Skip to content

lakeFS Enterprise v1.106.0

Changelog

Important note: this version adds lookup indexes for users and groups. Deployments using local RBAC must run lakefs migrate up with the new binary before starting it; until then the server refuses to start with "identity indexes migration required". Run lakefs migrate task run identity-indexes --dry-run first to review duplicates and case-duplicate group names. In a rolling upgrade, run the task again after the last node on the previous version has stopped. Deployments that are not using local RBAC need no action: the server advances the schema version on start.

🆕 What's new:

  • Auth: User and group lookups use indexes instead of full scans, so SSO login stays fast as users grow; lakefs migrate task run identity-indexes reconciles them
  • Auth: Group names are now unique regardless of case; creating a case variant of an existing name returns 409
  • API, WebUI: Groups are listed in case-insensitive name order, search matches names, and after/next_offset hold names instead of IDs; paging with next_offset is unaffected
  • WebUI: The MDS UI now keeps your query history
  • Cataloger: Async commit and merge client errors are now logged at debug level instead of error

🐛 Bugs Fixed:

  • Auth: An STS or LDAP login that matches more than one user returns 409 Conflict instead of 500
  • Datasets: Fixed multi-tenant handling so that records created via PR, metadata keys, and dataset reconciliation stay within their own tenant, and name conflicts are reported across tenants
  • License: Licensed limits are now counted across every tenant
  • Cataloger: Fixed merge conflict resolution so it keeps the resolver's choice
  • Cataloger: Fixed delimited diff paging so it resumes at an object's own key
  • Cataloger: Path-filtered commit log now stops once its results are complete, improving performance

Assets

checksums.txt1.8 kB2026-10-15
lakefs-enterprise_1.106.0_Darwin_arm64.tar.gzsha256:b7c0da27b9e7bdf29d0df17528586309bf35a730d1c160d82dc45123ee8ea6d476.9 MB2026-10-15
lakefs-enterprise_1.106.0_Darwin_x86_64.tar.gzsha256:cf9ffbe4b90dfdf8b13991345d88d41b14741b6d79f823f638c6fc4acfbe82f682.3 MB2026-10-15
lakefs-enterprise_1.106.0_Linux_arm64.tar.gzsha256:c2baa688bc2e3a1f2b5a81a37a474658f25bbb79b492bf20908da12fe90da87273.2 MB2026-10-15
lakefs-enterprise_1.106.0_Linux_x86_64.tar.gzsha256:53802f178d6317651311c20c722a1e152f377e11a16d8560bfc5250a98ce722f80.7 MB2026-10-15
lakefs-enterprise_1.106.0_Windows_arm64.zipsha256:ae69f5069f46be4db62e8c66be1fbfae7418490640ca02d7a827a041618455c073.5 MB2026-10-15
lakefs-enterprise_1.106.0_Windows_x86_64.zipsha256:638e018d445649678c98b9599952c77300a8f53ca0fcc886901134ae3f98b32782.4 MB2026-10-15

Docker

docker pull treeverse/lakefs-enterprise:1.106.0

Verify the signature (optional)

Requires Cosign:

cosign verify treeverse/lakefs-enterprise:1.106.0 \
    --certificate-identity-regexp='^https://github\.com/treeverse/lakeFS\-Enterprise/\.github/workflows/' \
    --certificate-oidc-issuer='https://token.actions.githubusercontent.com'
Expected output 
Verification for index.docker.io/treeverse/lakefs-enterprise:1.106.0 --
The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - Existence of the claims in the transparency log was verified offline
  - The code-signing certificate was verified using trusted certificate authority certificates