4 Update dependency com.puppycrawl.tools:checkstyle to v13.4.2 (#4339)
add 3d48c4ff34 Site: update guides to latest stable docs (#4345)
add 519a3338fd Site: resolve config includes from the current release tree (#4346)
add d97045d769 Update dependency com.github.ben-manes.caffeine:caffeine to v3.2.4 (#4357)
add 42b7aae369 Improve staged table handling (#4350)
add cb043baf77 Improve storage uri handling in S3 + GCS (#4351)
add 9c61c560b0 Improve locations-handling (#4352)
add 4e5ca51187 Improve documentation wording (#4353)
add 9e1d9dce58 Update dependency software.amazon.awssdk:bom to v2.44.0 (#4360)
add 9ba0c3d903 Update amazon/aws-cli Docker tag to v2.34.41 (#4359)
add 01a6b44721 feat: Be Able to Configure an External Catalog to Use org.apache.iceberg.gcp.auth.GoogleAuthManager as it's AuthManager (#3451). It allows an "End-User Credentials (Pass-Through) Approach" in that Polaris provides credentials for accessing storage rather than taking them from the BigLake metastore. (#3729)
add 645f67adc5 Update Quarkus to 3.35.1 (#4336)
add f160dc2e46 Update registry.access.redhat.com/ubi9/openjdk-21-runtime Docker tag to v1.24-2.1777575919 (#4363)
add bc05e0a06a Update dependency io.quarkus.platform:quarkus-bom to v3.35.2 (#4364)
add 3340d9c29d Add the security advisories for 1.4.1 release (#4349)
add 87ca7f4ed8 Site: point onboarding links to released docs (#4342)
add 1492966acf Site: clean up non-guide public doc links (#4343)
add 461d8797ac Fix CVE links in security-report page and clarify the affected versions (#4366)
add 7202d3fd94 Site: separate released and developer docs navigation (#4344)
add d30ecd91ef Site: clean up non-guide public doc links (#4365)
add 9c2c801281 Exclude pom-only dependencies from Polaris server/admin license reports (#4375)
add 154a3e54c4 Remove internal constant GOOGLE_USER_PROJECT_HEADER_KEY (#4362)
add 700ba2b3bc Update registry.access.redhat.com/ubi9/openjdk-21-runtime Docker tag to v1.24-2.1777977956 (#4381)
add b618eecccc Update dependency org.apache.logging.log4j:log4j-core to v2.26.0 (#4384)
add 503592486e Update dependency com.google.cloud:google-cloud-storage-bom to v2.68.0 (#4379)
add 85e36cbb4b Group the CVEs by Polaris release (#4374)
add 4e37007333 Update dependency com.google.cloud:google-cloud-iamcredentials to v2.92.0 (#4378)
add 2e80d62968 Update cockroachdb/cockroach Docker tag to v26.1.4 (#4377)
add 7325bc8755 Update docker.io/mongo Docker tag to v8.3.1 (#4369)
add e5b57d6dc1 Update dependency pip-licenses-cli to v4.1.0 (#4376)
add ea71c35a23 Site: show unreleased banner on all developer docs pages (#4347)
add 9674fcc577 Site: add release-doc link guardrail (#4348)
add 0268d0ee7b Entity properties clarification in docs (#4371)
add 4b70de3789 Clarify IRC federation (#4373)
add c753509d90 Fix codeql-action tags after #4335 (#4387)
add 5a36c1a72a Update dependency io.smallrye.common:smallrye-common-annotation to v2.18.0 (#4386)
add ce3dbcaea6 CLI: UX improvement (#4245)
add 69ed75fc1b Update github/codeql-action action to v4.35.4 (#4388)
add 9cfc6708e5 Remove custom docker image build from HMS integration test (#4361)
add 8fc4150f79 Service: Fix renameTable to return 204 instead of 200 (#4383)
add a7725aded6 Dedup helm targets in Makefile (#4394)
add eac424db1a CLI: add missing parsing tests for policies, privileges and profiles (#4391)
add d3944673b3 Update dependency io.smallrye.common:smallrye-common-annotation to v2.18.1 (#4400)
add 8e7c3c44d2 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /client/python (#4403)
add 8d43221d8e Fix client build by exclusing PKG-INFO (#4395)
add 1d2a8045ba Fix gradlew run after Quarkus bump (#4390)
add 00eb3f7bae Add clarification for catalog properties (#4372)
add 7f7a2b3735 Update hive federation docs (#4370)
add 2cd7c9d919 Update LICENSE, and use consistent content (#4385)
add 287d223ea4 Update trinodb/trino Docker tag to v481 (#4412)
add aa9f7d0f94 Update Gradle to v9.5.1 (#4411)
add 1189b96903 Update docker.io/openpolicyagent/opa Docker tag to v1.16.2 (#4410)
add 666dc1104a CLI: Improve Python CLI error handling (#4399)
add 7e191c1a1c Update registry.access.redhat.com/ubi9/openjdk-21-runtime Docker tag to v1.24-2.1778501187 (#4421)
add 0baa879eb0 chore: Code refactoring and removal of deprecated method calls (#3839)
add 979ae3b274 Add RustFS support for regression test (#4393)
add 8262fbe970 Update dependency org.slf4j:slf4j-api to v2.0.18 (#4419)
add f9d380eaac Prevent client id collison during reset (#4396)
add 5942dad753 docs: link Code Wiki for Apache Polaris in README as a navigation aid (#4368)
add 9e4d61ba3d Update docker.io/jaegertracing/jaeger Docker tag to v2.18.0 (#4425)
add f45e32573c Update cockroachdb/cockroach Docker tag to v26.2.0 (#4428)
add 2ac2528b66 Cleanup Python dist area before publishing (#4430)
add c27f3784fe NoSQL: Honor the Set contract for empty privilege sets (#4416)
add 631df1fb46 NoSQL: Return the initialized Quarkus backend instance (#4418)
add 45a3e971a3 Site: clean up "Getting Started" guide with actual quickstart content (#4392)
add 66fa7151e3 Service: Move Iceberg request.validate() to the REST adapter (#4423)
add f23fb45df8 Fix broken CVE links in 1.4.1 downloads page (#4435)
add 4e1d981d3d NoSQL: Clarify commit log offset scan semantics (#4415)
add 72c768fada NoSQL: Encode Snowflake time UUIDs with standard v1 timestamps (#4417)
add 2d789b94ab Update docker.io/mongo Docker tag to v8.3.2 (#4426)
add 7a2cb2e49f Update dependency io.quarkus.platform:quarkus-bom to v3.35.3 (#4424)
add cb2865d0cf chore: remove incubating note (#4432)
add 2db4b7f174 Update dependency com.diffplug.spotless:spotless-plugin-gradle to v8.5.0 (#4444)
add f2d1a03874 Update postgres Docker tag to v18.4 (#4445)
add 2c3a187b3b Update dependency mypy to v2 (#4380)
add 5221b9444b NoSQL: Guard maintenance runs with explicit supersede IDs (#4414)
add 4ce4dea9c4 Update github/codeql-action action to v4.35.5 (#4456)
add a0a99ad8d2 docs: tidy and correct top-level README (#4427)
add 568a88833f Ensure sub-namespace list is not error out during dry-run (#4447)
add 44f845bcc1 Remove unused backingStoreMap in LocalPolarisMetaStoreManagerFactory (#4434)
add 538c69546a Update dependency com.diffplug.spotless:spotless-plugin-gradle to v8.5.1 (#4460)
add e2c6ecab62 Update alpine/curl Docker tag to v8.19.0 (#4462)
add da79c3d4f8 Update dependency software.amazon.awssdk:bom to v2.44.7 (#4471)
add 401ee5fbb8 Update amazon/aws-cli Docker tag to v2.34.48 (#4470)
add 004b58ada2 NoSQL: Do not interrupt running Vert.x async tasks on cancel (#4437)
add 562653329e NoSQL: Harden the distributed cache invalidation endpoint (#4438)
add 36fabf8a67 CLI: Add display version support for CLI (#4463)
add fc8cf463e8 NoSQL: Add explitic test coverage for `StreamUtil` (#4441)
add d8882b257e NoSQL: Clarify Node management and lease contracts (#4442)
add e97bdb6155 NoSQL: fix race in non-prod JavaPoolAsyncExec.periodic() (#4443)
add 41ccd18124 Update immutables to v2.12.2 (#4469)
add 8025e3a228 Fix incorrect String.format specifiers (#4467)
add b9588e50db Update zizmorcore/zizmor-action action to v0.5.6 (#4450)
add c51fb6da1d Fix binary distribution getting-started guide (#4478)
add 420c1f72bd Rename Community menu "Community Page" item to "Overview" (#4480)
add ac634c94da Update dependency com.azure:azure-sdk-bom to v1.3.7 (#4485)
add d4b8bc341a Enable Copilot for PR reviews (#4452)
add a5f1db5ff9 fix(rate-limiter): return Iceberg ErrorResponse JSON body on HTTP 429 (#4404)
add 11b713a6d8 Helm: Added hostUsers for helm chart (#4468)
add a80386ac23 Docs: make "Tools" menu a dropdown menu (#4482)
add d4c0de71c1 Update quay.io/keycloak/keycloak Docker tag to v26.6.2 (#4494)
add e73901a379 Update dependency org.junit:junit-bom to v6.1.0 (#4495)
add 4cc8663900 Make location overlap checks more robust (#4408)
add 8baec7fe17 Refactor download logic in setup.sh into a shared helper function (#4458)
add 159f3cee64 docs: add BigQuery Metastore federation guide (#4461)
add 929bd02d15 chore(deps): bump idna from 3.11 to 3.15 in /client/python (#4496)
add bff97ff25f regtests: replace fragile awk JSON parsing with jq (#4457)
add 366d6dcc88 NoSQL: Copy serialized values in the in-memory backend (#4473)
add 8a7e17359b NoSQL: Fix batched multipart NoSQL object fetches (#4475)
add 504d63cc7e NoSQL: Fix MongoDB silent reference creation with duplicates (#4476)
add 686845801b NoSQL: Fix persistence test extension resource resolution (#4472)
add 97cf4a08de Add 1.5.0 release (#4483)
add dcda9246aa Upgrade Iceberg to 1.11.0 (#4491)
add e44ed324e7 Rotate changelog after 1.5.0 release (#4484)
add 59b75273a5 Update ranger.graalvm to v25.0.3 (#4500)
add 2be325b4c6 Fix MongoDB container crashes (#4509)
add aa1703e616 feat: add SESSION_NAME_FIELDS_IN_SUBSCOPED_CREDENTIAL for configurable STS session names (#4326)
add 46e6891a2c Migrate polaris-core nullness annotations to JSpecify (#4240)
add e7ebe8dab2 chore(deps): update gradle/actions action to v6 (#4512)
add 75a1e3f979 Update actions/stale action to v10.3.0 (#4515)
add f2eb8ad225 Replace deprecated encodeNamespace and decodeNamespace methods (cherry-pick of #3713) (#4508)
add 017a55e604 View registration (#4507)
add d176a29541 Document why UnicastProcessor.onNext() does not require external synchronization (#4487)
add 5aa48bedef Fix various typos across docs, code, and tooling (#4520)
add 5041165eb5 fix: prevent grants_version_going_backward under concurrent grants (#4358)
add 23aa800293 Site: Remove duplicate 'for' in markdown_testing.py print output (#4514)
add b6d1797754 docs: realign CHANGELOG and 1.5.0 release notes with the actual 1.5.0 changes (#4513)
add a18b7e1e71 Fix cli doctype typo (#4523)
add ee41b0eb1a NoSQL: Reject non-positive reference history sizing (#4505)
add 034689558e NoSQL: Java async exec test coverage (#4503)
add 4ff06ef16e NoSQL: Honor unsupported MongoDB realm deletion (#4502)
add bbc177087d Bump to 1.6.0-SNAPSHOT (#4524)
add 961372f92e Update scala212 to v2.12.21 and update renovate to ensure update is between 2.12.x (#4501)
add b34fcc7cbc nit: use real UUID v7 idempotency keys in tests (#4530)
add 9237acb57b fix tests
add 58095a17d2 fix test failure
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (bebf5c0ba7)
\
N -- N -- N refs/heads/yzou-generic-table-location-validation (58095a17d2)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.asf.yaml | 7 +
.../actions/ci-incr-build-cache-prepare/action.yml | 2 +-
.../README.md => .github/copilot-instructions.md | 23 +-
.../instructions/generated-files.instructions.md | 19 +-
.../polaris-review-omissions.instructions.md | 45 +
.github/renovate.json5 | 14 +
.github/scripts/check-copilot-instructions.sh | 62 +
.github/workflows/ci-asf-allowlist-check.yml | 47 -
.github/workflows/ci-codeql.yml | 57 -
.github/workflows/ci-main.yml | 6 +
.github/workflows/ci-pr.yml | 6 +
.github/workflows/ci-security.yml | 80 +
.github/workflows/ci-zizmor.yml | 60 -
.github/workflows/ci.yml | 83 +-
.github/workflows/nightly.yml | 16 +-
.../release-2-update-release-candidate.yml | 17 +
.../release-3-build-and-publish-artifacts.yml | 128 +-
.github/workflows/release-4-publish-release.yml | 111 +-
.github/workflows/stale.yml | 2 +-
AGENTS.md | 279 +++
CHANGELOG.md | 69 +-
Makefile | 71 +-
README.md | 229 +--
api/iceberg-service/build.gradle.kts | 1 +
.../kotlin/licenses/QuarkusAppDependencyFilter.kt | 70 +
.../src/main/kotlin/polaris-java.gradle.kts | 8 +-
.../main/kotlin/polaris-license-report.gradle.kts | 4 +
build.gradle.kts | 4 +
client/python/.openapi-generator-ignore | 47 +-
client/python/apache_polaris/__init__.py | 6 +
.../apache_polaris/cli/api_client_builder.py | 14 +-
.../python/apache_polaris/cli/command/__init__.py | 7 +-
.../apache_polaris/cli/command/catalog_roles.py | 9 +-
.../python/apache_polaris/cli/command/catalogs.py | 45 +-
client/python/apache_polaris/cli/command/find.py | 5 +-
.../apache_polaris/cli/command/namespaces.py | 7 +-
.../python/apache_polaris/cli/command/policies.py | 19 +-
.../apache_polaris/cli/command/principal_roles.py | 9 +-
.../apache_polaris/cli/command/principals.py | 5 +-
.../apache_polaris/cli/command/privileges.py | 25 +-
.../python/apache_polaris/cli/command/profiles.py | 9 +-
client/python/apache_polaris/cli/command/setup.py | 11 +-
client/python/apache_polaris/cli/command/tables.py | 9 +-
client/python/apache_polaris/cli/constants.py | 282 +--
client/python/apache_polaris/cli/exceptions.py | 43 +
.../apache_polaris/cli/options/option_tree.py | 1956 +++++++++++---------
client/python/apache_polaris/cli/options/parser.py | 293 ++-
client/python/apache_polaris/cli/polaris_cli.py | 54 +-
client/python/generate_clients.py | 182 +-
client/python/pyproject.toml | 12 +-
client/python/{test => tests}/cli_test_utils.py | 3 +-
.../{test => tests}/test_catalog_roles_command.py | 0
.../{test => tests}/test_catalogs_command.py | 0
client/python/tests/test_cli_exceptions.py | 68 +
client/python/{test => tests}/test_find_command.py | 0
.../{test => tests}/test_namespaces_command.py | 0
client/python/{test => tests}/test_parser_basic.py | 48 +-
.../{test => tests}/test_policies_command.py | 86 +
.../test_principal_roles_command.py | 0
.../{test => tests}/test_principals_command.py | 0
.../{test => tests}/test_privileges_command.py | 71 +
.../{test => tests}/test_profiles_command.py | 48 +
.../python/{test => tests}/test_setup_command.py | 0
.../python/{test => tests}/test_tables_command.py | 0
client/python/uv.lock | 250 +--
.../extension/auth/opa/test/Dockerfile-opa-version | 2 +-
extensions/auth/ranger/impl/README.md | 41 +
.../auth/ranger/impl}/build.gradle.kts | 34 +-
.../auth/ranger/RangerPolarisAuthorizer.java | 248 +++
.../auth/ranger/RangerPolarisAuthorizerConfig.java | 42 +-
.../ranger/RangerPolarisAuthorizerFactory.java | 82 +
.../ranger/RangerPolarisOperationSemantics.java | 440 +++++
.../extension/auth/ranger/utils/RangerUtils.java | 136 ++
.../ranger/RangerPolarisAuthorizerFactoryTest.java | 45 +
.../auth/ranger/RangerPolarisAuthorizerTest.java | 305 +++
.../extension/auth/ranger/RangerTestUtils.java | 100 +
.../test/resources/authz_tests/dev_polaris.json | 623 +++++++
.../resources/authz_tests/tests_authz_catalog.json | 32 +
.../authz_tests/tests_authz_namespace.json | 96 +
.../resources/authz_tests/tests_authz_policy.json | 16 +
.../authz_tests/tests_authz_principal.json | 24 +
.../resources/authz_tests/tests_authz_root.json | 54 +
.../resources/authz_tests/tests_authz_table.json | 136 ++
.../authz_tests/tests_authz_unsupported.json | 116 ++
.../auth/{opa => ranger}/tests/build.gradle.kts | 15 +-
.../auth/ranger/test/RangerAdminServiceIT.java} | 84 +-
.../ranger/test/RangerGenericTableHandlerIT.java} | 17 +-
.../test/RangerIcebergCatalogHandlerIT.java} | 17 +-
.../auth/ranger/test/RangerIntegrationTest.java | 104 ++
.../ranger/test/RangerIntegrationTestBase.java} | 44 +-
.../ranger/test/RangerPolicyCatalogHandlerIT.java} | 19 +-
.../auth/ranger/test/RangerPolicyConditionIT.java | 49 +-
.../auth/ranger/test/RangerTestProfiles.java | 51 +
.../resources/authz_it_tests/dev_polaris.json | 730 ++++++++
.../authz_it_tests/dev_polaris_roles.json | 1 +
.../authz_it_tests/dev_polaris_userstore.json | 7 +
.../federation/bigquery}/build.gradle.kts | 17 +-
.../BigQueryMetastoreFederatedCatalogFactory.java} | 48 +-
extensions/federation/hadoop/build.gradle.kts | 12 +-
gradle/baselibs.versions.toml | 2 +-
gradle/libs.versions.toml | 59 +-
gradle/license/allowed-licenses.json | 5 +
gradle/projects.main.properties | 4 +
gradle/wrapper/gradle-wrapper.properties | 6 +-
gradlew | 2 +-
helm/polaris/README.md | 4 +-
helm/polaris/templates/deployment.yaml | 3 +
helm/polaris/tests/deployment_test.yaml | 23 +
helm/polaris/tests/hpa_test.yaml | 2 +-
helm/polaris/values.schema.json | 7 +
helm/polaris/values.yaml | 5 +
integration-tests/build.gradle.kts | 12 +
.../apache/polaris/service/it/env/CatalogApi.java | 14 +
.../it/ext/PolarisIntegrationTestExtension.java | 2 +-
.../test/HiveCatalogFederationIntegrationTest.java | 349 ++++
.../it/test/PolarisApplicationIntegrationTest.java | 13 +-
.../PolarisManagementServiceIntegrationTest.java | 18 +
.../test/PolarisPolicyServiceIntegrationTest.java | 14 +-
.../it/test/PolarisRestCatalogIntegrationBase.java | 230 ++-
...arisRestCatalogViewAdlsIntegrationTestBase.java | 6 -
...arisRestCatalogViewFileIntegrationTestBase.java | 26 +-
...larisRestCatalogViewGcsIntegrationTestBase.java | 6 -
.../PolarisRestCatalogViewIntegrationBase.java | 21 +-
...olarisRestCatalogViewS3IntegrationTestBase.java | 6 -
.../polaris/nosql/async/AsyncExecTestBase.java | 31 +
persistence/nosql/async/java/build.gradle.kts | 3 +
.../nosql/async/java/JavaPoolAsyncExec.java | 57 +-
.../nosql/async/java/TestJavaPoolAsyncExec.java | 124 ++
.../polaris/nosql/async/vertx/VertxAsyncExec.java | 2 +-
.../persistence/nosql/authz/api/Constants.java | 16 +-
.../nosql/authz/api/TestPrivilegeSet.java | 59 +
.../polaris/ids/impl/SnowflakeIdGeneratorImpl.java | 25 +-
.../ids/impl/TestSnowflakeIdGeneratorImpl.java | 43 +-
.../persistence/nosql/nodeids/api/NodeLease.java | 7 +-
.../nosql/nodeids/api/NodeManagement.java | 8 +-
.../persistence/nosql/api/PersistenceParams.java | 7 +
.../polaris/persistence/nosql/api/StreamUtil.java | 3 +
.../persistence/nosql/api/commit/Commits.java | 30 +-
.../persistence/nosql/api/TestPersistence.java | 19 +
.../persistence/nosql/api/TestStreamUtil.java | 59 +
persistence/nosql/persistence/cdi/README.md | 2 +-
.../distcache/CacheInvalidationReceiver.java | 13 +-
.../quarkus/distcache/CacheInvalidationSender.java | 25 +-
.../distcache/TestCacheInvalidationReceiver.java | 64 +-
.../distcache/TestCacheInvalidationSender.java | 112 +-
.../nosql/persistence/cdi/quarkus/build.gradle.kts | 3 +
.../nosql/quarkus/backend/BackendProvider.java | 2 +-
.../nosql/quarkus/backend/TestBackendProvider.java | 61 +
.../persistence/nosql/inmemory/SerializedObj.java | 13 +-
.../nosql/inmemory/TestInMemoryBackend.java | 29 +-
.../nosql/persistence/db/mongodb/build.gradle.kts | 3 +
.../persistence/nosql/mongodb/MongoDbBackend.java | 6 +-
.../nosql/mongodb/MongoDbBackendTestFactory.java | 3 +
.../nosql/mongodb/Dockerfile-mongodb-version | 2 +-
.../docker/mongodb-3-nodes/docker-compose.yml | 6 +-
.../nosql/impl/PersistenceImplementation.java | 15 +-
.../nosql/impl/cache/CaffeineCacheBackend.java | 2 +-
.../nosql/impl/commits/CommitsImpl.java | 30 +-
.../nosql/impl/TestPersistenceImplementation.java | 57 +
.../nosql/impl/AbstractPersistenceTests.java | 50 +-
.../api/MaintenanceRunInProgressException.java | 23 +-
.../nosql/maintenance/api/MaintenanceService.java | 7 +-
.../maintenance/impl/MaintenanceServiceImpl.java | 22 +-
.../maintenance/impl/RetainedCollectorImpl.java | 7 +-
.../nosql/maintenance/impl/TestMaintenance.java | 107 +-
.../maintenance/TestCatalogMaintenance.java | 7 +-
.../nosql/metastore/NoSqlMetaStore.java | 77 +-
.../nosql/metastore/NoSqlMetaStoreManager.java | 16 +-
.../nosql/metastore/mutation/GrantsMutation.java | 24 +
.../metastore/mutation/PrincipalMutations.java | 6 +-
.../nosql/metastore/TestNoSqlMetaStoreManager.java | 151 ++
.../testextension/PersistenceTestExtension.java | 46 +-
.../TestPersistenceTestExtension.java | 185 ++
.../relational/jdbc/DatasourceOperations.java | 7 +-
.../relational/jdbc/JdbcBasePersistenceImpl.java | 15 +-
.../jdbc/JdbcMetaStoreManagerFactory.java | 177 +-
.../RelationalJdbcProductionReadinessChecks.java | 19 +-
.../RelationalJdbcIdempotencyStorePostgresIT.java | 6 +-
plugins/pluginlibs.versions.toml | 24 -
plugins/spark/README.md | 8 +-
.../getting-started/notebooks/SparkPolaris.ipynb | 2 +-
plugins/spark/v3.5/integration/build.gradle.kts | 10 +-
.../polaris/spark/quarkus/it/SparkDeltaIT.java | 55 +-
.../polaris/spark/quarkus/it/SparkHudiIT.java | 10 +-
.../apache/polaris/spark/quarkus/it/SparkIT.java | 68 -
.../spark/v3.5/regtests/suites/spark_sql_delta.ref | 2 +-
.../spark/v3.5/regtests/suites/spark_sql_hudi.ref | 2 +-
plugins/spark/v3.5/spark/build.gradle.kts | 8 +-
.../polaris/spark/utils/PolarisCatalogUtils.java | 1 +
.../org/apache/polaris/spark/SparkCatalogTest.java | 1 +
polaris-core/build.gradle.kts | 3 +-
.../apache/polaris/core/PolarisCallContext.java | 17 +-
.../polaris/core/auth/AuthorizationDecision.java | 2 +-
.../polaris/core/auth/AuthorizationRequest.java | 23 +-
.../polaris/core/auth/AuthorizationState.java | 6 +-
.../core/auth/AuthorizationTargetBinding.java | 8 +-
.../core/auth/PolarisAuthorizableOperation.java | 1 +
.../polaris/core/auth/PolarisAuthorizer.java | 25 +-
.../polaris/core/auth/PolarisAuthorizerImpl.java | 36 +-
.../polaris/core/auth/PolarisGrantManager.java | 54 +-
.../polaris/core/auth/PolarisSecretsManager.java | 25 +-
.../apache/polaris/core/auth/PolarisSecurable.java | 15 +-
.../polaris/core/auth/RbacOperationSemantics.java | 4 +-
.../polaris/core/config/FeatureConfiguration.java | 139 +-
.../polaris/core/config/PolarisConfiguration.java | 4 +-
.../core/config/PolarisConfigurationStore.java | 26 +-
.../apache/polaris/core/config/RealmConfig.java | 2 +-
.../polaris/core/config/RealmConfigImpl.java | 2 +-
.../core/config/RealmConfigurationSource.java | 7 +-
.../connection/AuthenticationParametersDpo.java | 8 +-
.../core/connection/AuthenticationType.java | 5 +-
.../BearerAuthenticationParametersDpo.java | 10 +-
.../core/connection/ConnectionConfigInfoDpo.java | 65 +-
.../polaris/core/connection/ConnectionType.java | 8 +-
...po.java => GcpAuthenticationParametersDpo.java} | 49 +-
.../ImplicitAuthenticationParametersDpo.java | 6 +-
.../OAuthClientCredentialsParametersDpo.java | 20 +-
.../SigV4AuthenticationParametersDpo.java | 12 +-
.../BigQueryMetastoreConnectionConfigInfoDpo.java} | 77 +-
.../hadoop/HadoopConnectionConfigInfoDpo.java | 18 +-
.../hive/HiveConnectionConfigInfoDpo.java | 18 +-
.../iceberg/IcebergCatalogPropertiesProvider.java | 4 +-
.../IcebergRestConnectionConfigInfoDpo.java | 52 +-
.../polaris/core/context/RequestIdSupplier.java | 5 +-
.../connection/ConnectionCredentialVendor.java | 6 +-
.../apache/polaris/core/entity/CatalogEntity.java | 33 +-
.../polaris/core/entity/CatalogRoleEntity.java | 2 +-
.../polaris/core/entity/NamespaceEntity.java | 2 +-
.../apache/polaris/core/entity/PolarisEntity.java | 8 +-
.../polaris/core/entity/PolarisEntitySubType.java | 2 +-
.../polaris/core/entity/PolarisEntityType.java | 2 +-
.../polaris/core/entity/PolarisEntityUtils.java | 23 +-
.../apache/polaris/core/entity/PolarisEvent.java | 2 +-
.../polaris/core/entity/PolarisEventManager.java | 4 +-
.../core/entity/PolarisPrincipalSecrets.java | 2 +-
.../polaris/core/entity/PolarisPrivilege.java | 22 +-
.../polaris/core/entity/PrincipalEntity.java | 2 +-
.../polaris/core/entity/PrincipalRoleEntity.java | 2 +-
.../org/apache/polaris/core/entity/TaskEntity.java | 2 +-
.../core/entity/table/GenericTableEntity.java | 2 +-
.../core/entity/table/IcebergTableLikeEntity.java | 6 +-
.../polaris/core/entity/table/TableLikeEntity.java | 4 +-
.../core/exceptions/CommitConflictException.java | 4 +
.../polaris/core/identity/ServiceIdentityType.java | 4 +-
.../AwsIamServiceIdentityCredential.java | 14 +-
.../credential/ServiceIdentityCredential.java | 14 +-
.../identity/dpo/AwsIamServiceIdentityInfoDpo.java | 6 +-
.../core/identity/dpo/ServiceIdentityInfoDpo.java | 6 +-
.../identity/provider/ServiceIdentityProvider.java | 8 +-
.../AtomicOperationMetaStoreManager.java | 318 ++--
.../core/persistence/BaseMetaStoreManager.java | 22 +-
.../polaris/core/persistence/BasePersistence.java | 103 +-
.../core/persistence/IntegrationPersistence.java | 53 +-
.../LocalPolarisMetaStoreManagerFactory.java | 16 +-
.../core/persistence/PolarisMetaStoreManager.java | 160 +-
.../core/persistence/PolarisObjectMapperUtil.java | 2 +-
.../persistence/PolarisResolvedPathWrapper.java | 4 +-
.../persistence/PrincipalSecretsGenerator.java | 6 +-
.../core/persistence/ResolvedPolarisEntity.java | 10 +-
.../TransactionWorkspaceMetaStoreManager.java | 246 +--
.../persistence/bootstrap/RootCredentialsSet.java | 2 +-
.../core/persistence/cache/EntityCache.java | 29 +-
.../persistence/cache/EntityCacheLookupResult.java | 2 +-
.../persistence/cache/InMemoryEntityCache.java | 42 +-
.../core/persistence/dao/entity/BaseResult.java | 8 +-
.../dao/entity/ChangeTrackingResult.java | 10 +-
.../dao/entity/CreateCatalogResult.java | 14 +-
.../dao/entity/CreatePrincipalResult.java | 14 +-
.../persistence/dao/entity/DropEntityResult.java | 8 +-
.../persistence/dao/entity/EntitiesResult.java | 8 +-
.../core/persistence/dao/entity/EntityResult.java | 13 +-
.../persistence/dao/entity/EntityWithPath.java | 6 +-
.../dao/entity/GenerateEntityIdResult.java | 10 +-
.../persistence/dao/entity/ListEntitiesResult.java | 6 +-
.../persistence/dao/entity/LoadGrantsResult.java | 10 +-
.../dao/entity/LoadPolicyMappingsResult.java | 12 +-
.../dao/entity/PolicyAttachmentResult.java | 12 +-
.../dao/entity/PrincipalSecretsResult.java | 12 +-
.../persistence/dao/entity/PrivilegeResult.java | 10 +-
.../dao/entity/ResolvedEntitiesResult.java | 6 +-
.../dao/entity/ResolvedEntityResult.java | 8 +-
.../dao/entity/ScopedCredentialsResult.java | 6 +-
.../persistence/metrics/MetricsPersistence.java | 6 +-
.../persistence/metrics/MetricsRecordIdentity.java | 14 +-
.../persistence/metrics/PolarisMetricsManager.java | 6 +-
.../core/persistence/pagination/EntityIdToken.java | 2 +-
.../polaris/core/persistence/pagination/Page.java | 2 +-
.../core/persistence/pagination/PageToken.java | 2 +-
.../core/persistence/pagination/PageTokenUtil.java | 2 +-
.../resolver/PolarisResolutionManifest.java | 2 +-
.../PolarisResolutionManifestCatalogView.java | 2 +-
.../resolver/ResolutionManifestFactory.java | 9 +-
.../resolver/ResolutionManifestFactoryImpl.java | 14 +-
.../core/persistence/resolver/Resolver.java | 54 +-
.../core/persistence/resolver/ResolverFactory.java | 6 +-
.../AbstractTransactionalPersistence.java | 174 +-
.../transactional/PolarisEntityResolver.java | 34 +-
.../TransactionalMetaStoreManagerImpl.java | 578 +++---
.../transactional/TransactionalPersistence.java | 151 +-
.../transactional/TreeMapMetaStore.java | 12 +-
.../TreeMapTransactionalPersistenceImpl.java | 160 +-
.../core/policy/PolarisPolicyMappingManager.java | 42 +-
.../apache/polaris/core/policy/PolicyEntity.java | 2 +-
.../core/policy/PolicyMappingPersistence.java | 30 +-
.../org/apache/polaris/core/policy/PolicyType.java | 2 +-
.../polaris/core/policy/PredefinedPolicyTypes.java | 2 +-
.../TransactionalPolicyMappingPersistence.java | 32 +-
.../apache/polaris/core/rest/NamespaceUtils.java | 13 +
.../polaris/core/rest/PolarisResourcePaths.java | 38 +-
.../polaris/core/secrets/SecretReference.java | 12 +-
.../core/secrets/UnsafeInMemorySecretsManager.java | 12 +-
.../polaris/core/secrets/UserSecretsManager.java | 15 +-
.../core/storage/InMemoryStorageIntegration.java | 20 +-
.../polaris/core/storage/LocationRestrictions.java | 6 +-
.../core/storage/PolarisCredentialVendor.java | 29 +-
.../storage/PolarisStorageConfigurationInfo.java | 8 +-
.../core/storage/PolarisStorageIntegration.java | 22 +-
.../storage/PolarisStorageIntegrationProvider.java | 2 +-
.../core/storage/StorageCredentialsVendor.java | 24 +-
.../polaris/core/storage/StorageLocation.java | 6 +-
.../apache/polaris/core/storage/StorageUri.java | 56 +
.../apache/polaris/core/storage/StorageUtil.java | 27 +-
.../aws/AwsCredentialsStorageIntegration.java | 85 +-
.../storage/aws/AwsRoleSessionNameSanitizer.java | 18 +-
.../core/storage/aws/AwsSessionNameBuilder.java | 132 ++
.../storage/aws/AwsStorageConfigurationInfo.java | 2 +-
.../polaris/core/storage/aws/S3Location.java | 4 +-
.../polaris/core/storage/aws/SessionNameField.java | 104 ++
.../core/storage/aws/StsClientProvider.java | 2 +-
.../azure/AzureCredentialsStorageIntegration.java | 12 +-
.../polaris/core/storage/azure/AzureLocation.java | 6 +-
.../azure/AzureStorageConfigurationInfo.java | 2 +-
.../core/storage/cache/StorageCredentialCache.java | 53 +-
.../storage/cache/StorageCredentialCacheKey.java | 5 +-
.../gcp/GcpCredentialsStorageIntegration.java | 89 +-
.../storage/gcp/GcpStorageConfigurationInfo.java | 2 +-
.../connection/ConnectionConfigInfoDpoTest.java | 53 +
.../GcpAuthenticationParametersDpoTest.java | 82 +
.../IcebergRestConnectionConfigInfoDpoTest.java | 70 +
.../core/entity/PolarisEntityUtilsTest.java | 24 +
...AtomicOperationMetaStoreManagerRefreshTest.java | 186 ++
...TreeMapAtomicOperationMetaStoreManagerTest.java | 9 +
.../storage/InMemoryStorageIntegrationTest.java | 12 +-
.../storage/PolarisConfigurationStoreTest.java | 12 +-
.../polaris/core/storage/StorageUriTest.java | 76 +
.../aws/AwsCredentialsStorageIntegrationTest.java | 344 +++-
.../storage/aws/AwsSessionNameBuilderTest.java | 246 +++
.../core/storage/aws/SessionNameFieldTest.java | 87 +
.../storage/cache/StorageCredentialCacheTest.java | 133 +-
.../gcp/GcpCredentialsStorageIntegrationTest.java | 135 ++
.../BasePolarisMetaStoreManagerTest.java | 27 +
.../polaris/core/persistence/BaseResolverTest.java | 6 +-
.../persistence/PolarisTestMetaStoreManager.java | 114 +-
regtests/Dockerfile | 20 +-
regtests/README.md | 62 +-
regtests/docker-compose.yml | 51 +-
regtests/minio-setup.sh | 47 -
regtests/notebook_requirements.txt | 2 +-
regtests/run.sh | 49 +-
regtests/s3-setup.sh | 59 +
regtests/setup.sh | 79 +-
regtests/t_pyspark/src/conftest.py | 28 +-
regtests/t_pyspark/src/iceberg_spark.py | 4 +-
.../src/test_spark_sql_s3_with_privileges.py | 66 +-
.../t_spark_sql/ref/spark_sql_azure_blob.sh.ref | 2 +-
.../t_spark_sql/ref/spark_sql_azure_dfs.sh.ref | 2 +-
regtests/t_spark_sql/ref/spark_sql_basic.sh.ref | 2 +-
regtests/t_spark_sql/ref/spark_sql_gcp.sh.ref | 2 +-
regtests/t_spark_sql/ref/spark_sql_s3.sh.ref | 2 +-
regtests/t_spark_sql/ref/spark_sql_views.sh.ref | 2 +-
regtests/t_spark_sql/src/spark_sql_s3.sh | 21 +-
releasey/libs/_constants.sh | 1 +
releasey/libs/_exec.sh | 12 +-
releasey/libs/_version.sh | 4 +-
runtime/admin/distribution/LICENSE | 25 +-
runtime/admin/src/main/docker/Dockerfile.jvm | 2 +-
.../org/apache/polaris/admintool/BaseCommand.java | 1 +
.../apache/polaris/admintool/BootstrapCommand.java | 2 +-
.../maintenance/NoSqlMaintenanceRunCommand.java | 38 +-
.../nosql/TestNoSqlMaintenanceRunCommand.java | 157 ++
.../polaris/admintool/Dockerfile-postgres-version | 2 +-
.../src/main/resources/application.properties | 48 +-
runtime/server/build.gradle.kts | 16 +-
runtime/server/distribution/LICENSE | 296 ++-
runtime/server/src/main/docker/Dockerfile.jvm | 2 +-
.../service/storage/gcp/ProtobufSmokeTest.java} | 23 +-
runtime/service/README.md | 8 +
runtime/service/build.gradle.kts | 2 +
.../it/GcpCatalogFederationIntegrationIT.java | 276 +++
.../service/it/RestCatalogMinIOSpecialIT.java | 36 +
.../polaris/service/it/RestCatalogViewFileIT.java | 16 +-
.../polaris/service/admin/PolarisAdminService.java | 104 +-
.../PolarisCatalogsEventServiceDelegator.java | 428 +++--
...PolarisPrincipalRolesEventServiceDelegator.java | 266 +--
.../PolarisPrincipalsEventServiceDelegator.java | 279 +--
.../auth/DefaultPolarisAuthorizerFactory.java | 11 +-
.../CatalogGenericTableEventServiceDelegator.java | 164 +-
.../generic/GenericTableCatalogAdapter.java | 11 +-
.../catalog/iceberg/CatalogHandlerUtils.java | 26 +-
.../service/catalog/iceberg/IcebergCatalog.java | 363 ++--
.../catalog/iceberg/IcebergCatalogAdapter.java | 63 +-
.../catalog/iceberg/IcebergCatalogHandler.java | 33 +-
.../IcebergRestCatalogEventServiceDelegator.java | 1042 ++++++-----
...bergRestConfigurationEventServiceDelegator.java | 26 +-
.../policy/CatalogPolicyEventServiceDelegator.java | 318 ++--
.../catalog/validation/EntityNameValidator.java | 63 +
.../service/config/ProductionReadinessChecks.java | 31 +
.../polaris/service/config/ServiceProducers.java | 46 +-
.../polaris/service/events/EventAttributes.java | 3 +
.../service/events/PolarisEventDispatcher.java | 2 +
.../events/PolarisEventListenerConfiguration.java | 30 +-
.../service/events/PolarisEventListeners.java | 58 +-
.../polaris/service/events/PolarisEventType.java | 332 ++--
.../events/PolarisServiceBusEventDispatcher.java | 10 +-
.../aws/cloudwatch/AwsCloudWatchEventListener.java | 4 -
.../inmemory/InMemoryBufferEventListener.java | 4 +
...moryAtomicOperationMetaStoreManagerFactory.java | 8 +-
.../InMemoryPolarisMetaStoreManagerFactory.java | 16 +-
.../service/ratelimiter/RateLimiterFilter.java | 32 +-
.../polaris/service/task/TaskExecutorImpl.java | 34 +-
.../admin/PolarisS3InteroperabilityTest.java | 10 +-
.../AbstractPolarisGenericTableCatalogTest.java | 1 -
.../iceberg/AbstractIcebergCatalogTest.java | 139 +-
.../iceberg/CommitTransactionEventTest.java | 7 +
.../iceberg/IcebergAllowedLocationTest.java | 143 ++
.../catalog/iceberg/IcebergCatalogTest.java | 142 ++
.../iceberg/IcebergOverlappingTableTest.java | 253 +++
.../service/catalog/io/FileIOExceptionsTest.java | 22 +-
.../catalog/policy/AbstractPolicyCatalogTest.java | 1 -
.../validation/EntityNameValidatorTest.java | 138 ++
.../DefaultPolarisCredentialManagerTest.java | 10 +-
.../service/credentials/TestObjectFactory.java} | 26 +-
.../BearerConnectionCredentialVendorTest.java | 9 +-
.../ImplicitConnectionCredentialVendorTest.java | 5 +-
.../OAuthClientCredentialVendorTest.java | 9 +-
.../SigV4ConnectionCredentialVendorTest.java | 13 +-
...rsistenceDistCacheInvalidationsIntegration.java | 98 +-
.../PolarisEventListenerOldConfigurationTest.java | 1 +
...PolarisEventListenersMultipleListenersTest.java | 88 -
.../service/events/PolarisEventListenersTest.java | 260 +++
...InMemoryBufferEventListenerIntegrationTest.java | 4 +-
.../it/RestCatalogViewFileIntegrationTest.java | 13 -
.../service/ratelimiter/RateLimiterFilterTest.java | 27 +
.../service/test/TestEnvironmentExtension.java | 2 +-
.../org/apache/polaris/service/TestServices.java | 47 +-
.../events/listeners/InMemoryEventCollector.java | 5 +
.../apache/polaris/service/it/ServerManager.java | 11 +-
runtime/spark-tests/build.gradle.kts | 21 +
.../service/spark/it/HiveCatalogFederationIT.java | 108 ++
.../spark-tests/src/main/resources/core-site.xml | 53 +
.../test/commons/Dockerfile-cockroachdb-version | 2 +-
.../test/commons/Dockerfile-postgres-version | 2 +-
.../commons/keycloak/Dockerfile-keycloak-version | 2 +-
server-templates/pojo.mustache | 4 +-
settings.gradle.kts | 7 +-
site/bin/check-release-doc-links.sh | 56 +
site/content/_index.adoc | 2 +-
.../blog/2025/09/15/doris-polaris-integration.md | 3 +-
site/content/blog/2026/01/06/lance-integration.md | 4 +-
...-open-data-lakehouse-k3d-ozone-polaris-trino.md | 7 -
site/content/community/meetings/_index.adoc | 24 +-
.../release-guides/manual-release-guide.md | 19 +
.../release-guides/semi-automated-release-guide.md | 19 +
.../security-advisories/CVE-2026-42809.md | 49 +
.../security-advisories/CVE-2026-42810.md | 81 +
.../security-advisories/CVE-2026-42811.md | 84 +
.../security-advisories/CVE-2026-42812.md | 93 +
site/content/community/security-report.md | 7 +-
site/content/docs/_index.md | 2 +
site/content/downloads/1.4.0/index.md | 106 ++
site/content/downloads/1.4.1/index.md | 56 +
site/content/downloads/1.5.0/index.md | 76 +
site/content/downloads/latest/index.md | 2 +-
.../assets/postgres/docker-compose-postgres.yml | 2 +-
site/content/guides/ceph/docker-compose.yml | 4 +-
site/content/guides/jdbc/docker-compose.yml | 4 +-
site/content/guides/keycloak/docker-compose.yml | 4 +-
site/content/guides/keycloak/index.md | 4 +-
site/content/guides/minio/docker-compose.yml | 5 +-
site/content/guides/minio/index.md | 6 +-
site/content/guides/ozone/docker-compose.yml | 2 +-
site/content/guides/quickstart/docker-compose.yml | 17 +-
site/content/guides/quickstart/index.md | 52 +-
site/content/guides/rustfs/docker-compose.yml | 7 +-
site/content/guides/rustfs/index.md | 7 +-
site/content/guides/spark/notebooks/Dockerfile | 9 +-
site/content/guides/telemetry/docker-compose.yml | 6 +-
site/content/in-dev/unreleased/_index.md | 11 +-
site/content/in-dev/unreleased/admin-tool.md | 9 +-
.../in-dev/unreleased/command-line-interface.md | 1013 +++++-----
.../config-sections/flags-polaris_features.md | 27 +-
.../smallrye-polaris_event_listener.md | 6 +-
.../configuring-polaris-for-production/_index.md | 10 +
site/content/in-dev/unreleased/entities.md | 17 +
.../federation/bigquery-metastore-federation.md | 139 ++
.../federation/hive-metastore-federation.md | 22 +
.../federation/iceberg-rest-federation.md | 14 +-
site/content/in-dev/unreleased/generic-table.md | 2 +-
.../getting-started/binary-distribution.md | 11 +-
.../unreleased/getting-started/quick-start.md | 20 +-
.../content/in-dev/unreleased/helm-chart/_index.md | 2 +-
.../in-dev/unreleased/helm-chart/reference.md | 1 +
.../unreleased/managing-security/access-control.md | 7 +
.../managing-security/external-pdp/opa.md | 2 +-
site/content/tools/_index.md | 8 +-
site/content/tools/iceberg-catalog-migrator.md | 4 +
site/content/tools/polaris-benchmarks.md | 4 +
site/content/tools/polaris-console.md | 4 +
site/content/tools/polaris-mcp-server.md | 4 +
site/content/tools/polaris-synchronizer.md | 4 +
site/docker/Dockerfile | 2 +-
site/hugo.yaml | 5 +-
site/it/site_checks/markdown_testing.py | 2 +-
site/layouts/guides/baseof.html | 12 +-
site/layouts/partials/sidebar-docs-tree.html | 43 +-
site/layouts/partials/version-banner.html | 41 +
site/layouts/shortcodes/docs-list.html | 3 -
.../layouts/shortcodes/include-config-section.html | 8 +-
site/static/.htaccess | 4 +-
site/static/img/artifacthub-badge.svg | 1 +
.../generated/bundled-polaris-catalog-service.yaml | 472 +++--
spec/iceberg-rest-catalog-open-api.yaml | 473 ++++-
spec/polaris-catalog-service.yaml | 3 +
spec/polaris-management-service.yml | 26 +
.../src/test/java/tests/smallrye/LargeEnum.java | 25 +-
.../build.gradle.kts | 5 -
.../org/apache/polaris/test/hms/HmsContainer.java | 125 ++
.../apache/polaris/test/hms/Dockerfile-hms-version | 4 +-
.../apache/polaris/test/minio/MinioExtension.java | 5 +-
.../polaris/test/rustfs/RustfsContainer.java | 28 +-
.../polaris/test/rustfs/RustfsExtension.java | 5 +-
tools/verify-release/verify-release.sh | 2 +-
version.txt | 2 +-
533 files changed, 20780 insertions(+), 7374 deletions(-)
copy persistence/nosql/async/README.md => .github/copilot-instructions.md (54%)
copy SECURITY.md => .github/instructions/generated-files.instructions.md (56%)
create mode 100644 .github/instructions/polaris-review-omissions.instructions.md
create mode 100755 .github/scripts/check-copilot-instructions.sh
delete mode 100644 .github/workflows/ci-asf-allowlist-check.yml
delete mode 100644 .github/workflows/ci-codeql.yml
create mode 100644 .github/workflows/ci-security.yml
delete mode 100644 .github/workflows/ci-zizmor.yml
create mode 100644 AGENTS.md
create mode 100644 build-logic/src/main/kotlin/licenses/QuarkusAppDependencyFilter.kt
create mode 100644 client/python/apache_polaris/cli/exceptions.py
rename client/python/{test => tests}/cli_test_utils.py (96%)
rename client/python/{test => tests}/test_catalog_roles_command.py (100%)
rename client/python/{test => tests}/test_catalogs_command.py (100%)
create mode 100644 client/python/tests/test_cli_exceptions.py
rename client/python/{test => tests}/test_find_command.py (100%)
rename client/python/{test => tests}/test_namespaces_command.py (100%)
rename client/python/{test => tests}/test_parser_basic.py (87%)
rename client/python/{test => tests}/test_policies_command.py (64%)
rename client/python/{test => tests}/test_principal_roles_command.py (100%)
rename client/python/{test => tests}/test_principals_command.py (100%)
rename client/python/{test => tests}/test_privileges_command.py (75%)
rename client/python/{test => tests}/test_profiles_command.py (66%)
rename client/python/{test => tests}/test_setup_command.py (100%)
rename client/python/{test => tests}/test_tables_command.py (100%)
create mode 100644 extensions/auth/ranger/impl/README.md
copy {persistence/nosql/nodes/api => extensions/auth/ranger/impl}/build.gradle.kts (63%)
create mode 100644 extensions/auth/ranger/impl/src/main/java/org/apache/polaris/extension/auth/ranger/RangerPolarisAuthorizer.java
copy runtime/service/src/main/java/org/apache/polaris/service/auth/AuthenticationConfiguration.java => extensions/auth/ranger/impl/src/main/java/org/apache/polaris/extension/auth/ranger/RangerPolarisAuthorizerConfig.java (50%)
create mode 100644 extensions/auth/ranger/impl/src/main/java/org/apache/polaris/extension/auth/ranger/RangerPolarisAuthorizerFactory.java
create mode 100644 extensions/auth/ranger/impl/src/main/java/org/apache/polaris/extension/auth/ranger/RangerPolarisOperationSemantics.java
create mode 100644 extensions/auth/ranger/impl/src/main/java/org/apache/polaris/extension/auth/ranger/utils/RangerUtils.java
create mode 100644 extensions/auth/ranger/impl/src/test/java/org/apache/polaris/extension/auth/ranger/RangerPolarisAuthorizerFactoryTest.java
create mode 100644 extensions/auth/ranger/impl/src/test/java/org/apache/polaris/extension/auth/ranger/RangerPolarisAuthorizerTest.java
create mode 100644 extensions/auth/ranger/impl/src/test/java/org/apache/polaris/extension/auth/ranger/RangerTestUtils.java
create mode 100644 extensions/auth/ranger/impl/src/test/resources/authz_tests/dev_polaris.json
create mode 100644 extensions/auth/ranger/impl/src/test/resources/authz_tests/tests_authz_catalog.json
create mode 100644 extensions/auth/ranger/impl/src/test/resources/authz_tests/tests_authz_namespace.json
create mode 100644 extensions/auth/ranger/impl/src/test/resources/authz_tests/tests_authz_policy.json
create mode 100644 extensions/auth/ranger/impl/src/test/resources/authz_tests/tests_authz_principal.json
create mode 100644 extensions/auth/ranger/impl/src/test/resources/authz_tests/tests_authz_root.json
create mode 100644 extensions/auth/ranger/impl/src/test/resources/authz_tests/tests_authz_table.json
create mode 100644 extensions/auth/ranger/impl/src/test/resources/authz_tests/tests_authz_unsupported.json
copy extensions/auth/{opa => ranger}/tests/build.gradle.kts (89%)
copy extensions/auth/{opa/tests/src/intTest/java/org/apache/polaris/extension/auth/opa/test/OpaAdminServiceIT.java => ranger/tests/src/intTest/java/org/apache/polaris/extension/auth/ranger/test/RangerAdminServiceIT.java} (85%)
copy extensions/auth/{opa/tests/src/intTest/java/org/apache/polaris/extension/auth/opa/test/OpaGenericTableHandlerIT.java => ranger/tests/src/intTest/java/org/apache/polaris/extension/auth/ranger/test/RangerGenericTableHandlerIT.java} (89%)
copy extensions/auth/{opa/tests/src/intTest/java/org/apache/polaris/extension/auth/opa/test/OpaIcebergCatalogHandlerIT.java => ranger/tests/src/intTest/java/org/apache/polaris/extension/auth/ranger/test/RangerIcebergCatalogHandlerIT.java} (92%)
create mode 100644 extensions/auth/ranger/tests/src/intTest/java/org/apache/polaris/extension/auth/ranger/test/RangerIntegrationTest.java
copy extensions/auth/{opa/tests/src/intTest/java/org/apache/polaris/extension/auth/opa/test/OpaIntegrationTestBase.java => ranger/tests/src/intTest/java/org/apache/polaris/extension/auth/ranger/test/RangerIntegrationTestBase.java} (84%)
copy extensions/auth/{opa/tests/src/intTest/java/org/apache/polaris/extension/auth/opa/test/OpaPolicyCatalogHandlerIT.java => ranger/tests/src/intTest/java/org/apache/polaris/extension/auth/ranger/test/RangerPolicyCatalogHandlerIT.java} (91%)
copy runtime/service/src/intTest/java/org/apache/polaris/service/it/ServiceProducersIT.java => extensions/auth/ranger/tests/src/intTest/java/org/apache/polaris/extension/auth/ranger/test/RangerPolicyConditionIT.java (54%)
create mode 100644 extensions/auth/ranger/tests/src/intTest/java/org/apache/polaris/extension/auth/ranger/test/RangerTestProfiles.java
create mode 100644 extensions/auth/ranger/tests/src/intTest/resources/authz_it_tests/dev_polaris.json
create mode 100644 extensions/auth/ranger/tests/src/intTest/resources/authz_it_tests/dev_polaris_roles.json
create mode 100644 extensions/auth/ranger/tests/src/intTest/resources/authz_it_tests/dev_polaris_userstore.json
copy {tools/container-spec-helper => extensions/federation/bigquery}/build.gradle.kts (66%)
copy extensions/federation/{hadoop/src/main/java/org/apache/polaris/extensions/federation/hadoop/HadoopFederatedCatalogFactory.java => bigquery/src/main/java/org/apache/polaris/extensions/federation/bigquery/BigQueryMetastoreFederatedCatalogFactory.java} (61%)
create mode 100644 integration-tests/src/main/java/org/apache/polaris/service/it/test/HiveCatalogFederationIntegrationTest.java
create mode 100644 persistence/nosql/authz/api/src/test/java/org/apache/polaris/persistence/nosql/authz/api/TestPrivilegeSet.java
create mode 100644 persistence/nosql/persistence/api/src/test/java/org/apache/polaris/persistence/nosql/api/TestStreamUtil.java
create mode 100644 persistence/nosql/persistence/cdi/quarkus/src/test/java/org/apache/polaris/persistence/nosql/quarkus/backend/TestBackendProvider.java
copy runtime/service/src/test/java/org/apache/polaris/service/events/PolarisEventTypeTest.java => persistence/nosql/persistence/db/inmemory/src/test/java/org/apache/polaris/persistence/nosql/inmemory/TestInMemoryBackend.java (53%)
create mode 100644 persistence/nosql/persistence/impl/src/test/java/org/apache/polaris/persistence/nosql/impl/TestPersistenceImplementation.java
copy runtime/service/src/main/java/org/apache/polaris/service/events/FallbackEventListenerTypeConfigInterceptor.java => persistence/nosql/persistence/maintenance/api/src/main/java/org/apache/polaris/persistence/nosql/maintenance/api/MaintenanceRunInProgressException.java (55%)
create mode 100644 persistence/nosql/persistence/testextension/src/test/java/org/apache/polaris/persistence/nosql/testextension/TestPersistenceTestExtension.java
delete mode 100644 plugins/pluginlibs.versions.toml
copy polaris-core/src/main/java/org/apache/polaris/core/connection/{ImplicitAuthenticationParametersDpo.java => GcpAuthenticationParametersDpo.java} (51%)
copy polaris-core/src/main/java/org/apache/polaris/core/connection/{hive/HiveConnectionConfigInfoDpo.java => bigquery/BigQueryMetastoreConnectionConfigInfoDpo.java} (63%)
create mode 100644 polaris-core/src/main/java/org/apache/polaris/core/storage/StorageUri.java
create mode 100644 polaris-core/src/main/java/org/apache/polaris/core/storage/aws/AwsSessionNameBuilder.java
create mode 100644 polaris-core/src/main/java/org/apache/polaris/core/storage/aws/SessionNameField.java
create mode 100644 polaris-core/src/test/java/org/apache/polaris/core/connection/GcpAuthenticationParametersDpoTest.java
create mode 100644 polaris-core/src/test/java/org/apache/polaris/core/connection/iceberg/IcebergRestConnectionConfigInfoDpoTest.java
create mode 100644 polaris-core/src/test/java/org/apache/polaris/core/persistence/AtomicOperationMetaStoreManagerRefreshTest.java
create mode 100644 polaris-core/src/test/java/org/apache/polaris/core/storage/StorageUriTest.java
create mode 100644 polaris-core/src/test/java/org/apache/polaris/core/storage/aws/AwsSessionNameBuilderTest.java
create mode 100644 polaris-core/src/test/java/org/apache/polaris/core/storage/aws/SessionNameFieldTest.java
delete mode 100644 regtests/minio-setup.sh
create mode 100644 regtests/s3-setup.sh
create mode 100644 runtime/admin/src/test/java/org/apache/polaris/admintool/nosql/TestNoSqlMaintenanceRunCommand.java
copy runtime/{service/src/test/java/org/apache/polaris/service/events/PolarisEventTypeTest.java => server/src/test/java/org/apache/polaris/service/storage/gcp/ProtobufSmokeTest.java} (57%)
create mode 100644 runtime/service/src/cloudTest/java/org/apache/polaris/service/it/GcpCatalogFederationIntegrationIT.java
rename {polaris-core/src/main/java/org/apache/polaris/core => runtime/service/src/main/java/org/apache/polaris/service}/auth/DefaultPolarisAuthorizerFactory.java (70%)
create mode 100644 runtime/service/src/main/java/org/apache/polaris/service/catalog/validation/EntityNameValidator.java
create mode 100644 runtime/service/src/test/java/org/apache/polaris/service/catalog/iceberg/IcebergCatalogTest.java
create mode 100644 runtime/service/src/test/java/org/apache/polaris/service/catalog/validation/EntityNameValidatorTest.java
copy runtime/service/src/{main/java/org/apache/polaris/service/credentials/CredentialVendorPriorities.java => test/java/org/apache/polaris/service/credentials/TestObjectFactory.java} (56%)
delete mode 100644 runtime/service/src/test/java/org/apache/polaris/service/events/PolarisEventListenersMultipleListenersTest.java
create mode 100644 runtime/service/src/test/java/org/apache/polaris/service/events/PolarisEventListenersTest.java
create mode 100644 runtime/spark-tests/src/intTest/java/org/apache/polaris/service/spark/it/HiveCatalogFederationIT.java
create mode 100644 runtime/spark-tests/src/main/resources/core-site.xml
create mode 100755 site/bin/check-release-doc-links.sh
create mode 100644 site/content/community/security-advisories/CVE-2026-42809.md
create mode 100644 site/content/community/security-advisories/CVE-2026-42810.md
create mode 100644 site/content/community/security-advisories/CVE-2026-42811.md
create mode 100644 site/content/community/security-advisories/CVE-2026-42812.md
create mode 100644 site/content/downloads/1.4.0/index.md
create mode 100644 site/content/downloads/1.4.1/index.md
create mode 100644 site/content/downloads/1.5.0/index.md
create mode 100644 site/content/in-dev/unreleased/federation/bigquery-metastore-federation.md
create mode 100644 site/layouts/partials/version-banner.html
create mode 100644 site/static/img/artifacthub-badge.svg
copy tools/{minio-testcontainer => hms-testcontainer}/build.gradle.kts (87%)
create mode 100644 tools/hms-testcontainer/src/main/java/org/apache/polaris/test/hms/HmsContainer.java
copy extensions/auth/opa/tests/src/intTest/resources/org/apache/polaris/extension/auth/opa/test/Dockerfile-opa-version => tools/hms-testcontainer/src/main/resources/org/apache/polaris/test/hms/Dockerfile-hms-version (92%)