Changelog

The authoritative, full changelog lives in CHANGELOG.md in the repository, and every release is published on the GitHub Releases page with signed checksums and an SBOM. This page highlights the headline changes — subscribe via the RSS feed.

v2.7.0 — 2026-08-13

Cost Center (Pro) — showback/chargeback analytics for self-hosted ClickHouse. Real consumption is priced from system.query_log (CPU core-hours) and system.parts (GB-month storage) with configurable rates and currency: team attribution via user-to-team rules, compute spend trend stacked by team, per-team/per-user tables, top cost-driving query patterns, storage cost per table with compression ratio, failed-query waste tracking, and CSV showback export. Cluster-aware with local-node fallback. See Cost Center.

Full release notes

v2.6.2 — 2026-08-13

A fix round for telemetry and querying:

• Telemetry time filters now work with DateTime64 columns (bounds go through parseDateTime64BestEffort instead of raw string literals).
• The Telemetry Setup Wizard's saved logs database/table is actually used — the Log Explorer no longer falls back to default.otel_logs.
• Queries with negative LIMIT (e.g. LIMIT -10) no longer fail in the column-metadata rewrite.
• Dependency bumps (sarama, modernc.org/sqlite, docker/login-action).

Full release notes

v2.6.1 — 2026-07-23

• License as configuration: CHUI_LICENSE_FILE (e.g. a mounted Kubernetes Secret) and CHUI_LICENSE (inline JSON) activate the Pro license at startup; the Helm chart exposes license.existingSecret / license.secretKey. An invalid environment license logs a warning and never blocks startup.
• GitHub model sync now recurses into subdirectories, so nested dbt layouts (models/staging/, models/marts/) import correctly — thanks @bfxavierpx for the first outside contribution.

Full release notes

v2.6.0 — 2026-07-16

CH-UI went all-in on self-hosted: the cloud proof of concept is gone and its best features moved here, behind the same offline-verified Pro license.

• Ask AI in the SQL editor — describe the query you want, get SQL generated against your schema with your own AI provider key (Pro).
• Self-serve Pro licensing — buy at ch-ui.com, receive the signed license by email, activate in Settings; 30-day free trial straight from the app. Licenses verify offline, so air-gapped installs keep working.
• SSO configuration UI — OIDC is set up from the Admin page instead of environment variables; the flow now uses PKCE.
• Data retention manager — background pruning of history tables with per-table windows, on by default (check the windows before upgrading if you need long history).
• Runtime multi-connection support, Helm chart, session_max_age config.
• Simpler alert routing (rules bind directly to channels), one JSON error shape across the API, production mode by default.
• Removed: governance lineage (slow and unreliable; its tables are dropped on upgrade), CH-UI Cloud, the Gitpod demo config.

Full release notes

v2.5.3 — 2026-06-29

• Command palette no longer enters an infinite update loop when opened, and ⌘/Ctrl+K now toggles it closed as documented.
• New doc covering the two supported ClickHouse connection models (direct URL and the outbound tunnel).

Full release notes

v2.5.2 — 2026-06-29

• Destructive-action alerts in the light theme are legible again.
• Go and UI dependency bumps, GitHub Actions updates.

Full release notes

v2.5.1 — 2026-06-15

• Release binaries and the Docker image rebuilt on Go 1.25.11, patching 23 standard-library vulnerabilities reachable from the codebase; golang.org/x/net bumped for GO-2026-4918.
• CI now actually compiles the backend on every PR, so go vet, go test, and govulncheck run for real.

Full release notes

v2.5.0 — 2026-06-15

The enterprise-hardening release.

Security

• OIDC Single Sign-On (Pro) — Okta/Entra/Google/Keycloak. See SSO.
• Native TLS termination (tls_cert_file/tls_key_file); a startup warning when serving plaintext HTTP.
• Markdown from AI/Brain and dashboards is sanitized (stored-XSS fix).
• Admin-gated connection tokens and audit-log read/export; failed logins audited; viewer role is read-only on shared workspace objects.
• Per-IP rate limiting on public dashboards; request-body caps.

Operations

• Prometheus /metrics and audit forwarding (SIEM, Pro) via webhook, file, or stdout, plus a CSV/JSON audit export. See Monitoring & SIEM.
• License grace period — an expired Pro license enters a 14-day read-only window instead of a hard lockout.
• Panic-recovery for HTTP handlers and background workers; Docker HEALTHCHECK.
• Helm chart and Docker Compose quick-start; ch-ui backup for a consistent database snapshot; schema-version tracking on upgrade.

Reliability

• Kafka pipeline ingestion is now at-least-once (offsets commit after the sink write).

Supply chain

• CI on every change (tests with -race, govulncheck, lint, typecheck); Dependabot; SECURITY.md; the self-updater verifies checksums fail-closed; releases publish a CycloneDX SBOM and cosign-signed checksums and images.

Licensing

• Pro modules are now published under the Business Source License 1.1 (source-available; converts to Apache-2.0 on the Change Date). The community core stays Apache-2.0. See Plans & Licensing.

Full release notes

v2.4.0 — 2026-06-10

• Query Insights (Pro): system.query_log analytics.
• Cluster Health (Pro): operations and database monitoring.
• Result filters and ClickHouse error parsing in the query results view.

Full release notes

---

For older releases and exact commit-level detail, see GitHub Releases.