v1.8.4
This release includes bug fixes for API gateway SQL injection vulnerabilities, client state management issues, and decimal calculation accuracy in CubeStore, plus new CLI support for managing custom roles and improved leaf merge optimization in Tesseract.
1.8.4 (2026-10-12)
Bug Fixes
- api-gateway: Guard member-expression SQL eval against JS injection (#12207) (3c09976)
- client: Fix stale useCubeQuery state, missed dry runs and dropped granularity (#12217) (7a67afb), closes #3473 #3552 #12204 #5289 #9985 #7379 #3473 #3552 #5289 #9985 #7379
- cubestore: Don't widen decimal sums twice in full-merge top-k (#12188) (31edcf4)
Features
Source: original entry ↗
More from Cube
Follow Cube to get its new changes in your feed and email digest.
Stop rollupJoin and rollupLambda from leaking memory through memoized references
Fixed a memory leak in the schema-compiler where rollupJoin and rollupLambda functions were holding memoized references. This resolves performance degradation in long-running processes.
v1.8.5
Release 1.8.5 includes bug fixes for cubesql subqueries and databricks-jdbc-driver time handling, a new environment variable for controlling scheduled refresh timers, and performance improvements for pre-aggregation matching.
Version 1.8.3 Release
Release of version 1.8.3 with updates and fixes.