docs: Various additions + new LTS announcement

Author: igorlukanin

docs/pages/product/apis-integrations/rest-api/query-format.mdx

@@ -34,13 +34,31 @@ The default value is `false`.
 - `offset`: The number of initial rows to be skipped for your query. The default
   value is `0`.
 - `order`: An object, where the keys are measures or dimensions to order by and
-  their corresponding values are either `asc` or `desc`. The order of the fields
-  to order on is based on the order of the keys in the object. If not provided,
-  [default ordering][ref-default-order] is applied. If an empty object (`[]`) is
-  provided, no ordering is applied.
+  their corresponding values are either `asc` or `desc`. For [time dimensions][ref-default-granularities],
+  a granularity can be optionally provided, e.g., `orders.created_at.month`.
+  The order of the fields to order on is based on the order of the keys in the object.
+  If not provided, the [default ordering][ref-default-order] is applied.
+  If an empty object (`[]`) is provided, no ordering is applied.
 - `timezone`: A [time zone][ref-time-zone] for your query. You can set the
 desired time zone in the [TZ Database Name](https://en.wikipedia.org/wiki/Tz_database)
 format, e.g., `America/Los_Angeles`.
+- `renewQuery`: If `renewQuery` is set to `true`, Cube will renew all
+  [`refreshKey`][ref-schema-ref-preaggs-refreshkey] for queries and query
+  results in the foreground. However, if the
+  [`refreshKey`][ref-schema-ref-preaggs-refreshkey] (or
+  [`refreshKey.every`][ref-schema-ref-preaggs-refreshkey-every]) doesn't
+  indicate that there's a need for an update this setting has no effect. The
+  default value is `false`.
+
+<InfoBox>
+
+Cube provides only eventual consistency guarantee. Using a small
+[`refreshKey.every`][ref-schema-ref-preaggs-refreshkey-every] value together
+with `renewQuery` to achieve immediate consistency can lead to endless
+refresh loops and overall system instability.
+
+</InfoBox>
+
 - `ungrouped`: If set to `true`, Cube will run an [ungrouped
 query][ref-ungrouped-query].
 - `joinHints`: Query-time [join hints][ref-join-hints], provided as an array of
@@ -673,4 +691,4 @@ refer to its documentation for more examples.
 [ref-default-granularities]: /product/data-modeling/concepts#time-dimensions
 [ref-custom-granularities]: /product/data-modeling/reference/dimensions#granularities
 [wiki-iso-8601]: https://en.wikipedia.org/wiki/ISO_8601
-[ref-join-hints]: /product/data-modeling/concepts/working-with-joins#join-hints
+[ref-join-hints]: /product/data-modeling/concepts/working-with-joins#join-hints

docs/pages/product/configuration/data-sources/databricks-jdbc.mdx

@@ -52,7 +52,9 @@ docker run -it -p 4000:4000 --env-file=.env cube-jdk
 | `CUBEJS_DB_NAME`                     | The name of the database to connect to                                                          | A valid database name |    ✅    |
 | `CUBEJS_DB_DATABRICKS_URL`           | The URL for a JDBC connection                                                                   | A valid JDBC URL      |    ✅    |
 | `CUBEJS_DB_DATABRICKS_ACCEPT_POLICY` | Whether or not to accept the license terms for the Databricks JDBC driver                       | `true`, `false`       |    ✅    |
-| `CUBEJS_DB_DATABRICKS_TOKEN`         | The [personal access token][databricks-docs-pat] used to authenticate the Databricks connection | A valid token         |    ✅    |
+| `CUBEJS_DB_DATABRICKS_OAUTH_CLIENT_ID` | The OAuth client ID for [service principal][ref-databricks-m2m-oauth] authentication | A valid client ID | ❌ |
+| `CUBEJS_DB_DATABRICKS_OAUTH_CLIENT_SECRET` | The OAuth client secret for [service principal][ref-databricks-m2m-oauth] authentication | A valid client secret | ❌ |
+| `CUBEJS_DB_DATABRICKS_TOKEN`         | The [personal access token][databricks-docs-pat] used to authenticate the Databricks connection | A valid token         |    ❌    |
 | `CUBEJS_DB_DATABRICKS_CATALOG`       | The name of the [Databricks catalog][databricks-catalog] to connect to                                                | A valid catalog name  |    ❌    |
 | `CUBEJS_DB_EXPORT_BUCKET_MOUNT_DIR`  | The path for the [Databricks DBFS mount][databricks-docs-dbfs] (Not needed if using Unity Catalog connection)         | A valid mount path    |    ❌    |
 | `CUBEJS_DB_MAX_POOL`                 | The maximum number of concurrent database connections to pool. Default is `8`                   | A valid number        |    ❌    |
@@ -201,3 +203,4 @@ bucket][self-preaggs-export-bucket] **must be** configured.
 [databricks-docs-approx-agg-fns]: https://docs.databricks.com/en/sql/language-manual/functions/approx_count_distinct.html
 [self-preaggs-simple]: #simple
 [self-preaggs-export-bucket]: #export-bucket
+[ref-databricks-m2m-oauth]: https://docs.databricks.com/aws/en/dev-tools/auth/oauth-m2m

docs/pages/product/configuration/data-sources/duckdb.mdx

@@ -72,8 +72,8 @@ deployment][ref-demo-deployment] in Cube Cloud.
 | `CUBEJS_DB_DUCKDB_S3_USE_SSL`              | Use SSL for connection                                                                                                | A boolean                                                     |    ❌     |
 | `CUBEJS_DB_DUCKDB_S3_URL_STYLE`            | To choose the S3 URL style(vhost or path)                                                                             | `vhost` or `path`                                             |    ❌     |
 | `CUBEJS_DB_DUCKDB_S3_SESSION_TOKEN`        | The token for the S3 session                                                                                          | A valid Session Token                                         |    ❌     |
-| `CUBEJS_DB_DUCKDB_EXTENSIONS`              | A comma-separated list of DuckDB extensions	to install and load                                                       | A comma-separated list of DuckDB extensions                   |    ❌     |
-| `CUBEJS_DB_DUCKDB_COMMUNITY_EXTENSIONS`    | A comma-separated list of DuckDB community extensions	to install and load                                             | A comma-separated list of DuckDB community extensions         |    ❌     |
+| `CUBEJS_DB_DUCKDB_EXTENSIONS`              | A comma-separated list of DuckDB extensions to install and load                                                       | A comma-separated list of DuckDB extensions                   |    ❌     |
+| `CUBEJS_DB_DUCKDB_COMMUNITY_EXTENSIONS`    | A comma-separated list of DuckDB community extensions to install and load                                             | A comma-separated list of DuckDB community extensions         |    ❌     |
 | `CUBEJS_DB_DUCKDB_S3_USE_CREDENTIAL_CHAIN` | A flag to use credentials chain for secrets for S3 connections                                                        | `true`, `false`. Defaults to `false`                          |    ❌     |
 | `CUBEJS_CONCURRENCY`                       | The number of [concurrent queries][ref-data-source-concurrency] to the data source                                    | A valid number                                                |    ❌     |
 

docs/pages/product/configuration/data-sources/presto.mdx

@@ -30,6 +30,7 @@ CUBEJS_DB_SCHEMA=my_presto_schema
 | `CUBEJS_DB_USER`           | The username used to connect to the database                                        | A valid database username                     |    ✅    |
 | `CUBEJS_DB_PASS`           | The password used to connect to the database                                        | A valid database password                     |    ✅    |
 | `CUBEJS_DB_PRESTO_CATALOG` | The catalog within Presto to connect to                                             | A valid catalog name within a Presto database |    ✅    |
+| `CUBEJS_DB_PRESTO_AUTH_TOKEN` | The authentication token to use when connecting to Presto/Trino. It will be sent in the `Authorization` header. | A valid authentication token |    ❌    |
 | `CUBEJS_DB_SCHEMA`         | The schema within the database to connect to                                        | A valid schema name within a Presto database  |    ✅    |
 | `CUBEJS_DB_SSL`            | If `true`, enables SSL encryption for database connections from Cube                | `true`, `false`                               |    ❌    |
 | `CUBEJS_DB_MAX_POOL`       | The maximum number of concurrent database connections to pool. Default is `8`       | A valid number                                |    ❌    |

docs/pages/product/configuration/data-sources/trino.mdx

@@ -30,6 +30,7 @@ CUBEJS_DB_SCHEMA=my_trino_schema
 | `CUBEJS_DB_USER`           | The username used to connect to the database                                        | A valid database username                     |    ✅    |
 | `CUBEJS_DB_PASS`           | The password used to connect to the database                                        | A valid database password                     |    ✅    |
 | `CUBEJS_DB_PRESTO_CATALOG` | The catalog within Presto to connect to                                             | A valid catalog name within a Presto database |    ✅    |
+| `CUBEJS_DB_PRESTO_AUTH_TOKEN` | The authentication token to use when connecting to Presto/Trino. It will be sent in the `Authorization` header. | A valid authentication token |    ❌    |
 | `CUBEJS_DB_SCHEMA`         | The schema within the database to connect to                                        | A valid schema name within a Presto database  |    ✅    |
 | `CUBEJS_DB_SSL`            | If `true`, enables SSL encryption for database connections from Cube                | `true`, `false`                               |    ❌    |
 | `CUBEJS_DB_MAX_POOL`       | The maximum number of concurrent database connections to pool. Default is `8`       | A valid number                                |    ❌    |

docs/pages/product/configuration/reference/environment-variables.mdx

@@ -239,6 +239,22 @@ The name of the [Databricks catalog][databricks-catalog] to connect to.
 
 [databricks-catalog]: (https://docs.databricks.com/en/data-governance/unity-catalog/create-catalogs.html)
 
+## `CUBEJS_DB_DATABRICKS_OAUTH_CLIENT_ID`
+
+The OAuth client ID for [service principal][ref-databricks-m2m-oauth] authentication in Databricks.
+
+| Possible Values        | Default in Development | Default in Production |
+| ---------------------- | ---------------------- | --------------------- |
+| A valid client ID      | N/A                    | N/A                   |
+
+## `CUBEJS_DB_DATABRICKS_OAUTH_CLIENT_SECRET`
+
+The OAuth client secret for [service principal][ref-databricks-m2m-oauth] authentication in Databricks.
+
+| Possible Values        | Default in Development | Default in Production |
+| ---------------------- | ---------------------- | --------------------- |
+| A valid client secret  | N/A                    | N/A                   |
+
 ## `CUBEJS_DB_DATABRICKS_TOKEN`
 
 The [personal access token][databricks-docs-pat] used to authenticate the
@@ -680,6 +696,14 @@ The catalog within Presto/Trino to connect to.
 | --------------------------------------------------- | ---------------------- | --------------------- |
 | A valid catalog name within a Presto/Trino database | N/A                    | N/A                   |
 
+## `CUBEJS_DB_PRESTO_AUTH_TOKEN`
+
+The authentication token to use when connecting to Presto/Trino. It will be sent in the `Authorization` header.
+
+| Possible Values | Default in Development | Default in Production |
+| --------------- | ---------------------- | --------------------- |
+| A valid authentication token | N/A | N/A |
+
 ## `CUBEJS_DB_QUERY_TIMEOUT`
 
 The timeout value for any queries made to the database by Cube.
@@ -742,6 +766,22 @@ username/password, or `SNOWFLAKE_JWT` with key pairs.
 | ---------------------------- | ---------------------- | --------------------- |
 | `SNOWFLAKE`, `SNOWFLAKE_JWT` | `SNOWFLAKE`            | `SNOWFLAKE`           |
 
+## `CUBEJS_DB_SNOWFLAKE_OAUTH_TOKEN`
+
+The OAuth token to use with Snowflake.
+
+| Possible Values                | Default in Development | Default in Production |
+| ------------------------------ | ---------------------- | --------------------- |
+| A valid OAuth token            | N/A                    | N/A                   |
+
+## `CUBEJS_DB_SNOWFLAKE_OAUTH_TOKEN_PATH`
+
+The path to the file containing the OAuth token for Snowflake.
+
+| Possible Values                | Default in Development | Default in Production |
+| ------------------------------ | ---------------------- | --------------------- |
+| A valid OAuth token            | N/A                    | N/A                   |
+
 ## `CUBEJS_DB_SNOWFLAKE_CLIENT_SESSION_KEEP_ALIVE`
 
 If `true`, [keep the Snowflake connection alive
@@ -1837,6 +1877,7 @@ The port for a Cube deployment to listen to API connections on.
 [ref-dataviz-tools]: /product/configuration/visualization-tools
 [ref-context-to-app-id]: /product/configuration/reference/config#context_to_app_id
 [ref-environments]: /product/workspace/environments
+[ref-databricks-m2m-oauth]: https://docs.databricks.com/aws/en/dev-tools/auth/oauth-m2m
 [ref-mdx-api]: /product/apis-integrations/mdx-api
 [ref-mdx-api-locale]: /product/apis-integrations/mdx-api#measure-format
 [ref-time-dimensions]: /product/data-modeling/reference/dimensions#time

docs/pages/product/data-modeling/concepts/calendar-cubes.mdx

@@ -7,6 +7,14 @@ Calendar cubes can be used to [override](#overriding-time-shifts) the default ti
 shift behavior of time-shift measures as well as [override](#overriding-granularities)
 the default granularities of time dimensions.
 
+<WarningBox>
+
+Calendar cubes are powered by Tesseract, the [next-generation data modeling
+engine][link-tesseract]. Tesseract is currently in preview. Use the
+`CUBEJS_TESSERACT_SQL_PLANNER` environment variable to enable it.
+
+</WarningBox>
+
 ## Configuration
 
 Calendar cubes are [cubes][ref-cubes] where the [`calendar` parameter][ref-cubes-calendar]

docs/pages/product/distribution.mdx

@@ -84,7 +84,8 @@ List of LTS releases:
 
 | Version | Status | End-of-life date |
 | --- | --- | --- |
-| `v1.0.x` | Active | October 29, 2025 |
+| `v1.4.x` | Active | October 29, 2026 |
+| `v1.0.x` | End-of-life | October 29, 2025 |
 
 
 [link-repo]: https://github.com/cube-js/cube

docs/yarn.lock

@@ -143,6 +143,13 @@
     algoliasearch "^4.17.0"
     classnames "^2.3.2"
 
+"@cube-dev/purple-banner@https://github.com/cubedevinc/purple-banner/releases/download/v2.0.21/cube-dev-purple-banner-2.0.21.tgz":
+  version "2.0.21"
+  resolved "https://github.com/cubedevinc/purple-banner/releases/download/v2.0.21/cube-dev-purple-banner-2.0.21.tgz#57217ed1c3952b5ba8f235d9863f07dc9921d3c4"
+  dependencies:
+    classnames "^2.3.1"
+    dayjs "^1.11.7"
+
 "@cubejs-client/core@^0.32.17":
   version "0.32.30"
   resolved "https://registry.yarnpkg.com/@cubejs-client/core/-/core-0.32.30.tgz#40bad1199635363a82a1a5e9f4718a67f2fe4f59"
@@ -1016,6 +1023,11 @@ character-reference-invalid@^2.0.0:
   optionalDependencies:
     fsevents "~2.3.2"
 
+classnames@^2.3.1:
+  version "2.5.1"
+  resolved "https://registry.yarnpkg.com/classnames/-/classnames-2.5.1.tgz#ba774c614be0f016da105c858e7159eae8e7687b"
+  integrity sha512-saHYOzhIQs6wy2sVxTM6bUDsQO4F50V9RQ22qBpEdCW+I+/Wmke2HOl6lS6dTpdxVhb88/I6+Hs+438c3lfUow==
+
 classnames@^2.3.2:
   version "2.3.2"
   resolved "https://registry.yarnpkg.com/classnames/-/classnames-2.3.2.tgz#351d813bf0137fcc6a76a16b88208d2560a0d924"