Validate resolved package installation path stays within configured path
Fixed validation to ensure that resolved package installation paths remain within the configured packages-install-path, preventing potential security or filesystem issues.
dbt-core 1.11.15 - September 08, 2026
Fixes
- Validate that a resolved package installation path stays within the configured packages-install-path (#N/A)
Contributors
Source: original entry ↗
More from dbt
Follow dbt to get its new changes in your feed and email digest.
dbt v1.12.6
dbt v1.12.6 includes improved v2 parser logging, fixes for wildcard FQN selectors, cumulative metrics parsing, and manifest persistence. Several bug fixes address parser output handling, nested model matching, and artifact uploads.
dbt v1.11.16
This patch release fixes wildcard FQN selectors to match nested models at any subfolder depth, includes semantic_manifest.json in artifact uploads, and validates tarball package download security.
v2.0.8
dbt 2.0.8 lowers the minimum Python version to 3.10, fixes TableNotFound errors during analyze operations on MapReduce, restores catalog.json writing for dbt build, and adds test helpers for integration testing.