[release] release nessie-0.95.0

CHANGELOG.md

@@ -8,35 +8,26 @@ as necessary. Empty sections will not end in the release notes.
 
 ### Highlights
 
-### Catalog S3 bucket configuration changes / breaking
+### Upgrade notes
 
-**If you have configured S3 IAM/STS options, read this section carefully and adapt your configuration!**
+### Breaking changes
 
-S3 buckets can now support both request-signing and assume-role/credentials-vending. To allow this, the
-following configuration options have _changed_:
+### New Features
 
-- The S3 bucket configuration option `client-authentication-mode` has been removed (defaulted to `REQUEST_SIGNING`).
-- A new S3 bucket configuration option `request-signing-enabled` has been added (defaults to `true`).
+### Changes
+
+### Deprecations
+
+### Fixes
 
-The assume-role/credentials-vending configuration has been split into 2 sets: one for Nessie server
-credentials and one for client credentials. This allows the Nessie server to directly use the configured S3
-credentials, but hand out scoped-down credentials from STS to clients.
+### Commits
 
-- Nessie server IAM options are configured via the `.server-iam.` prefix.
-- Nessie server IAM must be enabled using `.server-iam.enabled=true` on either the default S3 options or
-  bucket-specific options.
-- Client IAM must be enabled using `.client-iam.enabled=true` on either the default S3 options or bucket-specific
-  options.
-- Inheritance of default / bucket-specific options is supported for both `.server-iam.*` and `.client-iam.*`
-  configuration options.
-- The `.server-authentication-mode` configuration has been renamed to `.auth-type`.
-- See [S3 settings](https://projectnessie.org/nessie-latest/configuration/#s3-settings).
+## [0.95.0] Release (2024-08-07)
 
-The client IAM policy can be provided using either a static policy via `.client-iam.policy`, or, if
-`.client-iam.policy` is not present, Nessie will generate the policy scoped down to a table's location.
-Additional IAM policy statements can be supplied via the `.client-iam.client-iam-statements` _list_ property.
+### Catalog S3 bucket configuration changes / breaking
 
-### Upgrade notes
+- The S3 bucket configuration option `client-authentication-mode` has been removed (defaulted to `REQUEST_SIGNING`).
+- A new S3 bucket configuration option `request-signing-enabled` has been added (defaults to `true`).
 
 ### Breaking changes
 
@@ -60,15 +51,11 @@ Additional IAM policy statements can be supplied via the `.client-iam.client-iam
 - The Nessie Spark SQL extensions are now based on the same syntax and options that are provided by the
   Nessie CLI. A reference docs page for the Nessie Spark SQL command syntax was added to the web site.
 
-### Deprecations
-
 ### Fixes
 
 - Declare the `contentType` variable for CEL Authorization rules.
 - Catalog: Make Nessie time-travel functionality available to all use cases, including DDL.
 
-### Commits
-
 ## [0.94.3] Release (2024-07-29)
 
 ### New Features
@@ -752,7 +739,8 @@ Additional IAM policy statements can be supplied via the `.client-iam.client-iam
 - Tests: Make `ITCassandraBackendFactory` less flaky (#7186)
 - IntelliJ: Exclude some more directories from indexing (#7181)
 
-[Unreleased]: https://github.com/projectnessie/nessie/compare/nessie-0.94.3...HEAD
+[Unreleased]: https://github.com/projectnessie/nessie/compare/nessie-0.95.0...HEAD
+[0.95.0]: https://github.com/projectnessie/nessie/compare/nessie-0.94.3...nessie-0.95.0
 [0.94.3]: https://github.com/projectnessie/nessie/compare/nessie-0.94.2...nessie-0.94.3
 [0.94.2]: https://github.com/projectnessie/nessie/compare/nessie-0.94.1...nessie-0.94.2
 [0.94.1]: https://github.com/projectnessie/nessie/compare/nessie-0.94.0...nessie-0.94.1

README.md

@@ -106,7 +106,7 @@ Nessie Iceberg's integration is compatible with Iceberg as in the following tabl
 
 | Nessie version | Iceberg version | Spark version (Scala 2.12+2.13) | Hive version | Flink version          | Presto version                      | Trino version |
 |----------------|-----------------|---------------------------------|--------------|------------------------|-------------------------------------|---------------|
-| 0.94.4         | 1.5.0           | 3.3.x, 3.4.x, 3.5.x             | n/a          | 1.16.x, 1.17.x, 1.18.x | 0.277, 0.278.x, 0.279, 0.280, 0.281 | 419           |
+| 0.95.0         | 1.5.0           | 3.3.x, 3.4.x, 3.5.x             | n/a          | 1.16.x, 1.17.x, 1.18.x | 0.277, 0.278.x, 0.279, 0.280, 0.281 | 419           |
 
 ### Distribution
 To run:

SECURITY.md

@@ -6,8 +6,8 @@ Currently supported versions are listed below.
 
 | Version  | Supported          |
 |----------|--------------------|
-| 0.94.4   | :white_check_mark: |
-| < 0.94.4 | :x:                |
+| 0.95.0   | :white_check_mark: |
+| < 0.95.0 | :x:                |
 
 All Nessie 0.x.x versions are considered beta or even alpha releases and not supported after
 release of Nessie 1.0.0.

helm/nessie/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: nessie
 description: A Helm chart for Nessie
 type: application
-version: 0.94.4
+version: 0.95.0
 home: https://projectnessie.org/
 icon: https://raw.githubusercontent.com/projectnessie/nessie/main/site/docs/img/nessie.svg
 sources:

helm/nessie/README.md

@@ -8,7 +8,7 @@ helm-docs --chart-search-root=helm
 
 # Nessie Helm chart
 
-![Version: 0.94.4](https://img.shields.io/badge/Version-0.94.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 0.95.0](https://img.shields.io/badge/Version-0.95.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 A Helm chart for Nessie.
 

site/docs/releases.md

@@ -2,6 +2,70 @@
 
 **See [Nessie Server upgrade notes](server-upgrade.md) for supported upgrade paths.**
 
+## 0.95.0 Release (August 07, 2024)
+
+See [Release information on GitHub](https://github.com/projectnessie/nessie/releases/tag/nessie-0.95.0).
+
+### Catalog S3 bucket configuration changes / breaking
+
+- The S3 bucket configuration option `client-authentication-mode` has been removed (defaulted to `REQUEST_SIGNING`).
+- A new S3 bucket configuration option `request-signing-enabled` has been added (defaults to `true`).
+
+### Breaking changes
+
+- See above for breaking changes to S3 bucket configurations. 
+
+### New Features
+
+- Catalog/Trino: Add convenience REST endpoint to provide a _starter_ Trino catalog configuration.
+  Use `/iceberg-ext/v1/client-template/trino?format=static` for Trino 'static' catalog configurations,
+  `/iceberg-ext/v1/client-template/trino?format=dynamic` for Trino 'dynamic' catalog configurations.
+  Please take a look at the [Trino page](https://projectnessie.org/nessie-latest/trino/) for known
+  limitations in Trino.
+- Catalog: The Iceberg REST header `X-Iceberg-Access-Delegation` is now respected. The functionality
+  depends on the S3 bucket configuration options `request-signing-enabled` and `assume-role-enabled`.
+
+### Changes
+
+- Catalog: Only general object store configurations are returned via the `/iceberg/v1/config` endpoint.
+- Catalog: Table specific options are returned for each individual table, including scoped-down S3
+  credentials, if applicable.
+- The Nessie Spark SQL extensions are now based on the same syntax and options that are provided by the
+  Nessie CLI. A reference docs page for the Nessie Spark SQL command syntax was added to the web site.
+
+### Fixes
+
+- Declare the `contentType` variable for CEL Authorization rules.
+- Catalog: Make Nessie time-travel functionality available to all use cases, including DDL.
+
+### Commits
+* Quarkus 3.13.1 (#9236)
+* Helm Chart: mention imagePullSecrets in values.yaml (#9292)
+* Trino config-helper-endpoint & web site updates (#9270)
+* Catalog: split S3SessionsManager into several components (#9279)
+* Catalog: Enable time-travel and branch/tag selection for Iceberg REST in all cases (#9219)
+* Replace antlr w/ congocc grammar in SQL Extensions (#9256)
+* Build / IntelliJ: include the project root dir in the IDE window name (#9281)
+* Remove Windows CI (#9260)
+* Fix illegal access (#9280)
+* Catalog: expose `location` for namespaces, iam-policy per location (#9170)
+* Nit: remove references to unused `pr-native` label (#9272)
+* Release: make `publish-openapi` job idempotent (#9264)
+* Add signer-keys service (#9239)
+* Scala Compiler and how it disrespects things (#9261)
+* Adopt to Iceberg dropping support for Java 8 (#9259)
+* Blog: Polaris (#9257)
+* Fix Gradle/Kotlin deprecation warning (#9255)
+* Fix a Gradle deprecation (#9254)
+* Fix `NOTICE` vs `LICENSE` confusion (#9250)
+* Declare the `contentType` variable for CEL AuthZ rules. (#9251)
+* Add ability to generate IAM policies (#9244)
+* Protect Iceberg REST config endpoint (#9247)
+* Nit: make some test profiles non-`final` (#9243)
+* Rename `S3Clients.awsCredentialsProvider()` to make its usage clearer (#9242)
+* Add `StorageUri.pathWithoutLeadingTrailingSlash()` (#9241)
+* Add utility method to escape strings in IAMs (#9240)
+
 ## 0.94.4 Release (August 01, 2024)
 
 See [Release information on GitHub](https://github.com/projectnessie/nessie/releases/tag/nessie-0.94.4).

site/docs/server-upgrade.md

@@ -14,7 +14,7 @@ are not supported and must be avoided.
 
 | Rolling Upgrade Supported | _From_ Nessie version | _To_ Nessie version |
 |---------------------------|-----------------------|---------------------|
-| :heavy_check_mark:        | 0.61.0 or newer       | 0.94.4 or newer     |
+| :heavy_check_mark:        | 0.61.0 or newer       | 0.95.0 or newer     |
 | :x:                       | 0.40.0 or newer       | 0.61.0 or newer     |
 | :heavy_check_mark:        | 0.40.0 or newer       | 0.60.0 or newer     |
 | :x:                       | < 0.40.0              | 0.40.0 or newer     |

site/mkdocs.yml

@@ -33,7 +33,7 @@ extra_css:
 
 extra:
   versions:
-    nessie: 0.94.4
+    nessie: 0.95.0
     iceberg: 1.5.2
   double_curly: "{{"
   analytics:

site/nav.yml

@@ -53,6 +53,7 @@ nav:
     - Unreleased (nightly): '!include build/versions/nightly/mkdocs.yml'
 # Do NOT change, move or remove the following line!!
 # RELEASE_PLACEHOLDER_MARKER
+    - Nessie 0.95.0: '!include build/versions/0.95.0/mkdocs.yml'
     - Nessie 0.94.4: '!include build/versions/0.94.4/mkdocs.yml'
     - Nessie 0.94.3: '!include build/versions/0.94.3/mkdocs.yml'
     - Nessie 0.94.2: '!include build/versions/0.94.2/mkdocs.yml'

version.txt

@@ -1 +1 @@
-0.94.5-SNAPSHOT
+0.95.0