Skip to content

Iceberg Data Platform 0.5.2

Release date: 2026-09-24

Changes

  • The quick-share agent skill opens the portals to participants anywhere for a class or demo. Free Cloudflare quick tunnels give each portal and the sign-in page a public HTTPS address with a trusted certificate, so nobody installs an app or imports a certificate. It replaces lan-access.
  • The installer ends with what to do next: sign in to the administration portal as platform-admin, with the temporary password shown on a new installation, then create a team and a user or let the demo-company skill do it. Stop, start and update commands and the optional extras follow.
  • The installation bundle adds .claude/skills pointers to the bundled skills, so Claude Code finds them without extra steps.
  • Getting started in the user portal walks through the DuckDB CLI: install, download the helper, sign in, attach read-only or writable.
  • Fixed: deleting a database could remove the storage bucket of another database when a catalog admin had changed the catalog's portal.bucket property. The portal now checks the bucket's managed-by and database tags and stops with a 409 and nothing deleted when they do not match.

See the changelog for details.

Upgrade from 0.5.1

No data migration is required. Preserve your existing configuration and PostgreSQL, RustFS, pgAdmin and shared notebook volumes.

If you opened the portals on your network with the lan-access skill, undo that first with the same skill: ask your agent to follow the "Undo" section of .agents/skills/lan-access/SKILL.md. It restores .env from .env.before-lan and stops the Caddy proxy. The installer adds new files but never removes old ones, so delete the .agents/skills/lan-access folder afterwards.

Rerun the installer, or update the portal, users and notebook images, and restart the platform. The installer never replaces .env. It adds the quick-share skill and the .claude/skills pointers to the installation folder.

Install this version

These commands become available after the release workflow publishes v0.5.2.

Linux / macOS:

curl -fsSL https://github.com/sanderdw/iceberg-data-platform/releases/download/v0.5.2/install.sh | sh

Windows PowerShell:

irm https://github.com/sanderdw/iceberg-data-platform/releases/download/v0.5.2/install.ps1 | iex

The installers pin the installation bundle and all application images to 0.5.2. Docker with Compose is required. The release workflow builds images for Linux AMD64 and ARM64.

Publication

Follow the release workflow. Merge the reviewed changes into main, wait for hosted CI, then tag that commit v0.5.2. Pushing the tag triggers image builds and publication of the source archive, installation bundle, installers and checksums.

Preparation checks

Local preparation completed on 2026-09-24:

  • Full verification: 402 tests passed, 9 skipped; Python lint, JavaScript syntax and marimo checks passed.
  • PowerShell installer tests: 9 passed with PowerShell 7.5.2 in a Linux container.
  • Browser fixtures: team/database management, catalog, data shares, forms and navigation passed.
  • Live integration in CI mode from empty volumes: end-to-end browser tests, catalog, stack, data and share smoke tests and the notebook examples passed.
  • Keycloak mode on fresh volumes: onboarding, Keycloak, user MCP, admin MCP and iceberg_connect.py device-login smoke tests passed.
  • Python and npm dependency audits reported no known vulnerabilities.
  • Gitleaks found no secrets in the packaged source.
  • The installation bundle pins all images to 0.5.2 and contains the agent skills, their .claude/skills pointers and iceberg_connect.py.

Hosted CI must still run the native installers on Linux, macOS and Windows, the notebook image check and the multiarchitecture image builds.