Go modules · #1810 by repository stars

github.com/stackql/stackql

v0.12.732stackql/stackql ↗New releases in your daily digest, changelog included.

Last release 5 days ago
03 Oct 2026
Ships fairly regularly
a new release about every 2 weeks
Some releases are documented
notes for 15 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
159 releases · first in 2022

Release timeline

159 releases since 2022

20222023202420252026

20222026

One column per quarter.

Releases

v0.12.733-0.20261003113533-ed962c91e8383 Oct 2026pre-release
Nothing published for this version

v0.12.73228 Sept 2026Breaking

Breaking change: describe_resource MCP tool retired

What's Changed

doc updates by @jeffreyaven in #792
fix-join-without-on-clause-panic by @jeffreyaven in #794
desc-alias-and-otlp-push-exporter by @jeffreyaven in #795
mcp-go-sdk-1.8.0-and-protocol-version-pin by @jeffreyaven in #796
omnisdk-query-replacement-opt-in by @general-kroll-4-life in #797

Full Changelog: v0.12.718...v0.12.732

Breaking change: `describe_resource` MCP tool retired

The describe_resource MCP tool has been removed (#796). It wrapped DESCRIBE provider.service.resource, which reports the schema of one select method resolved without WHERE parameters, while a SELECT routes by its parameters and can land on a method with a different shape.

describe_method is now the single column source for MCP clients. It returns the exact contract for the method a query routes to: inputs with param_type, and the output fields a SELECT can reference. The discovery path is list_providers -> list_services -> list_resources -> list_methods -> describe_method.

MCP clients, prompts or agent instructions that call describe_resource need to be updated to call list_methods followed by describe_method.
The SQL DESCRIBE statement is unchanged.
The embedded server instructions, prompts and the deploy-stack authoring resource have been repointed at describe_method output fields.

MCP protocol revision pinning (`--mcp.protocol.version`)

The MCP server now builds against github.com/modelcontextprotocol/go-sdk v1.8.0 (previously v1.7.0) and the newest protocol revision it advertises can be pinned (#796, issue #784). The setting is available as the --mcp.protocol.version flag, which overrides server.protocol_version in mcp.config.

Value	Advertised	Effect
`auto` (default) or absent	every SDK revision	negotiation per client: the highest revision both sides speak
`2026-07-28`	`2026-07-28` only	sessionless only; implies `stateless` for Streamable HTTP
`2025-11-25` (or any older revision)	that revision and everything before it	handshake lifecycle only; a `2026-07-28` request is answered with JSON-RPC error `-32022` whose `data.supported` lists the advertised revisions, so the client can renegotiate

stackql mcp --mcp.server.type=http --mcp.protocol.version=2026-07-28 --mcp.config '{"server": {"transport": "http", "address": "127.0.0.1:9992"} }'
stackql mcp --mcp.server.type=stdio --mcp.protocol.version=2025-11-25

Any other value fails config validation at startup with invalid server.protocol_version, naming the legal values.

Behaviour changes that come with SDK v1.8.0:

On stateful Streamable HTTP, a 2026-07-28 request is now answered with JSON-RPC error -32022 (UnsupportedProtocolVersion) rather than a plain HTTP 400.
Streamable HTTP request bodies are capped at the SDK default of 4 MiB (413 beyond it), and JSON nested deeper than 1000 levels is rejected before parsing. These limits are not configurable in mcp.config.

See docs/mcp.md for the full transport and negotiation detail.

`DESC` classed as read-only by the MCP policy gate

The MCP policy gate now classes DESC (and DESC EXTENDED) as read-only, the same as DESCRIBE (#795, issue #773). The parser already accepted DESC on every other path; previously the gate treated a statement beginning with DESC as an unknown query class.

OTLP/HTTP push exporter for `--output otel`

--output otel can now push records to an OTLP/HTTP logs endpoint in addition to writing them to stdout (#795, issue #755 phase 2). The exporter is configured through the new --otel.config flag, which takes a JSON or YAML string:

stackql exec --output otel \
  --otel.config '{"exporter": {"endpoint": "http://localhost:4318/v1/logs", "headers": {"authorization": "<token>"}}}' \
  "select name, location from google.storage.buckets where project = 'my-project';"

Key	Required	Default	Description
`exporter.endpoint`	yes		Full OTLP/HTTP logs URL, for example `http://collector:4318/v1/logs`
`exporter.headers`	no		Headers sent on every export request, for example an ingestion token or API key
`exporter.timeout_ms`	no	`10000`	Per-request timeout in milliseconds
`exporter.batch_size`	no	`512`	Number of log records per export request

Records are sent as OTLP/JSON, batched per statement and chunked by batch_size; the remainder is shipped when the statement completes.
429 and 5xx responses, and transport errors, are retried up to 4 attempts, honouring a delay-seconds Retry-After header (capped at 30 seconds) or otherwise an exponential backoff starting at 500 ms.
An export failure is reported on stderr.
No OTEL_EXPORTER_OTLP_* environment variables are read; all exporter settings come from --otel.config. A malformed value, or an exporter without an endpoint, fails startup.

Bug fix: `JOIN` without an `ON` clause

A JOIN with no ON clause crashed plan building with a nil pointer dereference (#794, fixes #793). A condition-less inner join is now treated as a CROSS JOIN, which both the SQLite and Postgres backends accept, so a query that joins two provider tables with the join condition in WHERE now runs.

Preview functionality (unstable)

Preview functionality is not stable. Behaviour, syntax and output may change or break between releases without notice. Do not rely on it in production.

The opt-in preview query path (--preview='{"unstable":true}') has been extended (#797). Statements over relations named stackql_unstable_<provider>.<service>.<resource> are resolved and run by omnisdk directly from the provider documents, with rows streamed to the output as they are produced rather than staged in the SQL backend.

A SELECT over these relations is now handed to omnisdk as a whole: INNER JOIN and LEFT JOIN between document-driven relations are supported, as are IN list filters. omnisdk decides which conditions become request parameters, which become edges between relations, and which become row filters.
LIMIT without ORDER BY is pushed down and stops the requests early. ORDER BY, GROUP BY, HAVING, DISTINCT and aggregates are refused on these relations.
A query that mixes these relations with any other relation is refused.
INSERT, UPDATE and DELETE against a document-driven relation are routed through omnisdk; a RETURNING list streams back the affected resource. INSERT and UPDATE are covered by the functional test suite in this release.
Each document-driven provider's configured stackql auth, including basic auth, is passed to omnisdk.
SHOW METHODS on these relations reports each method's SQL verb (SELECT, INSERT, UPDATE, ...), with EXEC for a method no verb maps to.
Use --output jsonl or --output otel to have each row written as it arrives; the default table output holds every row until the query completes.

stackql exec --preview='{"unstable":true}' --output jsonl \
"select b.name as bucket, i.role, i.members
from stackql_unstable_google.storage.buckets b
inner join stackql_unstable_google.storage.buckets_iam_policies i on i.bucket = b.name
where b.project = 'my-project';"

Developer documentation, including audit query examples for AWS, Azure and Google, is in docs/preview.md.

Dependency and packaging updates

github.com/modelcontextprotocol/go-sdk v1.7.0 -> v1.8.0
github.com/stackql-labs/omnisdk v0.1.2-beta02 -> v0.1.3-alpha05
MCP bundle package metadata for npm (@stackql/mcp-server) and PyPI (stackql-mcp-server) aligned to the 0.12.x line
Release process documentation updated (#792)

v0.12.731-0.20260928122324-adc09567d4ba28 Sept 2026pre-release

Nothing published for this version

v0.12.73027 Sept 2026

retire describe_resource MCP tool; discovery via list_methods -> describe_method

mcp updates
retire describe_resource MCP tool; discovery via list_methods -> describe_method

The MCP describe_resource tool wrapped DESCRIBE provider.service.resource,
which reports the schema of one select method resolved without WHERE
parameters, while a SELECT routes by its parameters and can land on a
method with a different shape. describe_method is the exact contract
(inputs with param_type, output fields) for the method a query routes to,
so it is now the single column source.

Remove the tool registration, Backend.DescribeResource and its
implementations, the interrogator SQL builder and the description file.
The SQL DESCRIBE statement is unchanged.
Rewrite the discovery instructions as a numbered drill-down ending in
describe_method; sharpen the describe_method and list_methods
descriptions; repoint dialect rules, error recovery, prompts and the
deploy-stack resource at describe_method output fields.
Docs: drop the tool from docs/mcp.md, the package README and the bundle
README; the docs tool table now also lists the query library tools.
Tests: unit test asserting the tool is not published; robot list-tools
scenario asserts its absence and describe_method's presence; the
describe-resource robot scenario is removed.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

Co-authored-by: Claude Fable 5.1 noreply@anthropic.com

Open source →

v0.12.719-0.20260922073714-3c7afc1361fa22 Sept 2026pre-release

Nothing published for this version

v0.12.71822 Sept 2026Deprecated

ci: bump Node20-deprecated actions to Node24; cut runner costs by @jeffreyaven in #781

What's Changed

iac-v1 by @general-kroll-4-life in #764
fix lint: satisfy nilnil in internaldto tests; drop PR_README.md (#235) by @Sneha41sb in #767
Bump rmcp from 1.8.0 to 2.0.0 in /packaging/mcpb/cargo by @dependabot[bot] in #768
build(deps): bump rmcp from 2.0.0 to 2.1.0 in /packaging/mcpb/cargo by @dependabot[bot] in #770
Bump github.com/jackc/pgx/v5 from 5.0.4 to 5.9.2 by @dependabot[bot] in #750
build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #762
chore: bump spf13/pflag from 1.0.9 to 1.0.10 by @jeffreyaven in #758
fix: unignore npm lockfile for dependabot, pin ubuntu-latest to ubuntu-24.04 by @jeffreyaven in #772
ci: retry known-flaky infra steps (Chocolatey mingw, Docker Buildx) by @jeffreyaven in #775
get-app: consolidate PR #765/#771 dependency updates without regressions by @jeffreyaven with @Copilot in #776
build(deps): bump mistune from 3.0.2 to 3.3.3 in /cicd by @dependabot[bot] in #777
build(deps): bump requests from 2.32.3 to 2.33.0 in /cicd by @dependabot[bot] in #780
build(deps): bump jinja2 from 3.1.4 to 3.1.6 in /cicd by @dependabot[bot] in #778
ci: bump Node20-deprecated actions to Node24; cut runner costs by @jeffreyaven in #781
build(deps): bump flask from 3.0.3 to 3.1.3 in /cicd by @dependabot[bot] in #779
migrate-embedded-sqlite-to-pure-go-modernc by @jeffreyaven in #786
chore: bump any-sdk and reduce CI runner cost by @jeffreyaven in #790

Full Changelog: v0.11.673...v0.12.718

Additional notes re pure Go SQLite backend (first release after the modernc migration)

The embedded SQLite backend is now modernc.org/sqlite (pure Go). All binaries are built with CGO_ENABLED=0 and are statically linked; no C toolchain is involved anywhere in the build.

The custom extension functions (split_part, regexp_like, regexp_substr, regexp_replace, json_equal, aws_policy_equal) are ported to pure Go in any-sdk; documented behaviour divergences (RE2 regexp limits) are listed in any-sdk public/sqlfuncs/DIVERGENCES.md.

Library embedders now inherit the modernc.org/sqlite dependency tree instead of mattn/go-sqlite3/cgo.

External loadable SQLite extensions (.load) are no longer supported.

Rollback anchor: the tag v0.11.707-final-cgo marks the last cgo commit on main.

Open source →

v0.11.715-pure-go-sqlite21 Sept 2026pre-release

migrate-embedded-sqlite-to-pure-go-modernc

modernc sqlite migration prep
migrate-embedded-sqlite-to-pure-go-modernc (#783)
docs(sqlfuncs): mirror CLAUDE.md as AGENTS.md for all agent sessions

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

deps: adopt any-sdk pure-Go sqlite backend, drop mattn/cgo fork replace

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

ci: retire cgo - CGO_ENABLED=0, drop C toolchains and sqlite_stackql tag, add per-artifact function smoke

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

docs+test: modernc backend invariants, release notes draft, robot ext-function smoke scenario

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

deps: bump any-sdk to alpha02 (aws_policy_equal tags parity, boolean decltype); pin sqlite_version fixture to 3.53.4

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

burn: remove executed migration work order

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

Co-authored-by: copilot-swe-agent[bot] 198982749+Copilot@users.noreply.github.com
Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

finalize-pure-go-sqlite-migration-cleanup (#785)
retire remaining cgo configuration and stale migration artifacts

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

preserve migration smoke-test documentation

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

Co-authored-by: copilot-swe-agent[bot] 198982749+Copilot@users.noreply.github.com
Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

shard-postgres-docker-robot-tests

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

keep-stateful-robot-tests-in-one-shard

Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com

rename-release-process-doc-without-spaces

Rename docs/stackql release process.md to
docs/stackql_release_process.md per review, and update the three
references to it (two workflow header comments and the mcpb packaging
notes) so nothing points at the old name.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

move-extension-function-smoke-to-robot

Remove the six workflow-level extension function smoke steps from
build.yml per review. The check lives in the robot scenario
Sqlite Extension Functions Smoke Working, which now carries the
stronger aws_policy_equal comparison the workflow steps used (Version
plus scalar-vs-array Resource), so nothing is lost in the move.

The scenario runs wherever the functional suite runs: winbuild,
linuxtest, linuxarmbuild, macosbuild, wsltest and the docker sqlite leg.
winarmsmoke and macosarmbuild have no robot harness, so the check is no
longer exercised in those two jobs.

Also drop the stale "cgo" wording from the winarmsmoke comment.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

assert-shard-completeness-after-docker-tests

Sharding splits one robot run across several dockertest legs, so no
single leg can attest that the whole suite ran. Add a dockertestverify
job that runs once all legs conclude and fails unless, for each
(platform, db backend) group, the shards together account for every
functional test exactly once.

Each robot-running dockertest leg uploads its output.xml; unsharded
legs upload as shard 1 of 1.
robot_shard.py gains a verifier. The expected tests are parsed from
test/robot/functional with no shard modifier applied, then compared
as a multiset against the union of the shard reports, so the total
count and each individual test are checked independently.
Anything that prevents verification fails it: absent shard, absent
output.xml, inconsistent shard counts, a NOT RUN test, an expected
group with no reports, or reports from a group that is not listed.
dockermerge now needs dockertestverify, so an image cannot be pushed
past a failed verification.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

run-robot-suite-on-arm-runners

Per review: now that GitHub hosts arm64 macOS and Windows runners, run
the robot functional suite on both rather than leaving the extension
function check unexercised there.

macosarmbuild: mirror the macosbuild robot harness (libpq, python
deps, registry rewrite, certificates, robot run, report upload). The
libpq path is resolved with brew --prefix because homebrew's prefix
differs on Apple Silicon.
winarmsmoke: mirror the winbuild robot harness against the amd64
binary under x64 emulation. Python is x64 because psycopg2-binary,
psycopg-binary and cryptography publish no win_arm64 wheels. The job
now checks out the repo (before the artifact downloads, since checkout
cleans the workspace) and moves from the short to the standard job
timeout.
winbuild: upload the MCP client as an artifact so the MCP scenarios
run in winarmsmoke rather than being skipped.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

Co-authored-by: Copilot 198982749+Copilot@users.noreply.github.com
Co-authored-by: jeffreyaven 5146499+jeffreyaven@users.noreply.github.com
Co-authored-by: Claude Fable 5.1 noreply@anthropic.com

Open source →

v0.11.707-final-cgo20 Sept 2026pre-release

modernc sqlite migration prep

Open source →

v0.11.6739 Sept 2026

reload_credentials: report installed providers, invalidate doc auth contexts, changed flag, actionable credential errors

reload_credentials: report installed providers, invalidate doc auth contexts, changed flag, actionable credential errors

The reload_credentials MCP tool read the lazily populated auth context
registry, so an unscoped call before any query returned no rows and a
scoped call for an installed, credentialed provider errored with
"cannot find AUTH context" (after the env re-source had already run).

The handler is now three ordered phases: re-source the configured env
file (a configured file that has gone missing is an explicit error
naming the path), invalidate auth contexts registered lazily from
provider documents (--auth contexts are retained; the cached provider
object is dropped with its context because doc auth only registers on
provider creation), then report every installed provider against the
now-current environment. Scoping is a filter; an unknown provider name
is the only scoped error. Each row carries a new changed field: a
sha256 comparison of the resolved credential material (successor chain
included) before and after the re-source, never emitted.

Query tools: credential resolution failures on run_select_query,
run_mutation_query and run_lifecycle_operation now name the provider
(parsed from the statement) and the recovery sequence (fix the env
file, call reload_credentials, retry). execQuery propagates statement
errors, which mutation, lifecycle and pull_provider previously
swallowed into an empty success payload.

Tool description rewritten to forbid preemptive calls and to make
changed: false after a failure the stop signal.

Tests: scripted stdio harness (run_stdio_credential_script) driving the
stackql_auth_testing dummy-credential provider; robot scenarios for
fresh-session scoped/unscoped/unknown, rotation after a registered
context (stale key rejected by the mock, new key used post-reload),
rotation before first query, recovery from failed resolution (select
and mutation error text, no-op reload), missing env file. The
pull_provider scenario now runs against a mocked HTTP registry server
(9927) so the install is real rather than a swallowed local-mode error.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

mcp: master tool descriptions as markdown under content/tools

Tool descriptions were inline Go string literals spread across server.go
and query_library.go while instructions, prompts and resources were
already authored as markdown under pkg/mcp_server/content. Move the 16
descriptions to content/tools/<tool_name>.md (frontmatter name, body
is the description prose; soft line breaks collapse to spaces, blank
lines keep paragraph breaks) and load them through the same embedded
content framework.

addToolWithGate attaches the mastered description and returns an error
when a registered tool has none, so registration failures surface at
server construction like prompt and resource failures do. Published
bytes are unchanged for every tool. The build-time gate test now checks
coverage in both directions: every published tool has a file and every
file names a published tool.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

mcp: test that markdown tool description prose is what tools/list publishes

Reads content/tools/run_select_query.md from disk independently of the
loader, strips the frontmatter and joins the wrapped lines, then compares
with the description returned by an in-process tools/list.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

robot: assert server/discover serves instructions on the stateless HTTP server

The 2026-07-28 stateless roundtrip now opens with server/discover, the
SEP-2575 replacement for the initialize handshake, and the 9926
scenario asserts the response lists the revision and carries the
embedded content/instructions text. Closes the black-box gap where the
new-revision instructions path was only covered by the in-process unit
test.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

tool descriptions
mcp: align server instructions with the on-demand tool descriptions

server_info and reload_credentials are on-demand recovery and
diagnostic tools, never session-start steps; the instructions said
otherwise. Session guidance now states the defaults (sqlite3, safe),
that credentials resolve at query time with no preceding step, and the
fail -> fix file -> reload -> retry sequence with changed: false as the
stop signal. The 401 recovery rule gates the retry on changed: true.
Discovery points at the query library before the drill-down, dialect
rules describe validate_select_query as an on-demand pre-flight rather
than a routine step, and the mutation shapes gain the EXEC statement
form behind run_lifecycle_operation.

validate_select_query: the "no credentials required" claim was checked
against the binary and is false (EXPLAIN resolves credentials and fails
before reporting a bad column when they are missing); the description
now says so. Trailing newlines restored on the tool files.

The stateless discover scenario anchors on the "# Discovery workflow"
heading rather than a sentence that the rewrite reworded.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

test: retire the bespoke credential reload roundtrip in favour of the scripted driver

The Sources Env File Mid Session scenario now runs through
run_stdio_credential_script like the other reload scenarios, and the
superseded run_stdio_credential_reload_roundtrip helper is removed. This
also clears the CodeQL clear-text-storage alert (pre-existing on main)
that the helper's secret_value write carried.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

Co-authored-by: Claude Fable 5.1 noreply@anthropic.com

Open source →

v0.11.670-0.20260908054405-face5c7a2d6f8 Sept 2026pre-release

Nothing published for this version

v0.11.6697 Sept 2026

mirror-publish-git-ident by @jeffreyaven in #721

What's Changed

mirror-publish-git-ident by @jeffreyaven in #721
fix: [BUG] query rewriting error using JSON_EXTRACT by @Roshan931 in #722
fix: [BUG] View query rewriting issue with LIKE and NOT LIKE by @Roshan931 in #723
consume any-sdk v0.5.5-alpha01: OCI doc-level env vars, body coercion, snake/wire parity wire-through (#705, #726, #725, #710) by @jeffreyaven in #731
mcp: adopt protocol revision 2026-07-28 and add otel audit log format; fix build date stamping (#729, #704) by @jeffreyaven in #732
ci: skip Docker image build on Dependabot PRs by @jeffreyaven in #737
Bump mistune from 3.0.2 to 3.3.3 in /test by @dependabot[bot] in #724
fix: guard primitive graph txn control counter slice against concurrent appends by @jeffreyaven in #736
ci: move test tooling image stages from bullseye to bookworm by @jeffreyaven in #743
Bump cryptography from 43.0.3 to 50.0.0 in /cicd by @dependabot[bot] in #730
deps(test): roll up flask 3.1.3, jinja2 3.1.6, requests 2.33.0, pyopenssl 26.0.0 (#739, #740, #741, #742) by @jeffreyaven in #744
deps(test): drop unused pyopenssl, pin cryptography 50.0.0, bump urllib3, werkzeug, idna, pytest (#745, #746, #747, #748) by @jeffreyaven in #749
docs: add query-before-mutation GCS tutorial by @nirmalpatel008 in #727
test: cover relational predicates by @be-student in #733
Add unit tests for sqlstream and update PR descriptions by @Sneha41sb in #735
Add unit tests for primitive_context, iqlutil, suffix, symtab, serde by @Sneha41sb in #734
v0.11 release prep: --output otel inventory snapshots (#738), SHOW CONTRIBUTORS (#320), minor version bump by @jeffreyaven in #754
deps(go): bump antchfx/xpath 1.3.6, aws-sdk-go-v2 s3 1.97.3 and eventstream 1.7.8 (#751, #752, #753) by @jeffreyaven in #756
Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 by @dependabot[bot] in #757

New Contributors

@Roshan931 made their first contribution in #722
@dependabot[bot] made their first contribution in #724
@be-student made their first contribution in #733

Full Changelog: v0.10.605...v0.11.669

Open source →

v0.10.606-0.20260819064409-ee0dd872951119 Aug 2026pre-release

Nothing published for this version

v0.10.60518 Aug 2026

embedded-mcp-packaging by @jeffreyaven in #718

What's Changed

embedded-mcp-packaging by @jeffreyaven in #718
preview-access-audit-plus-unstable by @general-kroll-4-life in #719
docs: add preview-bucket-01 tutorial (multi-cloud bucket audit) by @nirmalpatel008 in #716
immutable-release-assets + retire gleam/kotlin/swift by @jeffreyaven in #720

New Contributors

@nirmalpatel008 made their first contribution in #716

Full Changelog: v0.10.601...v0.10.605

Open source →

v0.10.60115 Aug 2026

preview-provider by @general-kroll-4-life in #711

What's Changed

preview-provider by @general-kroll-4-life in #711
mockable-omnisdk by @general-kroll-4-life in #712
eager-output-streaming by @general-kroll-4-life in #713
improved-bucket-audit by @general-kroll-4-life in #714
slim-doco by @general-kroll-4-life in #715

Full Changelog: v0.10.591...v0.10.601

Open source →

v0.10.592-0.20260806053047-c3aaa649d9306 Aug 2026pre-release

Nothing published for this version

v0.10.5915 Aug 2026

fix: stdio malformed-frame resilience, JSON() param fan-out, window/CTE test coverage by @jeffreyaven in #702

What's Changed

fix: stdio malformed-frame resilience, JSON() param fan-out, window/CTE test coverage by @jeffreyaven in #702
feat: add local ChatGPT and Codex stdio plugin by @jeffreyaven in #703
build: consume any-sdk v0.5.4-alpha01 - OCI signing, server variable env resolution, pushdown $select superset, XML pagination token passthrough by @jeffreyaven in #707
jsonl-output by @general-kroll-4-life in #708
Add MCP Toplist rank badge by @chrstphe in #709

New Contributors

@chrstphe made their first contribution in #709

Full Changelog: v0.10.582...v0.10.591

Open source →

v0.10.58231 Jul 2026

Install doc updates by @jeffreyaven in #693

What's Changed

Install doc updates by @jeffreyaven in #693
Mcpb env file arg by @jeffreyaven in #694
working-self-audit by @general-kroll-4-life in #695
feat: embedded content framework for MCP instructions, prompts and resources by @jeffreyaven in #697

Full Changelog: v0.10.559...v0.10.582

Open source →

v0.10.560-0.20260722134741-d9185df8f84f22 Jul 2026pre-release

Nothing published for this version

v0.10.55921 Jul 2026

Install doc updates by @jeffreyaven in #690

What's Changed

Install doc updates by @jeffreyaven in #690
feat: default env file creation for mcp bundles + mcp server lifecycle logging (#691) by @jeffreyaven in #692

Full Changelog: v0.10.557...v0.10.559

Open source →

v0.10.55719 Jul 2026

feat: mcp credential (re)sourcing via server.env_file + reload_credentials tool ( #688 ) by @jeffreyaven in #689

What's Changed

feat: mcp credential (re)sourcing via server.env_file + reload_credentials tool (#688) by @jeffreyaven in #689
feat: add RedactHeaderValue utility to pushdown by @Sneha41sb in #685

Full Changelog: v0.10.542...v0.10.557

Open source →

v0.10.5423 Jul 2026

identity-federation by @general-kroll-4-life in #667

What's Changed

identity-federation by @general-kroll-4-life in #667
Feature/mcp registry submissions by @jeffreyaven in #671
Added ignore-paths for escaping build workflow by @jeffreyaven in #672
Feature/mcp registry submissions by @jeffreyaven in #673
Feature/mcp registry submissions by @jeffreyaven in #674
added get-app by @jeffreyaven in #676
consume any-sdk v0.5.3-alpha08 (casing + schema_driven_xml) + robot coverage by @jeffreyaven in #678
fix: symtab registers snake display column names + robot coverage for AWS e2e casing/walker behaviours (any-sdk v0.5.3-alpha11) by @jeffreyaven in #679
fix: mcp server CRLF stdio tolerance (#668), json render option (#669), upstream http error propagation (#670) + robot coverage by @jeffreyaven in #680

Full Changelog: v0.10.500...v0.10.542

Open source →

v0.10.50030 May 2026

claude code perms update by @jeffreyaven in #662

What's Changed

claude code perms update by @jeffreyaven in #662
MCP Updates by @jeffreyaven in #666

Full Changelog: v0.10.489...v0.10.500

Open source →

v0.10.490-0.20260529072642-9f635107afa729 May 2026pre-release

Nothing published for this version

v0.10.48928 May 2026

shell-fail-eager by @general-kroll-4-life in #646

What's Changed

shell-fail-eager by @general-kroll-4-life in #646
policy-based-retry by @general-kroll-4-life in #647
slash-path-parameters by @general-kroll-4-life in #648
mcp-server-restricted by @general-kroll-4-life in #649
added describe method by @jeffreyaven in #650
mcp: trim tool surface, add prompt + lifecycle, expand server_info by @jeffreyaven in #651
mcp: server modes, elicitation gating, audit subsystem (PR2) by @jeffreyaven in #652
boolean-comparisons by @general-kroll-4-life in #653
aws-sts-support by @general-kroll-4-life in #654
best-effort-integration-testing by @general-kroll-4-life in #655
extended-foreign-auth-testing by @general-kroll-4-life in #656
testing-materials-assembly by @general-kroll-4-life in #657
graphql enhancements by @jeffreyaven in #658

Full Changelog: v0.10.426...v0.10.489

Open source →

v0.10.47417 May 2026

shell-fail-eager by @general-kroll-4-life in #646

What's Changed

shell-fail-eager by @general-kroll-4-life in #646
policy-based-retry by @general-kroll-4-life in #647
slash-path-parameters by @general-kroll-4-life in #648
mcp-server-restricted by @general-kroll-4-life in #649
added describe method by @jeffreyaven in #650
mcp: trim tool surface, add prompt + lifecycle, expand server_info by @jeffreyaven in #651
mcp: server modes, elicitation gating, audit subsystem (PR2) by @jeffreyaven in #652

Full Changelog: v0.10.426...v0.10.474

Open source →

v0.10.427-0.20260517064127-93d989bd44e117 May 2026pre-release

Nothing published for this version

v0.10.427-0.20260417102643-1e8f9de6b52a17 Apr 2026pre-release

Nothing published for this version

v0.10.42614 Apr 2026

Nothing published for this version

v0.10.4216 Apr 2026

Nothing published for this version

v0.10.38312 Mar 2026

Nothing published for this version

v0.9.33914 Jan 2026

Nothing published for this version

v0.9.3377 Jan 2026

Nothing published for this version

v0.9.3155 Dec 2025

Nothing published for this version

v0.9.3113 Dec 2025

Nothing published for this version

v0.9.26630 Nov 2025

Nothing published for this version

v0.9.251-0.20251113004620-26946d65b54c13 Nov 2025pre-release

Nothing published for this version

v0.9.25026 Oct 2025

Nothing published for this version

v0.8.176-0.20251022115605-7c1e4b0a4b6222 Oct 2025pre-release

Nothing published for this version

v0.8.176-0.20251012224814-44ee8240ab7512 Oct 2025pre-release

Nothing published for this version

v0.8.1759 Jul 2025

Nothing published for this version

v0.8.14121 Apr 2025

Nothing published for this version

v0.7.13124 Mar 2025

Nothing published for this version

v0.6.1229 Mar 2025

Nothing published for this version

v0.6.9518 Feb 2025

Nothing published for this version

v0.6.71-0.20250127130020-209f98f733ca27 Jan 2025pre-release

Nothing published for this version

v0.6.7027 Jan 2025

Nothing published for this version

v0.6.6524 Jan 2025

Nothing published for this version

v0.6.5031 Dec 2024

Nothing published for this version

v0.6.3219 Dec 2024

Nothing published for this version

v0.6.79 Dec 2024

Nothing published for this version

v0.6.530 Nov 2024

Nothing published for this version

v0.5.749-0.20241130045634-891ae7f6021b30 Nov 2024pre-release

Nothing published for this version

v0.5.749-0.20241127095725-1f022265002e27 Nov 2024pre-release

Nothing published for this version

v0.5.74830 Sept 2024

Nothing published for this version

v0.5.743-0.20240930205613-5b7fb04021eb30 Sept 2024pre-release

Nothing published for this version

v0.5.74216 Sept 2024

Nothing published for this version

v0.5.741-0.20240916230917-22bf72847a7c16 Sept 2024pre-release

Nothing published for this version

v0.5.7407 Sept 2024

Nothing published for this version

v0.5.735-0.20240907002718-437418128ff37 Sept 2024pre-release

Nothing published for this version

v0.5.735-0.20240905225820-50ac59bc3ef15 Sept 2024pre-release

Nothing published for this version

Your coding agent can read these notes before it upgrades. Set up the MCP server →

github.com/stackql/stackql

Release timeline

Releases

What's Changed

Breaking change: describe_resource MCP tool retired

MCP protocol revision pinning (--mcp.protocol.version)

DESC classed as read-only by the MCP policy gate

OTLP/HTTP push exporter for --output otel

Bug fix: JOIN without an ON clause

Preview functionality (unstable)

Dependency and packaging updates

What's Changed

Additional notes re pure Go SQLite backend (first release after the modernc migration)

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Breaking change: `describe_resource` MCP tool retired

MCP protocol revision pinning (`--mcp.protocol.version`)

`DESC` classed as read-only by the MCP policy gate

OTLP/HTTP push exporter for `--output otel`

Bug fix: `JOIN` without an `ON` clause