Skip to content

Databricks releases, every cloud

All GAPreviewBehavior changeDeprecationUpdate

19 releases of 1321

Last updated

  1. Databricks Apps is now on by default for workspaces with the compliance security profile enabled

    Requires compliance security profile.

    #Databricks Apps#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  2. The READ METADATA privilege will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Grants read-only visibility into object metadata, including security-sensitive information.

    #Security#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  3. Genie Code scheduled tasks will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Replaces manual runs of recurring analysis tasks. Available in October 2026.

    #Genie Code#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  4. Query text is now masked by default in system tables and APIs

    Masking applies to system.query.history, Query History API, and List Queries API. Account admins can grant access to unmasked text via databricks_pii_access group.

    #Audit logs#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  5. Secrets in Unity Catalog will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Replaces manual enablement, uses catalog.schema.secret namespace.

    #Security#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  6. Role-based access control (RBAC) will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Lets users assume a role with exclusive permissions, replacing accumulated permissions.

    #Security#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  7. Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
  8. SQL alert task in Lakeflow Jobs is now available by default for workspaces with the compliance security profile enabled

    Supports all Databricks compliance security profile standards, returns evaluation state as output.

    #Lakeflow#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  9. Zerobus Ingest is now enabled by default for workspaces with the compliance security profile

    Replaces manual connector setup for compliant workspaces.

    #Lakeflow#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  10. MANAGE no longer requires USE CATALOG or USE SCHEMA on the same object

    No longer requires USE CATALOG or USE SCHEMA on the same object, but still needs them on parent containers.

    #Security#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  11. Dedicated group clusters will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Enables shared compute for groups with compliance security profile, supporting Databricks Runtime for ML and RDD APIs.

    #Compute#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  12. Variant will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Ingests semi-structured data from sources like Kinesis and REST APIs. Available in July 2026.

    #Delta Lake#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  13. AI Search high QPS will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Replaces manual configuration for high-throughput workloads, existing endpoints unchanged.

    #AI Search#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  14. Query-based connectors in Lakeflow Connect will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Replaces CDC configuration, supports Oracle, Teradata, and others.

    #Lakeflow#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  15. Databricks SQL alerts are now available by default for workspaces with the compliance security profile enabled

    Supports all compliance security profile standards, monitors data and KPIs via scheduled queries.

    #Databricks SQL#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs
  16. Lakeflow Designer will soon be available by default for workspaces with the compliance security profile enabled Coming soon

    Replaces manual coding for data preparation and transformation. Available late July 2026.

    #Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  17. Identity federation enabled by default for all new workspaces

    Does not affect existing workspaces.

    #Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs
  18. Upcoming behavior change: Choose entitlements when adding principals to workspaces Coming soon

    Grants entitlements explicitly when adding principals, replacing inheritance from users system group.

    #Identity#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  19. Postgres password authentication is now disabled by default for new Lakebase projects

    Existing projects are unaffected, enable in project settings to allow.

    #Lakebase#Security
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  20. Get this table by email. One Monday mail covering the week, filtered to the clouds and products you run. Weekly digest
  21. The sourceIpAddress field in audit logs will no longer include a port number Coming soon

    Removes port number, which was always 0, for consistency with other logs.

    #Audit logs
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)

Headlines, dates and product areas are Databricks' own, from the release notes published for each cloud, and every item links to the note it came from. The one-line summaries are ours. Not a Databricks product and not affiliated with Databricks, Inc.