17.2.0 Patch Releases

Profiling with Kerberos authentication, such as MS SQL, no longer requires replacing the whole DPE serverPolicy to avoid Access forbidden to file errors. Set dpe.kerberos.configDir to the directory with your JAAS config, krb5.conf, and keytab, and use the new dpe.serverPolicyExtra to add rules to the default policy instead of replacing it.

Browsing Google Cloud Storage buckets no longer fails with ArrayIndexOutOfBoundsException when the bucket contains objects whose names start with /.

CData drivers now always run with licensing telemetry turned off, regardless of the driver bundle or connection configuration.

When registering a lineage edge instance, ONE now shows the registration URL and the command to run.

The scan plan sidebar now refreshes automatically, so it always shows the latest scan run status and newly queued scans.

You can download debug archives of earlier scan runs from the scan run history, using the new action menu on each run.

You can’t save a scan plan with a malformed value reference, such as @@ref:akv:name without square brackets. Previously, the plan was saved anyway and it wasn’t possible to list, edit, or delete any scan plan on the Scan Plans page. Plans already affected are now shown as misconfigured.

When migrating from an older version, Salesforce is now recognized as a supported technology for lineage.

Improved handling of secret values created with the secret create command in standalone lineage scanners.

AI fallback scanner logs no longer name a currency for spend and budget values.

Improvements to the lineage diagram:

Users with View metadata access to catalog items and connections can no longer create or edit SQL catalog items and data slices.

Improved enforcement of the Person access level in governance roles.

Keycloak realm initialization no longer fails or stores altered values when passwords or client secrets contain special characters such as ", \, +, or %.

Upgraded third-party dependencies and the Java runtime in ONE Web Application, Metadata Management Module, Audit Module, Data Processing Module (DPM), Data Processing Engine (DPE), ONE Object Storage (MinIO), the MCP server, and AI services for enhanced security and stability.

Fixed an issue where DPM could stop communicating with DPEs connected in the firewall-friendly mode, such as hybrid DPEs, when several slow data previews ran at the same time. The DPEs appeared disconnected and other requests stalled until the previews timed out.

Result files of failed jobs, such as a failed lookup creation, are now deleted from ONE Object Storage. Previously, they remained there permanently and could fill up the storage, causing later jobs to fail.

Canceled DPE jobs now consistently have the Killed status instead of occasionally being listed as failed or as succeeded with partial results.

The Metadata Extraction Service database migration no longer fails on PostgreSQL 15 with function pg_input_is_valid(text, unknown) does not exist.

In Ataccama Cloud environments, Keycloak no longer fails to start with Database not up-to-date after an upgrade.

Asset promotion no longer fails on import with a duplicate key error when the target environment already contains an item with the same ID, such as a deleted item or the same item under a different parent.

ONE Data tables created, changed, or deleted by users without Editing access to the catalog now update the corresponding catalog items. Previously, such tables didn’t get a corresponding catalog item, and catalog items of recreated tables stayed at the old version.

Chat with documentation now links to the correct documentation version.