diff --git a/CHANGELOG.md b/CHANGELOG.md index fd34127..4528392 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [0.0.7] - 2026-02-24 + +### Fixed +- Validate numeric metadata casts (footer_size, file_size_bytes) to prevent silent truncation +- Error on missing delete files instead of silent data corruption +- Harden path resolver against path traversal, null bytes, encoded slash bypass, and unicode edge cases +- Validate decimal type string parsing and precision/scale bounds +- Handle empty catalogs where data directory does not yet exist +- Reject column_id values exceeding i32 range + ## [0.0.6] - 2026-02-13 ### Added @@ -66,6 +76,7 @@ Initial release. - Filter pushdown to Parquet - Query-scoped snapshot isolation +[0.0.7]: https://github.com/hotdata-dev/datafusion-ducklake/compare/v0.0.6...v0.0.7 [0.0.6]: https://github.com/hotdata-dev/datafusion-ducklake/compare/v0.0.5...v0.0.6 [0.0.5]: https://github.com/hotdata-dev/datafusion-ducklake/compare/v0.0.4...v0.0.5 [0.0.4]: https://github.com/hotdata-dev/datafusion-ducklake/compare/v0.0.3...v0.0.4 diff --git a/Cargo.lock b/Cargo.lock index a116dd6..2bdaa22 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1849,7 +1849,7 @@ checksum = "2b99e13947667b36ad713549237362afb054b2d8f8cc447751e23ec61202db07" [[package]] name = "datafusion-ducklake" -version = "0.0.6" +version = "0.0.7" dependencies = [ "anyhow", "arrow 57.3.0", diff --git a/Cargo.toml b/Cargo.toml index 61f8400..211aff0 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -3,7 +3,7 @@ members = [".", "benchmark"] [package] name = "datafusion-ducklake" -version = "0.0.6" +version = "0.0.7" edition = "2024" authors = ["zac@hotdata.dev", "shefeek@hotdata.dev", "anoop@hotdata.dev"] description = "DuckLake query engine for rust, built with datafusion." diff --git a/README.md b/README.md index 447644c..226966f 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,5 @@ # DataFusion-DuckLake -**This is an early pre-release and very much a work in progress.** - A [DataFusion](https://datafusion.apache.org/) extension for querying [DuckLake](https://ducklake.select). DuckLake is an integrated data lake and catalog format that stores metadata in SQL databases and data as Parquet files on disk or object storage. The goal of this project is to make DuckLake a first-class, Arrow-native lakehouse format inside DataFusion.