v1.6.0

1.6.0 (2026-06-30)

Features

• Support MCP 2026 draft specs (#3544) (d12eaa8)
• release: Add digital signature to Toolbox binaries (#3528) (3f0f0af)
• tool/cloud-storage: Configure object operation parameters (#3529) (d6dc5fe)
• tool/cloud-storage: Support configurable parameters (#3478) (bc2de2a)
• tools/dataplex-list-data-products: Add dataplex-list-data-products tool (#3337) (6dd669a)
• tools/dataplex-get-data-product: Add dataplex-get-data-product tool (#3499) (7ea7a09)
• tools/dataplex-list-data-assets: Add dataplex-list-data-assets tool (#3500) (182f933)
• tools/looker: Support complex filter_expression parameter in queries (#3494) (997fb8c)
• tools/looker: Support dynamic_fields parameter in queries (#3507) (cd22b89)

Bug Fixes

• tools/gda: Support mTLS and GOOGLE_API_USE_MTLS_ENDPOINT for GDA client (#3460) (cc2a61e)
• tools/looker-conversational-analytics: Validate explore_references shape instead of panicking (#3531) (b67419d)
• tool/looker-create-view-from-table: Correct Looker API payload structure (#3515) (18c539c)

OS/Architecture	Description	SHA256 Hash
linux/amd64 (Signature)	For Linux systems running on Intel/AMD 64-bit processors.	0cd6fa1773926a37e55c803542f16ef621eaea38b015ec9778dfaae9f30da302
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	feb567fb8416504004ff99acd4661278a88d70cc137681f6535a5e54469c6594
darwin/amd64	For macOS systems running on Intel processors.	fbb5af6b170431edb08741828a2581f9ee8548dd37c3e8222a3c2722f0007f32
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	3be7e587c86dd9dbdb593a380396f399358c179ce37aed3045b4c8bf42569394
windows/arm64	For Windows systems running on ARM 64-bit processors.	3c6345114032a0671a5b66764673124ec4c27b5b41d1816ea15ac8afb5ca7cdc

v1.5.0

1.5.0 (2026-06-18)

Features

• auth/google: Require audience or clientId for mcpEnabled (#3450) (59f7b6e)
• Enable per source level flags for sql commenter (#3465) (ecce6b7)
• mcp: Add URL parameter binding for HTTP transport (#3112) (0cc7b37)
• scylladb: Adding support for ScyllaDB source and tool (#3119) (2dada83)
• server: Add support for toolset filtering in prebuilt CLI flag (#3245) (7cc4f65)
• skills: Generate skills offline without live source connections (#3388) (4c860b6)
• skills: Tolerate missing env vars during offline skills-generate (#3399) (ea5d3e5)
• source/cloud-storage: Restrict bucket and local path access (#3454) (2c3ca5d)
• tools/bigquery: Add per tool query label in BigQuery jobs (#1975) (3f6a49f)
• tools/dataplex: Add tools to support metadata enrichment workflow (#3270) (05289aa)
• tools/mysql: Add show-query-stats and list-all-locks tools for MySQL and Cloud SQL MySQL source (#2954) (a9693bd)
• tools: Decouple tool initialization from sources (#3355) (32a24e3)

Bug Fixes

• auth/dataplex: Fix failing source with service account credentials (#3369) (ba4deef)
• bigquery: Wire maximumBytesBilled into prebuilt config (#3385) (4abbf6e)
• Bound MCP HTTP body size (#3216) (d4f4342)
• config: Add doc/line context to parse errors (#2957) (4b097da)
• Escape delimiter characters in applyEscape to prevent SQL injection (#2811) (932519a)
• npm: Source binary version from cmd/version.txt (#3417) (6ffbdec)
• prebuilt/alloydb-omni: Require password env var explicitly (#3398) (fcbe3e7)
• server: Fail if MCP auth is enabled together with enable-api (#3435) (a6ff910)
• server: Return errors instead of panicking in InitializeConfigs (#3397) (f48b01d)
• source/cloudhealthcare: Validate pageURL parameter to prevent SSRF (#3453) (9abf47d)
• source/dataplex,source/datalineage: Specify cloud-platform scope for default credentials (#3376) (13e8c36)
• source/http: Implement SSRF guard (#3448) (24d7d29)
• tool/bigquery-execute-sql: Prevent dataset restriction bypass (#3452) (ca6d5e3)
• tool/mysql-get-query-plan: Prevent query execution bypass and statement injection (#3235) (7ed1e7b)
• tool/spanner-sql,tool/spanner-execute-sql: Use read-only annotations when readOnly is set (#3338) (8bde0ec)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	7df2d9941ce34e53af0eacc74e09b29f6ac38543b010b637a0938f2dd2d75609
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	732da7bc161072073f8342dea376f7021711f3556f4153f160b8d0d58e097269
darwin/amd64	For macOS systems running on Intel processors.	3eae4f7786778ab07fcd5475763c9ffecdcfe1c77604b55aa8f27df20ccdc292
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	e9a598fc65dcde86bda89ad7fe4e7a4c7dbe8b916b656daf811cd42dd49dff2c
windows/arm64	For Windows systems running on ARM 64-bit processors.	ec43fc884dd9c8955335ac9259e9665206b12aa4f491504e00f28e3e8d47f122

v1.4.0

1.4.0 (2026-06-04)

Features

• ci: Add support for windows/arm64 binary distribution (#3231) (10abf3b)
• datalineage: Add Data Lineage integration (#3285) (19353c3)
• server: Ignore unknown tools at startup with --ignore-unknown-tools flag (#3353) (5f0304f)
• tools/cloudsqlpg: Add remaining vector assist tools for Cloud SQL Postgres (#3203) (b514cbd)
• tools/spanner-search-catalog: Implement search_catalog tool (#3140) (defc086)

Bug Fixes

• auth/generic: Enforce issuer presence in opaque token validation (#3360) (1d8df0d)
• auth: Separate Google and Generic MCP OAuth verification (#3341) (dfd66ee)
• mcp: Support annotations and metadata within Tools to earlier MCP schemas (#3300) (9a88c72)
• oracle: Remove trailing semicolons from prebuilt tools (#3215) (fcad02d)
• server/auth: Centralize tool scopes validation (#3335) (adce4ab)
• server: Return null id for batch request rejection (#3333) (0b18d58)
• source/dataplex: Limit search results to pageSize (#3323) (905c1f6), closes #3308
• telemetry: Allow GCP project override (#2960) (3c83ba5)
• tool/bigquery: Prevent allowedDatasets bypass in forecast query (#3324) (45df461)
• tool/clickhouse: Handle ignored ProcessParameters error (#3340) (ddfd887)
• tools/clickhouse,tools/bigquery: Validate identifier parameters to prevent injection (#3219) (2f45f75)
• tools/looker: Escape filter values for unquoted parameters (#3289) (1711156)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	85bfe54db164ed835a6c9d7e4036dd6ad1a417542367385a4c3809ff29b62304
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	a3dc09bfe029851950cd4a3174f67bf4e25dc711e489f2c7144013ba2c59f7d7
darwin/amd64	For macOS systems running on Intel processors.	19d09077202b0a9d9bf87edac2f97c4923a4f2d90ac6f22d099967e5aa416789
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	4be0bd4bca26af0163a1de38738be4c358dae2a2696bddd9344c900d9cd62cf6
windows/arm64	For Windows systems running on ARM 64-bit processors.	5ce6a6b8335650c3dfdca86eee52867ebce7045fafef55142c60689131ca37ae

v1.3.0

1.3.0 (2026-05-21)

Features

• auth: Implement MCP auth tool-level scopes validation (#3049) (c528985)
• looker: Propagate client IP from incoming MCP requests to downstream SDK calls (#3253) (75da6c2)
• Setup SQLCommenter and allow client metadata (#3064) (9f1f9b3)
• tool/cloudsqladmin: Add cloud-sql-admin-execute-sql-many and cloud-sql-admin-sql-many (#3083) (ef300a8)

Bug Fixes

• auth/generic: Fix generic auth expiration field and integration with authRequired (#3251) (f4d16c0)
• Enforce toolset/promptset boundary on tools/call and prompts/get (#3036) (c739b80)
• tools/http: Prevent path traversal and base path scope escape (#3218) (80a6602)
• tools/looker: Return a 401 error to MCP client when Looker returns a 401 (#3233) (4f409a3)
• tools/looker: Strip wrapping quotes from filter values for unquoted parameters (#3273) (1e3de96)
• tools: Initialize query result slices to empty array (#3250) (60ddf48)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	08e00671737ff4fd6c7af25a1a0c5da43b3657c4a435fd0a381757876d694b45
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	b16ea9f864b0b9c711dff0b08a663e6dee5969b41033fe6d05412dc04e85cfb8
darwin/amd64	For macOS systems running on Intel processors.	94d6fd02a4bbc67ad9dcf69d5f36af5a584735d2fb2ebb0023e91cb701e7a98a
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	4661004b9cd37ea258d82332a24b3955fd9a258a5b8b6da471584cd7cb3de35d

v1.2.0

1.2.0 (2026-05-07)

Features

• Add support for HTTPS/TLS listener (#3126) (8bc385d)
• source/bigquery: Add maximumBytesBilled source config (#2724) (42f2d07)
• source/cloud-storage: Add bucket and object management tools (#3129) (8de9bcf)
• source/cloud-storage: Add Cloud Storage source with list_objects and read_object tools (#3081) (da27b37)
• source/cloud-storage: Add write/copy/move/delete object tools (#3139) (b225fc4)
• tools/knowledge-catalog: Search Data Quality Scans (#2444) (1c63551)

Bug Fixes

• Allow converting string literal block with list (#3050) (36ab2a9), closes #3023
• mcp: Implement router-level logger injection for MCP auth (#3067) (ccc7cf5)
• Prevent test.db from being created during unit tests (#3042) (d10d2ca)
• Remove hardcoded * allowed origin for sse (#3054) (c4c7bd9)
• sources/postgres: Apply URL encoding to query string params (#3020) (6b860f4)
• tool/looker-conversational-analytics: OAuth token in GDA payload fix (#3058) (6632d96)
• tools/bigquery-execute-sql: Avoid surfacing invalid queries as MCP 500s (#3056) (7ed92c8)
• tools/looker: Fix OAuth for Converational Analytics (#3044) (f9e3e55)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	b2574e37945f5ecf8cd2a1cdcd4dabcbb32f93aafb2a5fac16db5f6289173f40
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	e414fd5bf05798bdc31139ff9f4f9712a7d404aba68f0f6cafdbbf712ab0f409
darwin/amd64	For macOS systems running on Intel processors.	89a97dd5df0d67134c5ea7ca70894d8340993e8f67dfd86a6ed51783aa6bcb43
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	6682d5d1bd384c0ead116ae0c88b75b78a8ddd5b070bd241959b7d912063d00f

v1.1.0

1.1.0 (2026-04-13)

Features

• tools/cloudsqlpg: Add vector assist tools for Cloud SQL Postgres (#2909) (7a6d849)

Bug Fixes

• looker: Convert configuration yaml to flat format (#3022) (45c05e3)

Docs Update

• knowledge-catalog: Rename dataplex to knowledge-catalog across docs (#3039) (45c05e3)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	17948e7538914320c4141d155bcf283c9a8c168c6abce09ae87837057899ba29
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	7ac04d4563c633bb44a2c1b3ec9c5aab5f1e5885625afd3f159c73e399698495
darwin/amd64	For macOS systems running on Intel processors.	8ade0efe8989556084a876095a8f82969eab22567bbb58554e4db76854a2fdc7
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	52827be44a40b790bea6f357dd62727ddc034fcdf4b0e0aba25ae0ab11b8302f

v1.0.0

1.0.0 (2026-04-10)

Important

This is the first stable release. Please review the UPGRADING.md guide for instructions on migrating from previous beta versions.

⚠ BREAKING CHANGES

• tools/elasticsearch: add vector search support and remove query passing through param (#2891)
• tools/looker: refactor looker-git-branch tool into 5 separate tools (#2976)

Features

• auth: Support opaque token validation for generic authService (#2944) (c924701)
• cloudsqlpg: Run SELECT 1 after successful connection attempt (#2997) (6ed9700)
• tools/bigquerysql: Add semantic search support (#2890) (862c396)
• tools/elasticsearch-execute-esql: Add Tool to execute arbitrary ES/QL queries (#3013) (ae49fb7)
• tools/elasticsearch: Add vector search support and remove query passing through param (#2891) (d44e879)
• tools/looker: Refactor looker-git-branch tool into 5 separate tools (#2976) (b2472d4)
• tools/mysql: Add list-table-stats-tool to list table statistics in MySQL and Cloud SQL MySQL source. (#2938) (dc2c2b4)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	012adace943a1fab35837138afa2a701ffd179a5dc02e1f5a6fd7d2d78ed6d2f
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	8da9e0785b83cf652300642a6262f6e788ffe98f91fa8c3728d911a9db6f50cf
darwin/amd64	For macOS systems running on Intel processors.	9e8aeebfefe3120706ee4892ef925fd6ce00892c0ccea20fbfbf35e335e8f5d1
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	40d0e085bb0b14c8d8c94c4911ecf678336c6f9b8030c49d07a94dbbc1b1f66c

v0.32.0

0.32.0 (2026-04-08)

⚠ BREAKING CHANGES

• update repo name (#2968)

Features

• Add MCP tool annotations to all remaining tools (#2221) (ea09db9)
• bigquery: Add conversational analytics tools for Data Agents (#2517) (2490a4b)
• embeddingModel: Add Backend API selection fields (#2592) (912aa9e)
• skills: Add Claude Code support to generated scripts (#2966) (a1609e1)
• skills: Add codex user agent (#2973) (070e939)
• skills: Tool invocation via npx (#2916) (377dc5b)
• sources/singlestore: Add ConnectionParams to SingleStore Config (#2555) (73e2a8c)
• tool/dataplex-lookup-context: Relax project constraint and enforce location (#2952) (7ebfdf1)
• tools/looker: Looker agent management from MCP (#2830) (649d4ad)
• ui: Update to use /mcp endpoint (#2829) (c3059c2)

Bug Fixes

• bigquery: Add impersonateServiceAccount to prebuilt config (#2770) (9c3a748)
• quickstart: Robust tool lookup and modernize dependencies in Python samples (#2863) (4c0845d)
• skills: Fix skill generation template (#2914) (a01a15e)
• skills: Prevent empty strings overriding optional env vars in node scripts (#2963) (c52adeb)
• tests/bigquery: Implement uuid-based isolation and reliable resource cleanup (#2547) (479d842)
• tests/Bigtable: Implement uuid-based isolation and reliable resource cleanup (#2880) (a769f15)
• Update error for ConvertConfig function (#2993) (62bdabb)

Code Refactoring

• Update repo name (#2968) (3aae809)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	a1adeb3075b38316b37ec8fc4661ecbc5a413916e4e7df411db195a1bf9e2313
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	524d69ac18290c52b4fcb2070562ec7648f5e74e275cec3f0fe3ea82165ab2e3
darwin/amd64	For macOS systems running on Intel processors.	47ef831ce008ebaba2f1ccfabca79d42ec31dee7a8971cbc993b19daf0a47f49
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	8b14187959d409b10b9083775b729e8232f5afa460a137aab225cb0347a91b3b

v0.31.0

0.31.0 (2026-03-26)

⚠ BREAKING CHANGES

• release upgraded docsite (#2831)
• http: sanitize non-2xx error output (#2654)
• add a new enable-api flag (#2846)
• remove deprecations and update tools-file flag (#2806)

Features

• Add a new enable-api flag (#2846) (7a070da)
• auth: Add generic authService type for MCP (#2619) (f6678f8)
• auth: Add Protected Resource Metadata endpoint (#2698) (b53dcf2)
• auth: Support manual PRM override (#2717) (283e4e3)
• dataplex: Add support for lookup context tool. (#2744) (facb69d)
• Remove deprecations and update tools-file flag (#2806) (ab64c95)

Bug Fixes

• ci: Remove search index generation from preview deployment workflow (#2859) (f8891b8)
• docs: Skip empty folders in pagination & reduce PR comment noise (#2853) (9ebd93a)
• http: Sanitize non-2xx error output (#2654) (5bef954)
• skills: Fix integer parameter parsing through agent skills (#2847) (4564efe)

Documentation

• Release upgraded docsite (#2831) (5b25ce0)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	f709e43f45b899a5c84abdfd1b2082ff5187c4d133c5a824c83411e2fc880e24
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	1c0841a62224fc984856634e218bed45f678c7c87f51a8cea92c05bf70775da8
darwin/amd64	For macOS systems running on Intel processors.	7562e49c531c2b34e2d37b0b1f2efc34ebb04631f8772c007846c494be9dfce9
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	ce8a6b5db1a136654a20fe31f7addf2c73cbd458ce12cd8dd7ed6df7d985a9e5

v0.30.0

0.30.0 (2026-03-20)

Features

• cli: Add migrate subcommand (#2679) (12171f7)
• cli: Add serve subcommand (#2550) (1e2c7c7)
• skill: One skill per toolset (#2733) (5b85c65)
• source/oracledb: Add Oracle DB for MCP tools and configurations, updated tools and documentation (#2625) (e350fc7)
• tools/looker: Support git_branch tools for looker. (#2718) (70ed8a0)
• tools/dataplex-search-entries: Add scope support to search_entries tool (#2740) (10af468)

Bug Fixes

• cloudloggingadmin: Increase log injesting time and add auth test (#2772) (50b4457)
• oracle: Normalize encoded proxy usernames in go-ora DSN (#2469) (b1333cd)
• postgres: Update execute-sql tool to avoid multi-statements parameter (#2707) (58bc772)
• skills: Improve flag validation and silence unit test output (#2759) (f3da6aa)
• test: Address flaky healthcare integration test run (#2742) (9590821)

Reverts

• ci: Implement conditional sharding logic in integration tests (#2763) (1528d7c)

OS/Architecture	Description	SHA256 Hash
linux/amd64	For Linux systems running on Intel/AMD 64-bit processors.	8cb1cacbbaccf0940926643482d20e3b02efba80d1c93eafb4342079b1ebee95
darwin/arm64	For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors.	bb0826dce71a62a29ee59389c0cd1b78382d8309ee12fe05ad3cf501623ad7cf
darwin/amd64	For macOS systems running on Intel processors.	790ce5590799776f8d3bd3557c49a9414270a5f883cb00cf260979c838496636
windows/amd64	For Windows systems running on Intel/AMD 64-bit processors.	b18ed4559ddc7f73e5a6d8638e64e93e37d18f5179720c9705de2ab7fd3c67a5