publish: getsentry/snuba@26.9.0

[sentry-release-bot]

Requested by: @chadwhitacre

Merge target: (default)

Quick links:

• View changes
• View check runs

Assign the accepted label to this issue to approve the release.

Targets

• docker[release]
• docker[latest]
• github

Checked targets will be skipped (either already published or user-requested skip). Uncheck to retry a target.

---

📋 Changelog

Breaking Changes 🛠

• (clickhouse) Raise minimum ClickHouse version to 25.8 by phacops in #8359

New Features ✨

Admin

• Load outcomes category/outcome dropdowns from Python by sentry-junior in #8418
• Allow system queries on allowlisted hosts by onewland in #8414
• Allow copy-tables CREATE on any target host by phacops in #8411
• Show ClickHouse cluster inventory by sentry-junior in #8374
• Add outcomes time range controls by sentry-junior in #8375
• Show query and storage node versions by sentry-junior in #8372
• Report ad hoc job executions to Slack by onewland in #8249

Allocation Policies

• Per-tenant attachment via match blocks by pbhandari in #8393
• Attach policies via sentry-options by pbhandari in #8387

Consumer

• Track consume to CH latency in the same way as push model. by tryangul in #8371
• Harden KIP-345 static membership for multi-Deployment rollouts by phacops in #8339

Consumers

• Honor clickhouse-concurrency without async-inserts by phacops in #8460
• Auto-restart on single-partition lag by sentry-junior in #8386

Eap

• Translate OP_REGEXP to ClickHouse match() by pbhandari in #8437
• Support literals in aggregation expressions by edwardgou-sentry in #8441

Eap Items

• Populate co-occurring attrs from eap_items_2 by onewland in #8470
• Add the eap_items_2 read switch by onewland in #8449
• Add the eap_items_2 storages by onewland in #8448
• Create the eap_items_2 read-only distributed tables by onewland in #8447
• Create the eap_items_2 downsample materialized views by onewland in #8443
• Create the eap_items_2 tables by onewland in #8438
• Add version column to eap_items_1_downsample_512_local by onewland in #8427
• Add version column to eap_items_1_downsample_64_local by onewland in #8426
• Add version column to eap_items_1_downsample_8_local by onewland in #8428
• Add version column to eap_items_1 by onewland in #8424
• Use rowbinary for pull consumer. by tryangul in #8389

Events

• Enable ReferrerGuardRailPolicy on errors by phacops in #8404
• Re-enable BytesScannedRejectingPolicy on errors by sentry-junior in #8383

Outcomes

• Add callback_error discard reason by msonnb in #8422
• Route old and billing queries to the daily table by dashed in #7877

Replacer

• Honor disable_query_final on INSERT SELECT by phacops in #8403
• Add org bypass for max-groups FINAL by onewland in #8399
• Tune REPLACE resources via a sentry-option by sentry-junior in #8380

Other

• (ci) Ship the DHI runtime as the only snuba image by oioki in #8301
• (clickhouse) Add partition attachment tooling by onewland in #8357
• (query) Add disable_query_final killswitch by phacops in #8402
• (snuba) Implement alternative pull-based Snuba(hackweek) by tryangul in #8355

Bug Fixes 🐛

Admin

• Allow listing migrations without every storage set configured by phacops in #8412
• Resolve allowlisted tables via EXPLAIN QUERY TREE by phacops in #8345
• Reject merge() in non-sudo system queries by phacops in #8344
• Validate copy-tables cluster names and require sudo by phacops in #8351
• Ignore caller-supplied tracing query_id by phacops in #8343
• Reject production queries with unconstrained OR branches by phacops in #8354
• Hide uncaught exception text from clients by phacops in #8348

Gocd

• Audit Rust consumer deploy targets by sentry-junior in #8472
• Trigger snuba-rs deploys on sentry-options changes by sentry-junior in #8423
• Deploy rust consumers and api on snuba ST by pbhandari in #8425
• Use deploy-pipeline monitors for canary health check by phacops in #8342

Querylog

• Drop illegal UUID SAMPLE BY from querylog_local by phacops in #8358
• Redact DangerousRawSQL and reused aliases by phacops in #8349

Other

• (clickhouse) Correct regexp compilation error code by sentry-junior in #8461
• (deletes) Stop reporting max row rejections by sentry-junior in #8340
• (jobs) Stop mass-assigning untrusted job params by phacops in #8346
• (migrations) Send HTTP progress during long ON CLUSTER DDL by phacops in #8413
• (replacer) Cap REPLACE queries at 10 minutes by sentry-junior in #8377
• (retention) Clamp write-path retention from sentry-options by phacops in #8361
• (rust) Stop attaching Kafka payloads to Sentry by phacops in #8352
• (schema.json) Policies can accept any number of arbitrary properties by pbhandari in #8421
• (tests) Expect ReferrerGuardRailPolicy explanation keys by sentry-junior in #8406
• AND-of-OR project filters still bypass ADMIN_ALLOWED_PROD_PROJECTS by phacops in #8370
• Client-controlled cross_org_query flag bypasses allocation quotas by phacops in #8363
• RPC subscription build_request does not re-bind project/org scope by phacops in #8366
• Full query result object logged on missing bytes scanned by phacops in #8364
• Full SnQL query body written to warning logs on parse failure by phacops in #8365
• Heatmap bucket limit only enforced for TYPE_INT attributes by phacops in #8367
• Unauthenticated /tests/*/drop truncates datasets and flushes Redis by phacops in #8369
• Real staff email committed in test fixture by phacops in #8368

Documentation 📚

• Clearer instructions and minor tweaks by ElioDiNino in #8464

Internal Changes 🔧

Admin

• Make region URLs list more dynamic by ElioDiNino in #8463
• Remove migration status overwrite route by phacops in #8347

Ci

• Bump action-build-and-push-images to WIF-token fix by sentry-junior in #8440
• Run more of sentry's tests when we change the API in snuba by pbhandari in #8237

Deps

• Bump js-yaml from 3.15.1 to 3.15.2 in /snuba/admin by dependabot in #8446
• Bump brace-expansion to patched 1.1.18 and 5.0.9 by oioki in #8436
• Bump browserslist from 4.24.2 to 4.28.9 in /snuba/admin by dependabot in #8435
• Bump sqlparse to 0.6.0 and sql-metadata to 3.0.1 by dependabot in #8398
• Bump arroyo for batch flush-reason metric by tryangul in #8405
• Bump devservices to >=1.5.0 by sentry-junior in #8395
• Bump astral-sh/setup-uv from 10.0.0 to 10.0.1 by dependabot in #8384
• Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by dependabot in #8385
• Bump getsentry/craft from 2.28.0 to 2.30.1 by dependabot in #8312
• Bump astral-sh/setup-uv from 9.0.0 to 10.0.0 by dependabot in #8313

Resolvers

• Inline the trace item stats resolver by MeredithAnya in #8452
• Remove unused resolver declarations by MeredithAnya in #8451

Other

• (attribute-values) Return the most recent items by MeredithAnya in #8409
• (attrvalues) Support array-of-string attributes and typed value_data by MeredithAnya in #8390
• (cli) Make attach-partitions output legible for long runs by onewland in #8432
• (clickhouse) Remove clickhouse-driver native protocol path by sentry-junior in #8307
• (devservices) Upgrade ClickHouse to 25.8.16.10001.altinitystable by sentry-junior in #8360
• (dlq) Add a TTL to the DLQ instruction key by strongs in #8391
• (docker) Exclude gha-creds files from image context by phacops in #8439
• (docs) Move dependencies to pyproject by sentry-junior in #8315
• (eap) Drop the materialized view writing to co-occurring attrs v1 by phacops in #8408
• (events) Cap error queries at 25 seconds by sentry-junior in #8381
• (generic-metrics) Limit remaining storages by sentry-junior in #8458
• (genmetrics) Remove from deployments by MeredithAnya in #8434
• (gocd) Use GitHub App credentials by joshuarli in #8396
• (image) Use scoped gha-snuba-push SA for GAR push by oioki in #8444
• (manual-jobs) Bound the manual jobs Redis keys by strongs in #8397
• (replacer) Drop pre-insert count and speed up FINAL inserts by sentry-junior in #8379
• (rust-consumers) Validate_schema option by MeredithAnya in #8433
• (us2) Remove us2 region from pipelines by dmajere in #8407
• (warden) Add security review by sentry-junior in #8304
• Bump sentry-conventions to 0.23.0 by getsentry-bot in #8459
• Bump sentry-conventions to 0.22.0 by getsentry-bot in #8457
• Migrate fast revert to actions/create-github-app-token by joshuarli in #8417
• Bump sentry-conventions to 0.21.0 by getsentry-bot in #8420
• Pin action-build-and-push-images to latest master by oioki in #8410
• Test forcing of gzip layer compression on published images by oioki in #8392
• Bump sentry-conventions to 0.20.0 by getsentry-bot in #8388
• Harden workflow secret passing by phacops in #8350
• Bump new development version by sentry-release-bot[bot] in 4b817390

Other

• Reapply "feat(eap-items): carry version through the downsample materi… by onewland in #8442
• Cleanup types with aliases. Make noisy logs debug. Add upload jitter.… by tryangul in #8373
• deploy(gocd): roll image for eap-items static-membership shadows by sentry-junior in #8353

[github-actions]

Approved. Checking CI status on the release branch. Publishing will start automatically when CI passes.

[getsantry]

CI checks passed for getsentry/snuba@26.9.0. Publishing is starting now.

[github-actions]

Publishing: run#35002312109

[github-actions]

Published successfully: run#35002312109