Merge branch 'main' into template-ipykernel-conftest

Author: lennartkats-db

.codegen/_openapi_sha

@@ -1 +1 @@
-8f5eedbc991c4f04ce1284406577b0c92d59a224
+e1ea3f5ba0bc5b53be94f56535a67ba701a52a52

.gitattributes

@@ -168,6 +168,7 @@ cmd/workspace/volumes/volumes.go linguist-generated=true
 cmd/workspace/warehouses/warehouses.go linguist-generated=true
 cmd/workspace/workspace-bindings/workspace-bindings.go linguist-generated=true
 cmd/workspace/workspace-conf/workspace-conf.go linguist-generated=true
+cmd/workspace/workspace-entity-tag-assignments/workspace-entity-tag-assignments.go linguist-generated=true
 cmd/workspace/workspace-iam-v2/workspace-iam-v2.go linguist-generated=true
 cmd/workspace/workspace-settings-v2/workspace-settings-v2.go linguist-generated=true
 cmd/workspace/workspace/workspace.go linguist-generated=true

.github/workflows/push.yml

@@ -271,8 +271,14 @@ jobs:
           make test-pipelines
 
   # This job groups the result of all the above test jobs.
-  # If any of them failed, this job will be skipped.
   # It is a required check, so it blocks auto-merge and the merge queue.
+  #
+  # We use `if: always()` to ensure this job runs even when dependencies are skipped.
+  # Without it, GitHub Actions skips jobs whose dependencies are skipped, which would
+  # incorrectly block the merge queue when optional test jobs don't run.
+  #
+  # The step checks `contains(needs.*.result, 'failure')` to fail if any dependency failed.
+  # Reference: https://github.com/orgs/community/discussions/25970
   test-result:
     needs:
       - test
@@ -281,11 +287,17 @@ jobs:
       - test-exp-ssh
       - test-pipelines
 
+    if: ${{ always() }}
     name: test-result
     runs-on: ubuntu-latest
 
     steps:
-      - run: echo "All tests passed ✅"
+      - run: |
+          if [[ "${{ contains(needs.*.result, 'failure') }}" == "true" ]]; then
+            echo "One or more required jobs failed ❌"
+            exit 1
+          fi
+          echo "All tests passed ✅"
 
   validate-generated-is-up-to-date:
     needs: cleanups

.release_metadata.json

@@ -1,3 +1,3 @@
 {
-    "timestamp": "2025-12-04 14:52:16+0000"
+    "timestamp": "2025-12-18 13:04:36+0000"
 }

.wsignore

@@ -11,7 +11,6 @@ python/docs/images/databricks-logo.svg
 **/*.zip
 **/*.whl
 **/*.png
-**/*.tgz
 
 # new lines are recorded differently on windows and unix.
 # In unix: "raw_body": "hello, world\n"

CHANGELOG.md

@@ -1,5 +1,35 @@
 # Version changelog
 
+## Release v0.281.0 (2025-12-18)
+
+### CLI
+* Fix lakeview publish to default `embed_credentials` to false ([#4066](https://github.com/databricks/cli/pull/4066))
+
+### Bundles
+* Add support for configurable catalog/schema for dashboards ([#4130](https://github.com/databricks/cli/pull/4130))
+* Pass SYSTEM\_ACCESSTOKEN from env to the Terraform provider ([#4135](https://github.com/databricks/cli/pull/4135))
+* `bundle deployment migrate`: when running `bundle plan` propagate `-var` arguments.
+* engine/direct: New option --plan to `bundle deploy` to deploy previously saved plan (saved plan with `bundle plan -o json`) ([#4134](https://github.com/databricks/cli/pull/4134))
+* engine/direct: Fix dependency-ordered deletion by persisting depends\_on in state ([#4105](https://github.com/databricks/cli/pull/4105))
+
+### Dependency updates
+* Upgrade Go SDK to 0.94.0 ([#4148](https://github.com/databricks/cli/pull/4148))
+* Upgrade Terraform provider to 1.100.0 ([#4150](https://github.com/databricks/cli/pull/4150))
+
+
+## Release v0.280.0 (2025-12-10)
+
+### Bundles
+* Fixed changing the source for the SQL task from GIT to WORKSPACE ([#4114](https://github.com/databricks/cli/pull/4114))
+* `bundle deployment migrate` will now run a plan before migration to check if deployment was done ([#4088](https://github.com/databricks/cli/pull/4088))
+* engine/direct: Increase "serial" in state file after every deployment ([#4115](https://github.com/databricks/cli/pull/4115))
+
+### Dependency updates
+
+* Upgrade Go SDK to 0.93.0 ([#4112](https://github.com/databricks/cli/pull/4112))
+* Bump Go toolchain to 1.25.5.
+
+
 ## Release v0.279.0 (2025-12-04)
 
 ### Notable Changes

Makefile

@@ -87,6 +87,10 @@ test-update:
 test-update-templates:
 	-go test ./acceptance -run '^TestAccept/bundle/templates' -update -timeout=${LOCAL_TIMEOUT}
 
+# Regenerate out.test.toml files without running tests
+generate-out-test-toml:
+	go test ./acceptance -run '^TestAccept$$' -only-out-test-toml -timeout=${LOCAL_TIMEOUT}
+
 # Updates acceptance test output (integration tests, requires access)
 test-update-aws:
 	deco env run -i -n aws-prod-ucws -- go test ./acceptance -run ^TestAccept$$ -update -timeout=1h -skiplocal -v
@@ -167,7 +171,7 @@ generate:
 	$(GENKIT_BINARY) update-sdk
 
 
-.PHONY: lint lintfull tidy lintcheck fmt fmtfull test test-unit test-acc test-slow test-slow-unit test-slow-acc cover showcover build snapshot snapshot-release schema integration integration-short acc-cover acc-showcover docs ws wsfix links checks test-update test-update-templates test-update-aws test-update-all generate-validation
+.PHONY: lint lintfull tidy lintcheck fmt fmtfull test test-unit test-acc test-slow test-slow-unit test-slow-acc cover showcover build snapshot snapshot-release schema integration integration-short acc-cover acc-showcover docs ws wsfix links checks test-update test-update-templates generate-out-test-toml test-update-aws test-update-all generate-validation
 
 test-exp-aitools:
 	make test TEST_PACKAGES="./experimental/aitools/..." ACCEPTANCE_TEST_FILTER="TestAccept/idontexistyet/aitools"

NEXT_CHANGELOG.md

@@ -1,10 +1,11 @@
 # NEXT CHANGELOG
 
-## Release v0.280.0
+## Release v0.282.0
 
 ### Notable Changes
 
 ### CLI
+* Skip non-exportable objects (e.g., `MLFLOW_EXPERIMENT`) during `workspace export-dir` instead of failing ([#4081](https://github.com/databricks/cli/issues/4081))
 
 ### Bundles
 * Add `ipykernel` to the `default` template to enable Databricks Connect notebooks in Cursor/VS Code ([#4164](https://github.com/databricks/cli/pull/4164))

acceptance/acceptance_test.go

@@ -48,6 +48,7 @@ var (
 	UseVersion      string
 	WorkspaceTmpDir bool
 	TerraformDir    string
+	OnlyOutTestToml bool
 )
 
 // In order to debug CLI running under acceptance test, search for TestInprocessMode and update
@@ -78,6 +79,7 @@ func init() {
 	// creates these symlinks when a file_mirror is used for a provider (in .terraformrc). This flag
 	// allows us to download the provider to the workspace file system on DBR enabling DBR integration testing.
 	flag.StringVar(&TerraformDir, "terraform-dir", "", "Directory to download the terraform provider to")
+	flag.BoolVar(&OnlyOutTestToml, "only-out-test-toml", false, "Only regenerate out.test.toml files without running tests")
 }
 
 const (
@@ -307,14 +309,19 @@ func testAccept(t *testing.T, inprocessMode bool, singleTest string) int {
 			config, configPath := internal.LoadConfig(t, dir)
 			skipReason := getSkipReason(&config, configPath)
 
-			if testdiff.OverwriteMode {
+			if testdiff.OverwriteMode || OnlyOutTestToml {
 				// Generate materialized config for this test
 				// We do this before skipping the test, so the configs are generated for all tests.
 				materializedConfig, err := internal.GenerateMaterializedConfig(config)
 				require.NoError(t, err)
 				testutil.WriteFile(t, filepath.Join(dir, internal.MaterializedConfigFile), materializedConfig)
 			}
 
+			// If only regenerating out.test.toml, skip the actual test execution
+			if OnlyOutTestToml {
+				t.Skip("Skipping test execution (only regenerating out.test.toml)")
+			}
+
 			if skipReason != "" {
 				skippedDirs += 1
 				t.Skip(skipReason)
@@ -329,7 +336,7 @@ func testAccept(t *testing.T, inprocessMode bool, singleTest string) int {
 			if testdiff.OverwriteMode && len(expanded) > 1 {
 				// All variants of the test are producing the same output,
 				// there is no need to run the concurrently when updating.
-				// Exception: if EnvVaryOutput is configured with multiple values, we must
+				// Exception: if EnvVaryOutput is configured, we must
 				// run all variants to record variant-specific outputs.
 				if config.EnvVaryOutput == nil || len(config.EnvMatrix[*config.EnvVaryOutput]) <= 1 {
 					expanded = expanded[0:1]
@@ -344,6 +351,9 @@ func testAccept(t *testing.T, inprocessMode bool, singleTest string) int {
 				runTest(t, dir, 0, coverDir, repls.Clone(), config, expanded[0], envFilters)
 			} else {
 				for ind, envset := range expanded {
+					if forbiddenEnvSet(envset) {
+						continue
+					}
 					envname := strings.Join(envset, "/")
 					t.Run(envname, func(t *testing.T) {
 						if !inprocessMode {
@@ -361,6 +371,23 @@ func testAccept(t *testing.T, inprocessMode bool, singleTest string) int {
 	return selectedDirs - skippedDirs
 }
 
+func forbiddenEnvSet(envset []string) bool {
+	hasTerraform := false
+	hasReadplan := false
+
+	for _, pair := range envset {
+		if pair == "DATABRICKS_BUNDLE_ENGINE=terraform" {
+			hasTerraform = true
+		}
+		if pair == "READPLAN=1" {
+			hasReadplan = true
+		}
+	}
+
+	// Do not run terraform tests with --plan option:
+	return hasTerraform && hasReadplan
+}
+
 func getEnvFilters(t *testing.T) []string {
 	envFilterValue := os.Getenv(EnvFilterVar)
 	if envFilterValue == "" {
@@ -628,6 +655,11 @@ func runTest(t *testing.T,
 		cmd.Env = append(cmd.Env, "GOCOVERDIR="+coverDir)
 	}
 
+	// Set unique cache folder for this test to avoid race conditions between parallel tests
+	// Use test temp directory to avoid polluting user's cache
+	uniqueCacheDir := filepath.Join(t.TempDir(), ".cache")
+	cmd.Env = append(cmd.Env, "DATABRICKS_CACHE_DIR="+uniqueCacheDir)
+
 	for _, key := range utils.SortedKeys(config.Env) {
 		if hasKey(customEnv, key) {
 			// We want EnvMatrix to take precedence.

acceptance/bundle/artifacts/whl_dynamic/out.plan_create.direct.json

@@ -1,4 +1,6 @@
 {
+  "plan_version": 1,
+  "cli_version": "[DEV_VERSION]",
   "plan": {
     "resources.jobs.test_job": {
       "action": "create",