Enhancements

• Updated the Get hydrate calls across numerous tables to return results in non-OC1 realms (for example, government and other commercial realms) by removing the hardcoded ocid1.tenancy.oc1 root compartment prefix check. (#704) (Thanks @sbalmos for the contribution!)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v6.1.0 that fixes data races in the in-process query execution path. Note that a failed scan on the in-process path now returns an error instead of silently returning empty results. (#705)
• Recompiled plugin with Go version 1.26. (#683)
• Bumped github.com/klauspost/compress from 1.17.2 to 1.18.7. (#702)
• Bumped golang.org/x/crypto to 0.58.0.
• Bumped google.golang.org/grpc from 1.66.0 to 1.83.1. (#698)

Dependencies

• Bumped github.com/cloudflare/circl from v1.3.7 to v1.6.3. (#573)
• Bumped github.com/go-jose/go-jose/v4 from v4.1.4 to v4.1.6. (#573)
• Bumped github.com/hashicorp/go-getter from v1.7.9 to v1.8.6. (#573)
• Bumped github.com/klauspost/compress from v1.17.2 to v1.18.7. (#570)
• Bumped go.opentelemetry.io/otel/sdk from v1.44.0 to v1.47.0. (#573)
• Bumped golang.org/x/crypto from v0.51.0 to v0.57.0. (#573)
• Bumped google.golang.org/grpc from v1.66.0 to v1.83.1. (#562)
• Bumped google.golang.org/grpc from v1.83.1 to v1.83.2. (#573)

What's new?

• New tables added
  • gcp_compute_route (#842) (Thanks @jangjaelee for the contribution!)

Bug fixes

• Fixed the gcp_tag_binding table to build its client from the connection config (credentials, impersonate_service_account, impersonate_access_token, quota_project) like every other table, instead of silently falling back to Application Default Credentials. (#844) (Thanks @pdecat for the contribution!)
• Replaced the deprecated ShouldIgnoreError with IgnoreConfig across all tables, fixing the golangci-lint failures on main. (#845) (Thanks @pdecat for the contribution!)

Dependencies

• Bumped github.com/klauspost/compress to v1.18.7. (#841)
• Bumped github.com/turbot/go-kit to v1.3.1. (#840)

What's new?

• Added the cve_id column to the crowdstrike_spotlight_vulnerability table, which can be used as an optional qual to filter vulnerabilities by CVE through the Spotlight API. (#78)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v6.1.0.

What's new?

• New tables added
  • azuread_oauth2_permission_grant (#330)

Bug fixes

• Fixed the azuread_service_principal_app_role_assignment table to populate the service_principal_id column from principalId instead of resourceId, so queries filtered by service_principal_id now return rows. (#332)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v6.1.0. (#319)
• Recompiled plugin with google.golang.org/grpc v1.83.1. (#318)

Enhancements

• Added identity_principal_id and identity_tenant_id columns to the azure_cognitive_account and azure_machine_learning_workspace tables. These expose the managed identity's principal and tenant IDs, which the identity column omits because the autorest SDK drops the read-only fields when serializing. (#1024) (Thanks @cristianchiriac for the contribution!)

Bug fixes

• Fixed the azure_app_service_web_app table to exclude all function app kinds, such as functionapp,linux and functionapp,workflowapp (Logic App Standard), which were previously returned alongside web apps. (#1025) (Thanks @cristianchiriac for the contribution!)

Dependencies

• Bumped golang.org/x/crypto from v0.50.0 to v0.52.0. (#1008)

Dependencies

• Bump github.com/klauspost/compress to v1.18.7 to remediate CVE-2026-63209.
• Bump github.com/go-jose/go-jose/v4 to v4.1.6 to remediate CVE-2026-116587.
• Bundled steampipe-postgres-fdw upgraded to v2.2.9, which carries the same dependency updates.

Bug fixes

• Fixed the azuread_directory_audit_report table to return all results instead of only the first page. (#325) (Thanks @amit-experimenting for the contribution!)

Dependencies

• Recompiled plugin with Go version 1.26. (#307)
• Recompiled plugin with steampipe-plugin-sdk v6.0.0 which fixes a data race on connection config during query execution.

Enhancements

• Updated the docs/index.md file to clarify that client certificate authentication requires a PKCS#12 (.pfx) file, and that files created with OpenSSL 3 must be exported with the -legacy flag.

Bug fixes

• Fixed client certificate authentication failing with pkcs12: decryption password incorrect for password-protected PKCS#12 (.pfx) certificates in some tables, as the certificate_password config argument and AZURE_CERTIFICATE_PASSWORD environment variable were being ignored. (#1023) (Thanks @cristianchiriac for the contribution!)

Bug fixes

• Fixed the endpoint_url config argument to keep the connection's access_key, secret_key, session_token, and profile. Previously, connections that set endpoint_url ignored these and used the default AWS credential chain instead, which either silently used the wrong identity or failed with a no EC2 IMDS role found error. (#2807)
• Fixed the aws_s3_bucket table to fall back to the connection's default region when ListBuckets fails with a region mismatch error, e.g., in networks that can only reach a single region's S3 VPC endpoint. In this case, the creation_date column returns the bucket's last modified time instead of its creation time. (#2791) (Thanks @sol791 for the contribution!)
• Fixed the aws_connect_instance_attribute table to return rows when filtered by instance_id. (#2800) (Thanks @RaphaelFakhri for the contribution!)

Dependencies

• Recompiled plugin with google.golang.org/grpc v1.82.1. (#2784)
• Updated soupsieve to v2.8.4 in the generate_parliament_iam_permissions script. (#2779)

Dependencies

• Compiled with Go 1.26.10, which rejects certificate chains through the compromised eMudhra intermediate CAs (golang/go#82345).
• Bundled steampipe-postgres-fdw upgraded to v2.2.8, also compiled with Go 1.26.10.

What's new?

• New tables added
  • github_project_v2 (#548) (Thanks @dark-panda for the contribution!)
  • github_project_v2_item (#567)

Bug fixes

• Fixed the github_issue and github_pull_request tables to no longer error when querying by repository_full_name and number. (#567)

What's new?

• New tables added
  • azure_security_center_assessment (#992) (Thanks @dark-panda for the contribution!)

Bug fixes

• Fixed the sponsors_listing column in github_my_organization, github_organization, github_organization_member, github_team_member, and github_user tables to no longer error when the sponsors listing has a next payout date. The next_payout_date field is now returned as a date (e.g., 2024-08-11), or null when unset. (#563) (Thanks @dark-panda for the contribution!)

What's new?

• New tables added: (Thanks @Sky-ey for the new plugin!)
  • tencentcloud_cam_access_key
  • tencentcloud_cam_group
  • tencentcloud_cam_policy
  • tencentcloud_cam_policy_attachment
  • tencentcloud_cam_role
  • tencentcloud_cam_saml_provider
  • tencentcloud_cam_user
  • tencentcloud_cbs_auto_snapshot_policy
  • tencentcloud_cbs_disk
  • tencentcloud_cbs_disk_backup
  • tencentcloud_cbs_disk_storage_pool
  • tencentcloud_cbs_region
  • tencentcloud_cbs_snapshot
  • tencentcloud_cbs_snapshot_group
  • tencentcloud_ccn
  • tencentcloud_ccn_instance
  • tencentcloud_ccn_route
  • tencentcloud_clb_block_ip
  • tencentcloud_clb_cross_target
  • tencentcloud_clb_customized_config
  • tencentcloud_clb_instance
  • tencentcloud_clb_listener
  • tencentcloud_clb_region
  • tencentcloud_clb_rewrite
  • tencentcloud_clb_target
  • tencentcloud_clb_target_group
  • tencentcloud_clb_target_group_instance
  • tencentcloud_cls_alarm
  • tencentcloud_cls_alarm_notice
  • tencentcloud_cls_config
  • tencentcloud_cls_logset
  • tencentcloud_cls_machine_group
  • tencentcloud_cls_region
  • tencentcloud_cls_topic
  • tencentcloud_cos_bucket
  • tencentcloud_cos_object
  • tencentcloud_cos_region
  • tencentcloud_cvm_auto_scaling_group
  • tencentcloud_cvm_disaster_recover_group
  • tencentcloud_cvm_host
  • tencentcloud_cvm_image
  • tencentcloud_cvm_instance
  • tencentcloud_cvm_key_pair
  • tencentcloud_cvm_launch_template
  • tencentcloud_cvm_metric_cpu_daily
  • tencentcloud_cvm_metric_cpu_hourly
  • tencentcloud_cvm_metric_disk_daily
  • tencentcloud_cvm_metric_disk_hourly
  • tencentcloud_cvm_metric_lan_in_daily
  • tencentcloud_cvm_metric_lan_in_hourly
  • tencentcloud_cvm_metric_lan_out_daily
  • tencentcloud_cvm_metric_lan_out_hourly
  • tencentcloud_cvm_metric_mem_daily
  • tencentcloud_cvm_metric_mem_hourly
  • tencentcloud_cvm_metric_wan_in_daily
  • tencentcloud_cvm_metric_wan_in_hourly
  • tencentcloud_cvm_metric_wan_out_daily
  • tencentcloud_cvm_metric_wan_out_hourly
  • tencentcloud_cvm_region
  • tencentcloud_cvm_zone
  • tencentcloud_dc_direct_connect
  • tencentcloud_dc_direct_connect_tunnel
  • tencentcloud_dc_gateway
  • tencentcloud_dc_gateway_ccn_route
  • tencentcloud_dc_internet_address
  • tencentcloud_dc_region
  • tencentcloud_ssl_certificate
  • tencentcloud_tke_cluster
  • tencentcloud_tke_cluster_instance
  • tencentcloud_tke_region
  • tencentcloud_vpc
  • tencentcloud_vpc_bandwidth_package
  • tencentcloud_vpc_eip
  • tencentcloud_vpc_eni
  • tencentcloud_vpc_nat_gateway
  • tencentcloud_vpc_region
  • tencentcloud_vpc_route
  • tencentcloud_vpc_route_table
  • tencentcloud_vpc_security_group
  • tencentcloud_vpc_security_group_policy
  • tencentcloud_vpc_subnet
  • tencentcloud_vpc_traffic_package
  • tencentcloud_vpn_connection
  • tencentcloud_vpn_customer_gateway
  • tencentcloud_vpn_gateway
  • tencentcloud_vpn_gateway_ccn_route
  • tencentcloud_vpn_gateway_route
  • tencentcloud_vpn_region
  • tencentcloud_waf_clb_host
  • tencentcloud_waf_custom_rule
  • tencentcloud_waf_domain
  • tencentcloud_waf_instance
  • tencentcloud_waf_ip_access_control
  • tencentcloud_waf_object

Breaking changes

• Removed the aws_simspaceweaver_simulation table, as AWS ended support for the SimSpace Weaver service on May 20, 2026 and the API is no longer available. (#2793)

What's new?

• New tables added
  • aws_bedrock_agentcore_agent_runtime (#2792)

Enhancements

• Added column tag_filters to aws_tagging_resource table, which can be used as a query filter to list only resources matching the specified tag keys and values. (#2786) (Thanks @asreenath for the contribution!)
• Refreshed the AWS service endpoint data used to determine supported regions, adding new regions for 35 existing services. (#2792)

Dependencies

• Recompiled plugin with github.com/aws/aws-sdk-go-v2 v1.47.1.
• Recompiled plugin with github.com/aws/smithy-go v1.28.1.

Enhancements

• Added server-side filtering for integer, timestamp, and boolean columns in the servicenow_incident table and in dynamic tables, and for string and integer in lists across all tables, which reduces the rows fetched from ServiceNow for filtered queries. (#47) (Thanks @jondesr for the contribution!)

Bug fixes

• Fixed queries with a limit returning fewer rows than requested when a filter on a key column did not match ServiceNow's results exactly, such as case-variant string values, timestamp bounds, or multiple in lists. (#47)
• Fixed <> filters on string columns in dynamic tables excluding rows that differ only by case. These filters are now applied client-side. (#47)

Dependencies

• Recompiled plugin with Go version 1.26. (#40)
• Recompiled plugin with steampipe-plugin-sdk v6.1.0 that fixes data races in connection config access and the in-process scan path.

What's new?

• Added support for OIDC federated identity authentication via the new federated_token and federated_token_file connection arguments, along with the AZURE_FEDERATED_TOKEN and AZURE_FEDERATED_TOKEN_FILE environment variables. This enables authentication from CI/CD systems such as GitHub Actions and GitLab CI, and from AKS pods with workload identity enabled. For more information, please see OIDC Federated Identity. (#1013) (Thanks @jmapro for the contribution!)
• New tables added
  • azure_container_app (#1018) (Thanks @pdecat for the contribution!)
  • azure_container_app_environment (#1018) (Thanks @pdecat for the contribution!)

Thanks @niranjan94 for contributing the new IAM, identity, and security audit tables!

What's new?

• New tables added
  • hubspot_access_token (#51)
  • hubspot_cms_audit_log (#51)
  • hubspot_login_activity (#51)
  • hubspot_security_activity (#51)
  • hubspot_team (#51)
  • hubspot_user (#51)
  • hubspot_user_role (#51)

Dependencies

• Recompiled plugin with Go version 1.26. (#44)
• Recompiled plugin with steampipe-plugin-sdk v6.1.0 that fixes data races on connection config access and in the in-process query path.

Dependencies

• Bump golang.org/x/crypto to v0.55.0 to remediate CVE-2026-56854.
• Bump google.golang.org/grpc to v1.83.2 to remediate CVE-2026-84445.
• Bump github.com/containerd/containerd to v1.7.35 to remediate CVE-2026-53495.
• Bump github.com/go-git/go-git/v5 to v5.19.2 to remediate CVE-2026-71556 and CVE-2026-71557.
• Bump golang.org/x/net to v0.58.0 to remediate CVE-2026-25680.
• Bump github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 to remediate GHSA-xmrv-pmrh-hhx2.
• Bundled steampipe-postgres-fdw upgraded to v2.2.7, which carries the same dependency updates.

Bug fixes

• Fixed the Steampipe Anywhere Postgres FDW builds for Linux AMD64, which in v1.14.0 were linked against glibc 2.38 and failed to load on distributions with older glibc versions, such as Ubuntu 22.04 and Debian 12, with version 'GLIBC_2.38' not found. The Linux AMD64 Postgres FDW and SQLite extension artifacts are now built on Ubuntu 22.04. (turbot/steampipe-workflows#110)

Bug fixes

• Fixed the project and organization columns in the scaleway_kubernetes_cluster table to correctly return the project and organization IDs instead of null. (#175) (Thanks @pdecat for the contribution!)
• Fixed the dashboard_enabled column in the scaleway_kubernetes_cluster table and the autoscaling and autohealing columns in the scaleway_kubernetes_pool table to correctly return null instead of false when the API does not return a value. (#175) (Thanks @pdecat for the contribution!)

What's new?

• New tables added
  • azure_reservations_reservation (#985) (Thanks @jmapro for the contribution!)
  • azure_reservations_reservation_order (#985) (Thanks @jmapro for the contribution!)

Bug fixes

• Fixed the azure_postgresql_flexible_server table to skip the flexible_server_configurations hydrate call when the server is in the Stopping, Stopped, or Updating state, since Azure rejects the call with a ServerStoppedError in those states. (#1015) (Thanks @hakuno for the contribution!)

Bug fixes

• Fixed the plugin module path to include the /v2 suffix required for v2 releases, which caused the v2.0.0 Steampipe Anywhere (Postgres FDW, SQLite, and export) builds to fail.

Thanks to @pdecat for contributing all of the table, API, and SDK changes in this release!

Breaking changes

• Updated the scaleway_vpc_private_network table to use the Scaleway VPC v2 API, in which private networks are regional resources. The zone column has been replaced by region, and the get key columns are now id and region instead of id and zone. The table now iterates over the regions connection config argument instead of zones and connections that set zones without regions will only return private networks from the default region until regions is added. Queries that filter on or select zone must be updated. (#171)
• Removed the creation_info column from the scaleway_account_ssh_key table, as it is not returned by the IAM API. (#170)

What's new?

• New tables added
  • scaleway_vpc (#171)

Enhancements

• Added vpc_id, dhcp_enabled, and subnets columns to the scaleway_vpc_private_network table, with vpc_id available as an optional filter. (#171)
• Updated the scaleway_account_ssh_key table to use the Scaleway IAM API, as the Account v2alpha1 SSH key API has been removed and the table no longer returned data. Added the disabled column. (#170)

Bug fixes

• Fixed the scaleway_account_ssh_key, scaleway_iam_api_key, and scaleway_iam_user tables to return an error instead of causing a plugin panic when the API call fails. (#169)
• Fixed the plugin to correctly use credentials from the SCW_ACCESS_KEY and SCW_SECRET_KEY environment variables when access_key and secret_key are not set in the connection config. (#169)

Dependencies

• Recompiled plugin with Go version 1.26. (#159)
• Recompiled plugin with steampipe-plugin-sdk v6.1.0 that fixes data races in the SDK's in-process execute path.

Bug fixes

• Fixed the components column in the jira_backlog_issue table to correctly return component IDs instead of causing a plugin panic. (#208) (Thanks @dark-panda for the contribution!)
• Fixed the actor_account_ids column in the jira_project_role table to correctly handle group actors instead of causing a plugin panic. (#209) (Thanks @dark-panda for the contribution!)

Dependencies

• Recompiled plugin with Go version 1.26. (#197)
• Recompiled plugin with steampipe-plugin-sdk v6.1.0 that fixes a data race on connection config between the SDK's connection-update goroutine and plugin worker goroutines.

Bug fixes

• Fixed the cloudflare_access_policy table to correctly return results instead of hanging indefinitely while paginating accounts. (#212) (Thanks @dark-panda for the contribution!)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v6.1.0 that fixes data races in the SDK's in-process execute path.

What's new?

• New tables added
  • aws_directconnect_connection (#2775) (Thanks @StephenKing for the contribution!)
  • aws_synthetics_canary_run (#2768) (Thanks @leongzhiyong for the contribution!)

Bug fixes

• Fixed the deregistered_at column in aws_ecs_task_definition table to no longer fail with a time.Time type mismatch error when any task definition in the account has been deregistered. (#2785) (Thanks @pmarques for the contribution!)
• Fixed the aws_cloudtrail_query table to no longer pass the deprecated EventDataStore parameter to the DescribeQuery API. (#2788) (Thanks @clanky1024 for the contribution!)

Dependencies

• Recompiled plugin with github.com/aws/aws-sdk-go-v2 v1.42.0.
• Recompiled plugin with github.com/aws/smithy-go v1.27.1.

Enhancements

• Added support for the new ap-southeast-8 (Malaysia, Johor) region. (#564) (Thanks @ahlfors for the contribution!)

Bug fixes

• Fixed the redundancy_type, tags, and tags_src columns in the alicloud_oss_bucket table to return data instead of null. (#565) (Thanks @ahlfors for the contribution!)

Dependencies

• Recompiled plugin with Go version 1.26. (#552)
• Recompiled plugin with steampipe-plugin-sdk v6.1.0 that fixes a data race on connection config between the SDK's connection-update goroutine and plugin worker goroutines.

What's new?

• New tables added: (Thanks @RafPe for the new plugin!)
  • youtrack_agile
  • youtrack_article
  • youtrack_group
  • youtrack_issue
  • youtrack_issue_comment
  • youtrack_issue_work_item
  • youtrack_project
  • youtrack_saved_query
  • youtrack_tag
  • youtrack_user

What's new?

• New tables added: (Thanks @becash143 for the new plugin!)
  • proxmox_cluster_resource
  • proxmox_container
  • proxmox_network
  • proxmox_node
  • proxmox_pool
  • proxmox_storage
  • proxmox_task
  • proxmox_user
  • proxmox_vm

Dependencies

• Compiled with Go 1.26.5 to remediate CVE-2026-27143 and other Go standard-library vulnerabilities.
• Bump golang.org/x/crypto to v0.52.0 to remediate CVE-2026-39830 through CVE-2026-39834, CVE-2026-42508 and CVE-2026-46595.
• Bump github.com/containerd/containerd to v1.7.33 to remediate CVE-2026-46680 and CVE-2026-53488.
• Bump github.com/go-git/go-git/v5 to v5.19.1 to remediate CVE-2026-45022 and CVE-2026-41506.
• Bump github.com/go-git/go-billy/v5 to v5.9.0 to remediate CVE-2026-44973.
• Bump oras.land/oras-go/v2 to v2.6.2 to remediate CVE-2026-50151.
• Bump github.com/hashicorp/go-getter to v1.8.6 to remediate CVE-2026-4660.
• Bundled steampipe-postgres-fdw upgraded to v2.2.5, which carries the same Go toolchain and dependency updates.

What's new?

• New tables added
  • github_actions_cache (#557) (Thanks @WallyGuzman for the contribution!)

Enhancements

• Added optional quals for head_sha, actor_login, and created_at (with range support) to github_actions_repository_workflow_run table. (#558) (Thanks @WallyGuzman for the contribution!)

Bug fixes

• Fixed the workflow_id column type of github_actions_repository_workflow_run table to be INT instead of STRING. (#558)
• Fixed nil pointer panics on nullable timestamp columns in github_actions_cache, github_actions_repository_workflow_job, and github_actions_repository_workflow_run tables. (#558)

Enhancements

• Added the subscription column to the cloudflare_zone table. (#210) (Thanks @sbldevnet for the contribution!)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v6.0.0.
• Recompiled plugin with Go version 1.26. (#199)

What's new?

• New tables added (Thanks @vthiery for the contributions!)
  • salesforce_external_data_source (#99)
  • salesforce_login_history (#99)
  • salesforce_named_credential (#99)
  • salesforce_organization (#99)
  • salesforce_permission_set_group (#99)
  • salesforce_profile (#99)
  • salesforce_remote_site_setting (#99)
  • salesforce_security_health_check_risk (#99)
  • salesforce_setup_audit_trail (#99)

Bug fixes

• Removed the hardcoded account_id column from the salesforce_user table to prevent query errors in orgs without Customer or Partner portals enabled. The column is still added automatically in orgs where the User.AccountId field exists. (#100) (Thanks @vthiery for the contribution!)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v6.0.0 which fixes a data race on connection config access.
• Recompiled plugin with Go version 1.26.0. (#91)

Enhancements

• Added owner_references column to dynamically-generated custom resource tables. (#374) (Thanks @wguilherme for the contribution!)

What's new?

• New tables added
  • azure_cdn_frontdoor_custom_domain (#1005) (Thanks @Shr3ps for the contribution!)
  • azure_resource_graph (#988) (Thanks @jmapro for the contribution!)

Enhancements

• Added a default rate limiter for the azure_storage_share_file table to avoid ARM 429 throttling errors. (#1007) (Thanks @pdecat for the contribution!)

Bug fixes

• Fixed the retention_policy_property and transparent_data_encryption columns in azure_sql_database table to correctly return data instead of null.

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v6.0.0 and Go v1.26.0.
• Bumped github.com/Azure/azure-sdk-for-go/sdk/azcore from v1.21.0 to v1.21.1. (#1000)
• Bumped github.com/Azure/azure-storage-blob-go from v0.12.0 to v0.15.0. (#998)
• Bumped github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/mysql/armmysqlflexibleservers/v2 from v2.0.0-beta.3 to v2.0.0-beta.5. (#989)
• Bumped github.com/turbot/go-kit from v1.1.0 to v1.3.1. (#990)
• Bumped github.com/hashicorp/go-getter from v1.7.9 to v1.8.6. (#984)
• Bumped go.opentelemetry.io/otel/sdk from v1.26.0 to v1.43.0. (#983)
• Bumped github.com/go-jose/go-jose/v4 from v4.1.3 to v4.1.4. (#993)
• Bumped github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from v1.7.7 to v1.7.8. (#994)
• Bumped github.com/aws/aws-sdk-go-v2/service/s3 from v1.97.1 to v1.97.3.
• Bumped lodash from v4.17.21 to v4.18.1 in /azure-test. (#982)
• Bumped diff from v4.0.2 to v4.0.4 in /azure-test. (#980)
• Bumped picomatch from v2.3.1 to v2.3.2 in /azure-test. (#979)

Enhancements

• Added columns deregistration_protection, free_tier_eligible, image_allowed, last_launched_time, source_image_id, and source_image_region to aws_ec2_ami and aws_ec2_ami_shared tables. (#2774) (Thanks @StephenKing for the contribution!)
• Added column start_after to aws_s3_object table, which can be used as a query filter to start listing objects after the specified key. (#2772) (Thanks @OsMikeBl for the contribution!)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v6.0.0 that fixes a data race on connection config.

What's new?

• New tables added
  • github_actions_repository_workflow_job (#555) (Thanks @WallyGuzman for the contribution!)
  • github_organization_ruleset (#547) (Thanks @romain-pix-cyber for the contribution!)

Enhancements

• Added custom_properties column to github_my_repository, github_repository, github_search_repository, and github_team_repository tables to return the custom property values assigned to a repository. (#556) (Thanks @Recurzion for the contribution!)

What's new?

• New tables added: (Thanks @somoore for the new plugin!)
  • turbopuffer_document
  • turbopuffer_namespace
  • turbopuffer_namespace_attribute
  • turbopuffer_namespace_recall
  • turbopuffer_region

What's new?

• New tables added: (Thanks @IPGeolocation for the new plugin!)
  • ipgeolocation_abuse
  • ipgeolocation_asn
  • ipgeolocation_ip
  • ipgeolocation_security

What's new?

• New tables added
  • aws_ecr_registry (#2750) (Thanks @chammock for the contribution!)
  • aws_eks_pod_identity_association (#2748) (Thanks @andriizavoiko for the contribution!)
  • aws_msk_topic (#2723) (Thanks @karolszmndy for the contribution!)
  • aws_rds_global_cluster (#2707) (Thanks @ppapishe for the contribution!)
  • aws_synthetics_canary (#2744) (Thanks @leongzhiyong for the contribution!)

Bug fixes

• The aws_cloudwatch_log_subscription_filter table will now skip log groups using the Infrequent Access log class, which do not support the DescribeSubscriptionFilters API, instead of failing the entire query with a ValidationException error.
• Fixed region resolution to recognize the il (Israel) and mx (Mexico) commercial region prefixes, so connections using region wildcards such as il-* or mx-* now resolve to the correct partition. (#2724) (Thanks @Abhi011999 for the contribution!)

Dependencies

• Recompiled plugin with github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.8.
• Recompiled plugin with github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.65.0.
• Recompiled plugin with github.com/aws/aws-sdk-go-v2/service/kinesis v1.43.5.
• Recompiled plugin with github.com/aws/aws-sdk-go-v2/service/lambda v1.88.5.
• Recompiled plugin with github.com/aws/aws-sdk-go-v2/service/redshift v1.62.1.
• Recompiled plugin with github.com/aws/aws-sdk-go-v2/service/route53 v1.62.1.
• Recompiled plugin with github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3.
• Recompiled plugin with github.com/aws/aws-sdk-go-v2/service/ssm v1.68.0.
• Recompiled plugin with github.com/go-jose/go-jose/v4 v4.1.4. (#2761)
• Recompiled plugin with github.com/hashicorp/go-getter v1.8.6.
• Recompiled plugin with go.opentelemetry.io/otel/sdk v1.43.0.
• Recompiled plugin with google.golang.org/grpc v1.79.3.
• Updated idna to v3.15 in the generate_parliament_iam_permissions script. (#2755)
• Updated lodash to v4.18.1 in the integration test suite. (#2730)
• Updated picomatch to v2.3.2 in the integration test suite. (#2721)
• Updated requests to v2.33.0 in the generate_aws_supported_endpoints and generate_parliament_iam_permissions scripts. (#2720, #2722)
• Updated urllib3 to v2.7.0 in the generate_aws_supported_endpoints and generate_parliament_iam_permissions scripts. (#2747, #2746)

Enhancements

• Added support for passing inline kubeconfig contents to the config_path config argument. (#354) (Thanks @Abhi011999 for the contribution!)
• Added time_zone column to the kubernetes_cronjob table. (#365) (Thanks @mikkeloscar for the contribution!)

Bug fixes

• Bundled steampipe-postgres-fdw upgraded to v2.2.4 — fixes statement_timeout, pg_cancel_backend, and pg_terminate_backend having no effect when a plugin's gRPC stream stalls. Affected sessions previously held AccessShareLock indefinitely, blocking partition swaps and other DDL until restart. (steampipe-postgres-fdw#671)

Bug fixes

• Fixed ExpiredToken errors on long-running queries when Turbot Pipes rotates STS credentials mid-query. The plugin now refreshes credentials on every AWS request signing call instead of capturing them at aws.Config construction time, so in-flight goroutines pick up rotated credentials within the 60s CredentialsCache window. (#2756)

Dependencies

• Upgraded steampipe-plugin-sdk to v6.0.0, which adds the Connection.GetConfig / SetConfig accessors and the per-connection sync.RWMutex that the rotation fix above depends on. Plugin builds now require Go 1.26.

Dependencies

• Upgrade github.com/jackc/pgx/v5 to v5.9.2 to remediate CVE-2026-41889 (CRITICAL).
• Upgrade github.com/go-jose/go-jose/v4 to v4.1.4 to remediate CVE-2026-34986.
• Upgrade go.opentelemetry.io/otel/sdk to v1.43.0 to remediate CVE-2026-24051 (HIGH) and CVE-2026-39883.
• Bundled steampipe-postgres-fdw upgraded to v2.2.3.
• Compiled with Go 1.26.1.

Bug fixes

• Fix steampipe plugin install failing with an opaque 403 Forbidden when stale GHCR credentials are present in ~/.docker/config.json (e.g. from a prior docker login). Now retries the OCI pull anonymously when stored credentials are rejected. (pipe-fittings#792)

Dependencies

• Upgrade google.golang.org/grpc to v1.79.3 to remediate CVE-2026-33186 (CRITICAL).
• Upgrade go.opentelemetry.io/otel/sdk to v1.40.0 to remediate CVE-2026-24051 (HIGH).
• Bundled steampipe-postgres-fdw upgraded to v2.2.2.
• Compiled with Go 1.26.1.

Bug fixes

• Fixed Darwin AMD64 Steampipe Anywhere builds producing incorrect architecture binaries due to using ARM64 runner.