Skip to content

docs: cut 0.8.0 #19

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lesandie merged 1 commit into from
Oct 25, 2026
Merged

docs: cut 0.8.0 #19

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 20 additions & 9 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,16 +15,19 @@ expose.

## [Unreleased]

### Fixed
Nothing yet.

- Removed ClickHouse and S3 credentials from diagnostic log records. The
ClickHouse connection message no longer prints its password, and the debug
parameter dump redacts passwords, access keys, and session tokens before
constructing the log record. This protects short credentials and handlers
that do not use the console formatter's masking.
- Redacted ClickHouse and S3 credentials from the `--listoptions` environment
output while preserving its non-secret settings, so the configuration helper
cannot print secrets into terminal history or captured job output.
## [0.8.0] - 2026-10-25

An operational release driven by two production incidents. A collect Job
created its auxiliary table in the ClickHouse user's current database because
the database was only expressible inside `COLLECTTABLEPREFIX`; the new
`--collectdatabase` option makes it explicit. And a single dead replica in a
Replicated auxiliary database cost every run about six minutes before it
crashed with a misleading `IncompleteRead`; every phase now checks that
database's replicas before its first DDL and fails at once, naming them.
Credentials are also no longer printed by the connection log, the debug
parameter dump or `--listoptions`.

### Added

Expand All @@ -43,6 +46,14 @@ expose.

### Fixed

- Removed ClickHouse and S3 credentials from diagnostic log records. The
ClickHouse connection message no longer prints its password, and the debug
parameter dump redacts passwords, access keys, and session tokens before
constructing the log record. This protects short credentials and handlers
that do not use the console formatter's masking.
- Redacted ClickHouse and S3 credentials from the `--listoptions` environment
output while preserving its non-secret settings, so the configuration helper
cannot print secrets into terminal history or captured job output.
- The optional Replicated-database liveness re-check now warns and skips the
preflight when its second replica lookup returns no rows. It no longer reports
that a zero-replica re-check passed.
Expand Down
Loading