Skip to content

Antalya 26.3: Bump to v26.3.53.4 - #2595

Open
mkmkme wants to merge 990 commits into
antalya-26.3from
rebase/antalya-26.3/26.3.53
Open

mkmkme wants to merge 990 commits into
antalya-26.3from
rebase/antalya-26.3/26.3.53

Conversation

@mkmkme

@mkmkme mkmkme commented Oct 17, 2026

Copy link
Copy Markdown
Collaborator

In addition, ClickHouse#125569 was backported as well as in #2589

Changelog category (leave one):

  • Not for changelog (changelog entry is not required)

CI/CD Options

Exclude tests:

  • Fast test
  • Integration Tests
  • Stateless tests
  • Stateful tests
  • Unit tests
  • Performance tests
  • Aarch64 tests
  • All with ASAN
  • All with TSAN
  • All with MSAN
  • All with UBSAN
  • All with Coverage
  • All Regression
  • Disable CI Cache

Regression jobs to run:

  • Fast suites (mostly <1h)
  • Aggregate Functions (2h)
  • Alter (1.5h)
  • Benchmark (30m)
  • CAS (content-addressed storage; Antalya only)
  • ClickHouse Keeper (1h)
  • Iceberg (2h)
  • LDAP (1h)
  • OAuth (5m)
  • Parquet (1.5h)
  • RBAC (1.5h)
  • SSL Server (1h)
  • S3 (2h)
  • S3 Export (2h)
  • Swarms (30m)
  • Tiered Storage (2h)

PedroTadim and others added 30 commits September 24, 2026 10:11
…1037

Backport ClickHouse#121037 to 26.3: Fix segmentation fault in `RefreshTask::startup()` racing a parallel shutdown
…rted columns when a field type is unsupported
`croaring` v5.1.1 was backported to release branches that are still built
with clang-21. clang-21 MemorySanitizer checks the value instead of the
shadow of the index operand of AVX-512 `vpermi2var` intrinsics
(llvm/llvm-project#148785, fixed in clang-22), so
`avx512_emit_unique16` (reached from `MergeTextIndexesTask::executeStep`)
triggers `use-of-uninitialized-value` on runners with AVX-512 VBMI2, and
the server dies in every MSan stateless job.

Define `CROARING_COMPILER_SUPPORTS_AVX512=0` for MSan builds; croaring's
`isadetection.h` honours a predefined value. Non-MSan builds are unchanged.

Related: ClickHouse/clickhouse-private#76949

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…2934

Backport ClickHouse#112934 to 26.3: Keep Iceberg statistics for supported columns when a field type is unsupported
…7404

Backport ClickHouse#117404 to 26.3: Fix out of bound in timeSeriesGroupArray()
…1474

Backport ClickHouse#121474 to 26.3: Hide the password of a cluster-name `remote()` call in the query log
…x512-26.3

[26.3] Disable croaring AVX-512 kernels in MSan builds (clang-21 false positive)
…ILL and SYSTEM statements over ON CLUSTER
`ReadBufferFromAzureBlobStorage` rejected available metadata and
accessed an empty optional before the first successful request.

Negate the availability check and cover `NOT_INITIALIZED` before a
request.
…red size in the passthrough read shortcut
…rent tracker throws MEMORY_LIMIT_EXCEEDED
…8626

Backport ClickHouse#108626 to 26.3: Avoid vertical TTL delete for TTLDrop merges
…enable_local_infile` only in the configuration file
…order the `arrayFilter` result before limiting it
…0784

Backport ClickHouse#110784 to 26.3: Fix memory tracker leak when a parent tracker throws MEMORY_LIMIT_EXCEEDED
…0282

Backport ClickHouse#120282 to 26.3: Bound column count in inserted RowBinary header
Backport to 26.3: Fix a bug that MySQL/Postgres queries may run in an expired session
…7064

Backport ClickHouse#107064 to 26.3: Fix wrong column type in part after compound RENAME COLUMN swap
…7421

Backport ClickHouse#117421 to 26.3: Fix SQL injection through identifiers when inserting into a SQLite table
…adBuffer` limits and the multipart form budget
robot-clickhouse and others added 23 commits October 14, 2026 12:36
…4453

Backport ClickHouse#124453 to 26.3: Add S3 bucket to `remote_url_allow_hosts`
…9510

Backport ClickHouse#119510 to 26.3: Bump `mariadb-connector-c` to v3.4.10
…bypass through comments and backtick text lines
…5515

Backport ClickHouse#125515 to 26.3: Keep the user's settings in the embedded client of the web terminal and SSH
…GROUPING SETS` keys with `group_by_use_nulls`
…5575

Backport ClickHouse#125575 to 26.3: Do not eliminate aggregators of `GROUPING SETS` keys with `group_by_use_nulls`
…5661

Backport ClickHouse#125661 to 26.3: Validate `rabbitmq_routing_key_list` in the `RabbitMQ` engine
…5487

Backport ClickHouse#125487 to 26.3: Fix CapnProto schema depth check bypass through comments and backtick text lines
…5774

Backport ClickHouse#125774 to 26.3: Bump `vectorscan` from 5.4.11 to 5.4.13
… in `AvroConfluent` when reading an Avro `map` into a `Map` column
…4930

Backport ClickHouse#124930 to 26.3: Fix ATTACH for S3 disks created without 'remote_url_allow_hosts
…5505

Backport ClickHouse#125505 to 26.3: Fix a possible segmentation fault in `AvroConfluent` when reading an Avro `map` into a `Map` column
…3133

Backport ClickHouse#123133 to 26.3: Require permission to override named collections
…116724

Revert "Verify the server certificate hostname on outbound TLS connections"
@github-actions

github-actions Bot commented Oct 17, 2026 •

Copy link
Copy Markdown

Workflow [PR], commit [3557eae]

mkmkme and others added 3 commits October 17, 2026 18:44
Port Altinity commit c594414 unchanged. Replace `MD5` with
`cityHash64`, preserving the alias/lambda coverage without requiring
OpenSSL in Fast test.

CI: https://altinity-build-artifacts.s3.amazonaws.com/json.html?PR=2595&sha=7b92fdeee24292881da6cdd92df65c84e619db0e&name_0=PR&name_1=Fast+test&name_2=Tests
Antalya sends single-shard `remote` requests as initial queries.
After granting `SELECT`, both network and local execution succeed,
with default or explicit credentials. Update the reference and comments.

Manually verified that missing privileges and restrictive row policies
still deny all four variants. Production behavior is unchanged.

CI: https://altinity-build-artifacts.s3.amazonaws.com/json.html?PR=2595&sha=7b92fdeee24292881da6cdd92df65c84e619db0e&name_0=PR&name_1=Fast+test&name_2=Tests
…0849

Backport ClickHouse#100849 to 26.4: Fix shared cache issues between Protobuf and ProtobufList
@mkmkme

mkmkme commented Oct 17, 2026

Copy link
Copy Markdown
Collaborator Author

Backported ClickHouse#110757, which is a 26.4 backport of ClickHouse#100849. Here's the Codex summary of the reason:

The Protobuf recovery tests fail consistently in ASan and UBSan because 26.3 caches schema importers only by directory and reuses descriptors by message name. Different schemas defining Row therefore receive the first schema’s descriptor. This is a production cache bug, not a sanitizer or merge-resolution issue.

Decision: backport upstream PR ClickHouse#100849, including the cache-key fix, ProtobufList fallback, documentation, and upstream regression tests. This fixes the underlying behavior rather than masking it by clearing the cache in tests.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.