CloudDM 4.0

v4.0.1 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 11d Relational Databases

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ci-cd database-access database-design datagrip db2 dbeaver

+13 more

flyway gitops liquibase mongodb mysql oracle postgresql redis security sql-cli sql-client sqlserver tidb

Affected surfaces

auth rbac

ReleasePort's take

Light signal

editorial:auto 11d

Version v4.0.1 introduces SSH tunnel management and secure‑connection settings for datasources, plus new SSO configuration pages; it also resolves critical datasource connection bugs.

Why it matters: The release fixes high‑severity (severity 40) issues affecting Oracle 11g timezone connections and Alibaba Cloud ADB datasource addition—critical for deployments using those data sources.

Summary

AI summary

Redesigned core pages, added SSH tunnel management, SSL proxy settings, SSO/provider config pages, JDK 17 support, and Docker multi‑arch packaging.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds SSH tunnel management with config page, key handling, proxy support, and connection testing. Adds SSH tunnel management with config page, key handling, proxy support, and connection testing. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds secure connection settings for datasources supporting SSL certificates and HTTP, SOCKS4, SOCKS5 proxies. Adds secure connection settings for datasources supporting SSL certificates and HTTP, SOCKS4, SOCKS5 proxies. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds dedicated configuration pages for SSO providers (LDAP, AD, OIDC, DingTalk, Feishu, WeChat, WeCom) and approval engines. Adds dedicated configuration pages for SSO providers (LDAP, AD, OIDC, DingTalk, Feishu, WeChat, WeCom) and approval engines. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds setting for SQL audit log retention days. Adds setting for SQL audit log retention days. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds JDK 17 support and Docker multi‑architecture packaging. Adds JDK 17 support and Docker multi‑architecture packaging. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes datasource configuration, driver loading, built‑in driver packaging, and connection issues for Oracle, PostgreSQL, Greenplum, Redis, SQL Server. Fixes datasource configuration, driver loading, built‑in driver packaging, and connection issues for Oracle, PostgreSQL, Greenplum, Redis, SQL Server. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes SQL workbench query loading, datasource tree expansion state, and database metadata initialization issues. Fixes SQL workbench query loading, datasource tree expansion state, and database metadata initialization issues. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes permissions, roles, tickets, approval scheduling, and datasource creator authorization issues. Fixes permissions, roles, tickets, approval scheduling, and datasource creator authorization issues. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes standalone deployments not applying service port changes after restart. Fixes standalone deployments not applying service port changes after restart. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes Oracle 11g ORA‑01882 timezone connection error and failures adding Alibaba Cloud ADB datasources. Fixes Oracle 11g ORA‑01882 timezone connection error and failures adding Alibaba Cloud ADB datasources. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

Highlights

Redesigned the interface and interactions across core pages for datasources, permissions, security, and CI/CD.
Separated SQL queries from workflows so development queries no longer interfere with approvals or ticket processes.
Expanded support for SSH tunnels, SSL certificates, proxies, SSO, approval integrations, and multiple sign-in methods.

Added

Added SSH tunnel management, including an SSH configuration page, password, private key, proxy, and known_hosts probing, and connection testing.
Added secure connection settings for datasources, with support for SSL certificates and HTTP, SOCKS4, and SOCKS5 proxies.
Added dedicated configuration pages for SSO authentication providers and approval engines, providing centralized management for LDAP, AD, OIDC, DingTalk, Feishu, WeChat, and WeCom integrations.
Added a setting for SQL audit log retention days.
Added JDK 17 support and Docker multi-architecture packaging.
Added integration documentation links to IM, Git, SSO, and approval forms.

Improved

Improved the datasource configuration model, storage structure, and create and edit flows for better plugin-based configuration.
Improved security rule workflows and the role management UI.
Improved datasource create and edit flows by making connection testing available for every datasource.
Improved the sign-in and authentication experience, including the OIDC sign-in flow and responsive layouts.
Improved the operation audit list and export with pluggable export formats, full or row-limited exports, and streaming progress updates.
Improved CI/CD ticket workflow pages and search.
Removed driver downloads from initialization to simplify first-time deployment.

Fixed

Fixed datasource configuration, driver loading, built-in driver packaging, and connection issues affecting Oracle, PostgreSQL, Greenplum, Redis, and SQL Server.
Fixed SQL workbench query loading, datasource tree expansion state, and database metadata initialization issues.
Fixed issues involving permissions, roles, tickets, approval scheduling, and datasource creator authorization.
Fixed standalone deployments not applying service port changes after restart.
Fixed the Oracle 11g ORA-01882 timezone connection error.
Fixed failures when adding Alibaba Cloud ADB datasources.
Fixed configuration-reading bugs and initialization and upgrade wizard UI issues.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track CloudDM 4.0

Get notified when new releases ship.

About CloudDM 4.0

All releases →