Skip to content

Databricks releases, every cloud

All GAPreviewBehavior changeDeprecationUpdate

43 releases of 1321

Last updated

  1. Configurable retention for system tables is in Beta

    Retention period can be set from 30 to 3650 days.

    #System tables & audit logs
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  2. Partner-powered AI features can no longer be disabled in the settings UI

    Settings API still allows enable or disable until November 1, 2026.

    #Administration#Databricks AI
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  3. The partner-powered AI features setting will be removed Coming soon

    Settings will remain as is, but changes will require contacting the account team after removal.

    #Administration#Databricks AI
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  4. Private network gateway is in Beta

    Connects serverless compute to VNet and on-premises systems through a managed gateway. Enabled from account console Previews page.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(unknown)
  5. Private network gateway is in Private Preview

    Connects serverless compute to VPC and on-premises systems through a managed gateway, reusing existing network connectivity configuration.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP(unknown)
  6. Inbound Private Service Connect for performance-intensive services (Beta)

    Enables private connectivity to services like Zerobus Ingest and Lakebase Autoscaling on Google Cloud.

    #Networking#Security
    AWS(not on this cloud)Azure(not on this cloud)GCP, read it on their docsSAP(unknown)
  7. Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
  8. Cross-workspace access for serverless (Beta)

    Controls serverless network traffic between workspaces with ingress and egress rules.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  9. Custom URL access to workspaces over inbound Private Link (Beta)

    Uses general_access private endpoint, serves workspaces and account-level resources across regions.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(unknown)
  10. Tags page in Governance Hub (Beta)

    Provides a centralized view of tag usage, summarizes governed tags, and offers recommendations for invalid values. Requires account admins to enable from Previews page.

    #Administration#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  11. Alert system tables are in Public Preview

    Contains alerts and alert_evaluation_history tables for auditing and monitoring.

    #Databricks SQL#System tables & audit logs
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  12. Serverless outbound Private Service Connect to customer-managed resources (Public Preview)

    Keeps traffic off the public internet, adding network-layer defense against data exfiltration through customer-managed Google Cloud service attachment.

    #Networking#Security
    AWS(not on this cloud)Azure(not on this cloud)GCP, read it on their docsSAP(unknown)
  13. Email notifications for expiring service principal tokens are now generally available

    Sends emails to workspace admins 7 days before token expiration for used tokens with lifetime over 7 days. No configuration is required.

    #Administration#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs
  14. Governance Hub is in Beta

    Enables monitoring of data health and AI usage, requires account admin enablement from Previews page.

    #Administration
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  15. Networking charges for performance-intensive products

    Charges apply to cross-region and public-internet egress for Lakebase, OpenSharing SecureConnect, Zerobus, and Files API.

    #Billing#Networking
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP, read it on their docs
  16. Context-based ingress control for workspaces public access is now generally available

    Uses allow and deny rules to control access based on identities, network sources, and request types.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs
  17. Allowlist partner platform IPs in context-based ingress control (Beta)

    Supports Power BI, Tableau Cloud, and dbt platform, with automatic IP list updates.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  18. Serverless compute is now available in the Azure UK West region

    Supports notebooks, jobs, pipelines, and SQL warehouses, with private connectivity.

    #Compute#Networking
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP, read it on their docs
  19. Block specific internet destinations in network policies (Public Preview)

    Blocks destinations regardless of network access mode, enforced through REST API.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  20. Get this table by email. One Monday mail covering the week, filtered to the clouds and products you run. Weekly digest
  21. Legacy compute_preview system schema deprecated

    Replaced by system.compute schema.

    #Administration
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs
  22. Private Link for account-level resources (Beta)

    Connects account console through VPC interface endpoint instead of public internet. Requires configuration.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  23. Email notifications for expiring service principal tokens (Beta)

    Sends emails to workspace admins when tokens expire in 7 days, requiring no configuration.

    #Administration#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  24. Managed disaster recovery is now in Public Preview

    Replicates metadata, table data, and workspace assets to a secondary region. Requires account team enablement.

    #Administration
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  25. Mission Critical add-on is now in Public Preview

    Unlocks managed disaster recovery and ESC for a single compute rate, enabled per workspace.

    #Administration
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  26. Inbound Private Link for performance-intensive services is now generally available

    Supports Lakebase Autoscaling and Zerobus Ingest.

    #Networking#Security
    AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP, read it on their docs
  27. Intra-VNet NSG rule hardening for Azure Databricks is now in Public Preview

    Restricts workspace traffic to host and worker subnet CIDRs. Applies to classic compute plane workspaces.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  28. Configure an additional recipient for workspace operational emails

    Receives operational updates like breaking changes and incident communications, use a distribution-list alias for multiple people.

    #Administration
    AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP, read it on their docs
  29. Azure UK South now has a dedicated regional control plane

    New workspaces require firewall allowlist entries for SCC relay tunnel and other IPs. Existing workspaces use UK West control plane unless migrated.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP, read it on their docs
  30. Connect Azure Databricks to on-premises resources using an SSH reverse tunnel

    Replaces inbound firewall access, works with classic and serverless compute.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  31. Connect Databricks to on-premises resources using an SSH reverse tunnel

    Uses proxy VMs in AWS, replacing inbound firewall access.

    #Networking#Security
    AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP(not on this cloud)
  32. Updated AWS tag character restrictions

    Tag keys and values now cannot contain spaces or /. Tag keys also cannot be just . , .. , or _index.

    #Administration
    AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP(not on this cloud)
  33. Inbound Private Link for performance-intensive services (Public Preview)

    Enables private connectivity for Zerobus Ingest and Lakebase Autoscaling.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  34. Update workspace network configuration to VNet injection is now GA

    Migrates from Databricks-managed VNet to customer-owned VNet.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  35. Serverless outbound IPs available through public JSON endpoint (Public Preview)

    Replaces existing stable IPs, requires Public Preview enrollment.

    #Networking#Security
    AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP(unknown)
  36. Azure virtual network service endpoint policies are now generally available

    Apply to classic compute for outbound storage access filtering. Requires configuration.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(unknown)
  37. Inbound Private Link for performance-intensive services (Beta)

    Enables private connectivity to Zerobus Ingest and Lakebase Autoscaling.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(unknown)
  38. Serverless egress control is now generally available

    Manages outbound connections with restricted access and FQDN filtering.

    #Networking#Security
    AWS(not on this cloud)Azure(not on this cloud)GCP, read it on their docsSAP(unknown)
  39. Front-end PrivateLink for performance-intensive services (Beta)

    Supports private connectivity to Zerobus Ingest and Lakebase Autoscaling.

    #Networking#Security
    AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP(unknown)
  40. GCP Private Service Connect generally available

    No account team request needed to enable.

    #Networking#Security
    AWS(not on this cloud)Azure(not on this cloud)GCP, read it on their docsSAP(unknown)
  41. Configure Azure virtual network service policies for storage access (Public Preview)

    Filters outbound traffic from classic compute to specific Azure Storage accounts. Requires Azure virtual network service endpoint policies.

    #Networking
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(unknown)
  42. Updates for customer-managed VPC workspaces (Public Preview)

    Adds Private Service Connect conversion and network config changes.

    #Networking
    AWS(not on this cloud)Azure(not on this cloud)GCP, read it on their docsSAP(unknown)

Headlines, dates and product areas are Databricks' own, from the release notes published for each cloud, and every item links to the note it came from. The one-line summaries are ours. Not a Databricks product and not affiliated with Databricks, Inc.