Changes since 26.1.0:

• AI assistant:
  • Added the ability to use different AI engines in separate Chat conversations
  • Added support for Grok AI assistant
  • Added the ability to use OpenAI and Grok engines through engine subscriptions, without configuring personal API tokens
  • Added user interaction tool to AI Chat. AI can ask follow-up questions with predefined answer options
• Secret management for database credentials:
  • Added support for Google Secret Manager
  • Added support for Azure Key Vault
• Data Editor:
  • Added HTML preview for text/html values in the Value panel
• Data transfer:
  • Added the ability to transfer primary and foreign keys, along with data migration, from one database to another
  • Redesigned the Tables Mapping step for database-to-database transfer
• Data compare: Added the ability to compare query results without re-executing queries
• Connectivity:
  • Added global network profiles that can be used in all projects
  • Added support for retrieving passwords from a shell command for native database authentication
• Security:
  • Fixed the high vulnerability (CVE-2026-10050) in the jetty-security library. The library was updated to version 12.1.11
  • Fixed the high vulnerabilities in the netty-codec libraries. The netty-bom library was updated to version 4.2.16
  • Fixed CVE-2026-54291. PostgreSQL driver was updated to version 42.7.13
  • Fixed an XXE vulnerability caused by an unhardened XML parser (CWE-611)
  • Fixed an XXE vulnerability caused by inconsistent XML sanitization in the Value editor
  • Fixed an SQL injection vulnerability related to string formatting (CWE-89) in the Exasol extension in the application
  • Fixed an SQL injection vulnerability related to malicious names of downloaded files
  • Protected local server port and password data from exposure through dbeaver-instance.properties
  • Restricted presentation and execution of malicious content in AI Chat
  • Fixed unintended execution of executable files opened from Windows UNC paths
  • Fixed a remote code execution vulnerability related to virtual column creation
  • Added confirmation and allowlist checks before executing shell commands from connection initialization events
• New drivers:
  • Multi-Source Database driver can combine multiple databases into a single data source and run cross-database queries
  • DDL Driver: Added the ability to create data sources from DDL scripts to inspect and analyze database structure
  • etcd driver
  • Apache Doris
  • GreptimeDB
  • Timeplus
• Driver updates:
  • ClickHouse driver was updated to version 0.10.0
  • Couchbase driver was updated to version 3.12.1
  • Databend driver was updated to version 0.4.8
  • Databricks driver was updated to version 3.4.1
  • MongoDB driver was updated to version 5.7.0
  • PostgreSQL driver was updated to version 42.7.13 (Fixed CVE-2026-54291)
  • Starrocks driver was updated to version 1.1.2
• Databases:
  • Added OIDC authentication for MongoDB
  • BigQuery: the official BigQuery driver is now used by default, and the previous Simba driver was renamed to BigQuery (Legacy)
  • LibSQL: Added support for database views
  • Redshift: Added Microsoft Entra ID OAuth2 authentication