This is a bug fix release for various issues discovered after we released 1.4.1. PR [#19716] addresses the issues raised in CVE-2025-64429. Users of the DuckDB encryption feature are encouraged to update.
What's Changed
- bump duckdb-azure ref for 1.4.1 by @benfleis in https://github.com/duckdb/duckdb/pull/19275
- Fix regex optimization to remove flags when converting to contains by @mlafeldt in https://github.com/duckdb/duckdb/pull/19290
- feat: Fix length of sort keys by @krlmlr in https://github.com/duckdb/duckdb/pull/19260
- Pass lambda bindings to next binder by @Dtenwolde in https://github.com/duckdb/duckdb/pull/19144
- bump Julia to v1.4.1 by @c-herrewijn in https://github.com/duckdb/duckdb/pull/19306
- Use cross-compilation for static libs on OSX by @hannes in https://github.com/duckdb/duckdb/pull/19304
- Allow multiple read-only attaches to the same database across database instances by @Mytherin in https://github.com/duckdb/duckdb/pull/19319
- hugeint_t fixes by @carlopi in https://github.com/duckdb/duckdb/pull/19318
- Use CMAKE_<LANG>_COMPILER_LAUNCHER by @evertlammerts in https://github.com/duckdb/duckdb/pull/19326
- Add settings field to test config by @Mytherin in https://github.com/duckdb/duckdb/pull/19330
- Keep track of which database managers have which databases attached in the DatabaseFilePathManager by @Mytherin in https://github.com/duckdb/duckdb/pull/19338
- Bugfixes by @lnkuiper in https://github.com/duckdb/duckdb/pull/19329
- skip several ci jobs on prs that only bump extensions by @samansmink in https://github.com/duckdb/duckdb/pull/19249
- [C API] bind_value out of range fix by @taniabogatsch in https://github.com/duckdb/duckdb/pull/19348
- Destroy TaskNotifier prior to calling FinishTask by @Mytherin in https://github.com/duckdb/duckdb/pull/19373
- Remove zip bombs by @Mytherin in https://github.com/duckdb/duckdb/pull/19380
- Avoid calling shared_from_this() and instead use the passed in ClientContext in buffered data by @Mytherin in https://github.com/duckdb/duckdb/pull/19379
- add test tag support [vfs integration tests p1] by @benfleis in https://github.com/duckdb/duckdb/pull/19331
- Throw if non-
VARCHARkey is passed tojson_objectby @lnkuiper in https://github.com/duckdb/duckdb/pull/19365 - BUGFIX: Silent failure to write row groups with large lists by @J-Meyers in https://github.com/duckdb/duckdb/pull/19376
- Fixes for CTE (de)serialization compatibility with older versions by @Mytherin in https://github.com/duckdb/duckdb/pull/19393
- Fix [#18139]: correctly initialize flush size in MemoryStream, and re-use writer states by @Mytherin in https://github.com/duckdb/duckdb/pull/19398
- Fixup Kalman fiter: bound it's (0, scale_factor), not (0, 1) by @carlopi in https://github.com/duckdb/duckdb/pull/19395
- Fix StringDecompress for hugeint_t values by @ywelsch in https://github.com/duckdb/duckdb/pull/19403
- Fix [#19211]: make INSERT OR IGNORE correctly handle multiple constraints by @Mytherin in https://github.com/duckdb/duckdb/pull/19409
- Issue [#19386]: ICU TZDEFAULT by @hawkfish in https://github.com/duckdb/duckdb/pull/19413
- Fix issue in MetadataManager triggered when doing concurrent reads while checkpointing, and rework concurrent attach / detach test by @Mytherin in https://github.com/duckdb/duckdb/pull/19424
- ADBC fix: escape schema, table and column identifiers by @evertlammerts in https://github.com/duckdb/duckdb/pull/19407
- v1.4: Only serialize CTE nodes when MATERIALIZED is specified by @Mytherin in https://github.com/duckdb/duckdb/pull/19420
- Add forwards compatibility tests to CI by @Mytherin in https://github.com/duckdb/duckdb/pull/19432
- Internal [#6168]: Unsupported Correlated Binds by @hawkfish in https://github.com/duckdb/duckdb/pull/19431
- Don't pull up filters through
DISTINCT ONand makeenumcasts in Parquet safe (bugfixes) by @lnkuiper in https://github.com/duckdb/duckdb/pull/19406 - Get table bindings for all operators under a logical get if the logical get function is an unnest by @Tmonster in https://github.com/duckdb/duckdb/pull/19467
- WASM [#1897]: UTC Offset Support by @hawkfish in https://github.com/duckdb/duckdb/pull/19464
- Add tests for nested lambda bindings by @Dtenwolde in https://github.com/duckdb/duckdb/pull/19453
- [Compression] Fix issue in ZSTD decompression related to mis-interpreted segment offsets by @Tishj in https://github.com/duckdb/duckdb/pull/19475
- vfs integration tests p2 - update (env) vars and tests by @benfleis in https://github.com/duckdb/duckdb/pull/19428
- CI Fix: clear benchmark cache between runs by @Mytherin in https://github.com/duckdb/duckdb/pull/19508
- Make
DatabaseInstance::log_manageraunique_ptrby @Flogex in https://github.com/duckdb/duckdb/pull/19471 - Support non-standard NULL in Parquet again by @Mytherin in https://github.com/duckdb/duckdb/pull/19523
- Bump: inet by @samansmink in https://github.com/duckdb/duckdb/pull/19526
- Bump multiple extensions by @samansmink in https://github.com/duckdb/duckdb/pull/19522
- add upcoming patch release to internal versions by @samansmink in https://github.com/duckdb/duckdb/pull/19525
- Add test that either 'latest' or 'vX.Y.Z' are supported STORAGE_VERSIONs by @carlopi in https://github.com/duckdb/duckdb/pull/19527
- Moving staging to cf and uploading to install bucket by @hannes in https://github.com/duckdb/duckdb/pull/19539
- Creating separate OSX cli binaries for each arch by @hannes in https://github.com/duckdb/duckdb/pull/19538
- [Dev] Disable the use of
ZSTDif the block_manager is theInMemoryBlockManagerby @Tishj in https://github.com/duckdb/duckdb/pull/19543 - Follow up to staging move by @hannes in https://github.com/duckdb/duckdb/pull/19551
- Bugfixes: Parquet JSON+DELTA_LENGTH_BYTE_ARRAY and sorting iterator by @lnkuiper in https://github.com/duckdb/duckdb/pull/19556
- [ported from main] Fix bug initializing std::vector for column names by @evertlammerts in https://github.com/duckdb/duckdb/pull/19555
- Disable jemalloc on BSD by @lnkuiper in https://github.com/duckdb/duckdb/pull/19560
- Fix race condition between
AppendandScanby @Captain32 in https://github.com/duckdb/duckdb/pull/19571 - Release relevant tests to still be run on all builds by @carlopi in https://github.com/duckdb/duckdb/pull/19559
- fix inconsistent behavior in remote read_file/blob, and prevent union… by @Maxxen in https://github.com/duckdb/duckdb/pull/19531
- [v1.4-andium] Add Profiler output to logger interface by @carlopi in https://github.com/duckdb/duckdb/pull/19572
- Fix edge case in uncompressed validity scan with offset and fix off-by-one in ArrayColumnData::Select by @Maxxen in https://github.com/duckdb/duckdb/pull/19567
- Skip compiling remote optimizer test when TSAN Is enabled by @Mytherin in https://github.com/duckdb/duckdb/pull/19590
- Wal index deletes by @artjomPlaunov in https://github.com/duckdb/duckdb/pull/19477
- add vortex external extension by @samansmink in https://github.com/duckdb/duckdb/pull/19580
- Avoid eagerly resolving the next on-disk pointer in the MetadataReader, as that pointer might not always be valid by @Mytherin in https://github.com/duckdb/duckdb/pull/19588
- [DevEx] Improve error message when FROM clause is omitted by @Tishj in https://github.com/duckdb/duckdb/pull/18995
- bump iceberg by @Tmonster in https://github.com/duckdb/duckdb/pull/19618
- Improve error message around compression type deprecation/availability checks by @Tishj in https://github.com/duckdb/duckdb/pull/19619
- Increase cast-cost of old-style implicit cast to string by @Maxxen in https://github.com/duckdb/duckdb/pull/19621
- Try to prevent overshooting of
FILE_SIZE_BYTESby pre-emptively increasing bytes written in Parquet writer by @lnkuiper in https://github.com/duckdb/duckdb/pull/19622 - Bump: spatial by @Maxxen in https://github.com/duckdb/duckdb/pull/19620
- Detect invalid merge into action and throw exception by @Mytherin in https://github.com/duckdb/duckdb/pull/19636
- Fix [#19455]: correctly extract root table in merge into when running ajoin that contains single-sided predicates that are transformed into filters by @Mytherin in https://github.com/duckdb/duckdb/pull/19637
- Remove
FlushAllfromDETACHby @lnkuiper in https://github.com/duckdb/duckdb/pull/19644 - Bump MySQL scanner by @staticlibs in https://github.com/duckdb/duckdb/pull/19643
- Enable running all extensions tests as part of the build step by @carlopi in https://github.com/duckdb/duckdb/pull/19631
- Always remember extra_metadata_blocks when checkpointing by @ywelsch in https://github.com/duckdb/duckdb/pull/19639
- duckdb_logs_parsed to do case-insensitive matching by @carlopi in https://github.com/duckdb/duckdb/pull/19669
- Categorize ParseLogMessage as CAN_THROW_RUNTIME_ERROR by @carlopi in https://github.com/duckdb/duckdb/pull/19672
- Fixup linking for LLVM by @carlopi in https://github.com/duckdb/duckdb/pull/19668
- Log total probe matches in hash join by @lnkuiper in https://github.com/duckdb/duckdb/pull/19683
- Fix InsertRelation on attached database by @evertlammerts in https://github.com/duckdb/duckdb/pull/19583
- Add request timing to HTTP log by @samansmink in https://github.com/duckdb/duckdb/pull/19691
- Add missing query location to blob cast by @Mytherin in https://github.com/duckdb/duckdb/pull/19689
- Bump: aws, ducklake, httpfs, iceberg by @samansmink in https://github.com/duckdb/duckdb/pull/19654
- Bump: delta, ducklake, httpfs by @samansmink in https://github.com/duckdb/duckdb/pull/19715
- Fix [#19355]: correctly resolve subquery in MERGE INTO action condition by @Mytherin in https://github.com/duckdb/duckdb/pull/19720
- Fix [#19700]: correctly sort output selection vector in nested selection operations by @Mytherin in https://github.com/duckdb/duckdb/pull/19718
- Bump httpfs and resume testing on Windows by @carlopi in https://github.com/duckdb/duckdb/pull/19714
- [Dev] Fix assertion failure for empty ColumnData serialization by @Tishj in https://github.com/duckdb/duckdb/pull/19713
- Bump the Postgres scanner extension by @Mytherin in https://github.com/duckdb/duckdb/pull/19730
- Add explicit Initialize(HTTPParam&) method to HTTPClient by @carlopi in https://github.com/duckdb/duckdb/pull/19723
- Logs to be case-insensitive also at enable_logging callsite by @carlopi in https://github.com/duckdb/duckdb/pull/19734
- Fix CVE https://github.com/duckdb/duckdb/security/advisories/GHSA-vmp8-hg63-v2hp crypto issues by @samansmink in https://github.com/duckdb/duckdb/pull/19716
Full Changelog: https://github.com/duckdb/duckdb/compare/v1.4.1...v1.4.2