Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,14 @@ All notable changes to this project will be documented in this file.
- nifi: Backport NIFI-15958 to log periodic progress while waiting for the content archive scan and provenance re-index, for `2.6.0`, `2.7.2`, and `2.9.0` ([#1611]).
- hbase: Add an SBOM for the web UI (npm) dependencies, which are unpacked from webjars and therefore not covered by the CycloneDX Maven plugin ([#1620]).
- trino: Add SBOMs for the web UI, both for the two npm projects behind it and for the pre-built JavaScript vendored into the source tree ([#1620]).
- hive: Restore the `get_table` and `get_table_objects_by_name` Thrift methods that HIVE-26537 removed in Hive 4.0.1, for `4.2.0` ([#1636]).
- hadoop, spark: Add SBOMs for the pre-built JavaScript that is vendored into the source tree for the HDFS and Spark web UIs ([#1620]).
- stats-exporter: Add `0.31.0` ([#1664]).

### Changed

- opensearch-dashboards: Bump cdxgen to 13.0.1 and pin the CycloneDX spec version to 1.6 ([#1600]).
- opa, statsd-exporter: Bump cyclonedx-gomod to 1.12.0 ([#1638]).

### Fixed

Expand Down Expand Up @@ -45,6 +48,13 @@ All notable changes to this project will be documented in this file.
- hbase: Exclude the optional npm dependencies from the web UI SBOM ([#1630]).
- airflow, superset: Create the Python SBOM from a separate environment, so that neither cyclonedx-bom nor its dependencies end up in the SBOM and in the image ([#1630]).
- airflow, superset: Add the missing purl to the Airflow and Superset packages in the Python SBOM. They are installed from a locally built wheel, and without a purl they show up twice in the image SBOM ([#1630]).
- opa, statsd-exporter: Detect the licenses of the Go dependencies ([#1638]).
- opa, statsd-exporter: Report the Go dependencies at module level instead of package and file
level ([#1638]).
- opensearch-dashboards: Generate the SBOM from the built distribution instead of the source
worktree, so dev dependencies are excluded ([#1641]).
- hive: Build against the Hive modules built alongside each other (in the same reactor) rather than the ones published on Maven Central, for `4.2.0`.
Upstream fixed one instance of this for Hive 4.3.0 in [HIVE-29827](https://issues.apache.org/jira/browse/HIVE-29827) but there are others. ([#1636]).

### Removed

Expand All @@ -61,6 +71,10 @@ All notable changes to this project will be documented in this file.
[#1623]: https://github.com/stackabletech/docker-images/pull/1623
[#1630]: https://github.com/stackabletech/docker-images/pull/1630
[#1635]: https://github.com/stackabletech/docker-images/pull/1635
[#1636]: https://github.com/stackabletech/docker-images/pull/1636
[#1638]: https://github.com/stackabletech/docker-images/pull/1638
[#1641]: https://github.com/stackabletech/docker-images/pull/1641
[#1664]: https://github.com/stackabletech/docker-images/pull/1664

## [26.7.0] - 2026-07-21

Expand Down
Loading
Loading