1.4.0 (2026-06-04)

Features

• ci: Add support for windows/arm64 binary distribution (#3231) (10abf3b)
• datalineage: Add Data Lineage integration (#3285) (19353c3)
• server: Ignore unknown tools at startup with --ignore-unknown-tools flag (#3353) (5f0304f)
• tools/cloudsqlpg: Add remaining vector assist tools for Cloud SQL Postgres (#3203) (b514cbd)
• tools/spanner-search-catalog: Implement search_catalog tool (#3140) (defc086)

Bug Fixes

• auth/generic: Enforce issuer presence in opaque token validation (#3360) (1d8df0d)
• auth: Separate Google and Generic MCP OAuth verification (#3341) (dfd66ee)
• mcp: Support annotations and metadata within Tools to earlier MCP schemas (#3300) (9a88c72)
• oracle: Remove trailing semicolons from prebuilt tools (#3215) (fcad02d)
• server/auth: Centralize tool scopes validation (#3335) (adce4ab)
• server: Return null id for batch request rejection (#3333) (0b18d58)
• source/dataplex: Limit search results to pageSize (#3323) (905c1f6), closes #3308
• telemetry: Allow GCP project override (#2960) (3c83ba5)
• tool/bigquery: Prevent allowedDatasets bypass in forecast query (#3324) (45df461)
• tool/clickhouse: Handle ignored ProcessParameters error (#3340) (ddfd887)
• tools/clickhouse,tools/bigquery: Validate identifier parameters to prevent injection (#3219) (2f45f75)
• tools/looker: Escape filter values for unquoted parameters (#3289) (1711156)