ClickHouse — The Cyber Toolchain

ClickHouse 1.0

Wed, 04 Nov 2026 08:00:35 GMT

API surface changed: +5 endpoints, 13 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders/{jwtProviderName}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders/{jwtProviderName} • New endpoint POST /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders • New endpoint PUT /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders/{jwtProviderName} • GET /v1/organizations/{organizationId}/services/{serviceId}/clickpipes: param cursor (query) added; param limit (query) added Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 1.0

Thu, 22 Oct 2026 07:57:45 GMT

API surface changed: +1 endpoint, 25 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint POST /v1/organizations/{organizationId}/services/{serviceId}/clickstack/webhooks/validate⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 1.0

Mon, 19 Oct 2026 07:55:51 GMT

API surface changed: +1 endpoint, 6 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/notifications⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 1.0

Sun, 11 Oct 2026 10:02:15 GMT

API surface changed: +2 endpoints, 2 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/replicaAwareRouting⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint PATCH /v1/organizations/{organizationId}/services/{serviceId}/replicaAwareRouting • GET /v1/organizations: param cursor (query) added; param limit (query) added • GET /v1/organizations/{organizationId}/services/{serviceId}/snapshots: param cursor (query) added; param limit (query) added Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 1.0

Sat, 03 Oct 2026 13:02:11 GMT

API surface changed: +10 endpoints, 14 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /v1/organizations/{organizationId}/services/{serviceId}/saved-queries/{queryId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}/privateEndpointConfig • New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}/tags • New endpoint GET /v1/organizations/{organizationId}/postgres/{postgresId}/backups • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/saved-queries • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/saved-queries/{queryId} • New endpoint GET /v1/whoami • New endpoint POST /v1/organizations/{organizationId}/byocInfrastructure/validate • New endpoint POST /v1/organizations/{organizationId}/services/{serviceId}/saved-queries • New endpoint PUT /v1/organizations/{organizationId}/services/{serviceId}/saved-queries/{queryId} Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 1.0

Fri, 25 Sep 2026 13:20:53 GMT

API surface changed: +2 endpoints, 7 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}/progress Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 1.0

Fri, 18 Sep 2026 07:39:59 GMT

API surface changed: +4 endpoints, 9 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/snapshotConfiguration⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/snapshots • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/snapshots/{snapshotId} • New endpoint PATCH /v1/organizations/{organizationId}/services/{serviceId}/snapshotConfiguration • GET /v1/organizations/{organizationId}/keys: param cursor (query) added; param limit (query) added • GET /v1/organizations/{organizationId}/serviceProfiles: param region_id (query) now optional Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 1.0

Mon, 14 Sep 2026 14:38:11 GMT

API surface changed: +5 endpoints, 3 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /v1/organizations/{organizationId}/services/{serviceId}/query-api-endpoints/{endpointId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/query-api-endpoints • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/query-api-endpoints/{endpointId} • New endpoint POST /v1/organizations/{organizationId}/services/{serviceId}/query-api-endpoints • New endpoint PUT /v1/organizations/{organizationId}/services/{serviceId}/query-api-endpoints/{endpointId} Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 1.0

Fri, 11 Sep 2026 14:45:45 GMT

ClickHouse 1.0

Mon, 07 Sep 2026 07:41:37 GMT

ClickHouse now publishes an API — 148 endpoints across 12 areas: Clickstack, Service, Clickpipes, … • Clickstack (30 endpoints) — create, read, update, delete • Service (26 endpoints) — create, read, update, delete • Clickpipes (18 endpoints) — create, read, update, delete • Postgres (17 endpoints) — create, read, update, delete • Udf (12 endpoints) — create, read, update, delete • Organization (11 endpoints) — create, read, update, delete • Backup (8 endpoints) — create, read, update, delete • User Management (8 endpoints) — create, read, update, delete • 4 more areas: Api Keys, Prometheus, Role Management, Billing Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 26.6

Thu, 25 Jun 2026 00:00:00 GMT

ClickHouse 26.6 adds hypothetical skip indexes, GeoJSON input, MVT SQL functions, PNG output, and more. • Add the `--echo`, `--echo-formatted`, and `--echo-query-id` options to clickhouse-client for granular control over query echoing • Add `CREATE HYPOTHETICAL INDEX ... TYPE ...` syntax and `EXPLAIN WHATIF SELECT ...` to estimate skip ratios without materializing indexes • Add the `system.hypothetical_indexes` table to expose session-scoped virtual skip indexes • Add embedded /schema web UI to visualize dependency graphs between tables, views, dictionaries, and distributed objects • Add `PNG` output format to render query results directly as PNG images • Detect AI coding agents via environment variables and report the detected agent in the new `client_agent` column of `system.query_log`, `system.query_thread_log`, and `system.processes` • Add `system.documentation` system table collecting embedded reference documentation as Markdown • Add `GeoJSON` input format for reading GeoJSON FeatureCollection documents into native Geometry types • Add `input_format_geojson_unsupported_geometry_handling` setting to control how unsupported geometry types are handled in GeoJSON imports • Add `MVTEncodeGeom`, `MVTEncode`, `MVTBoundingBox`, and `MVTBoundingBoxMercator` functions for serving Mapbox Vector Tiles from SQL, with PostGIS aliases `ST_AsMVTGeom` and `ST_AsMVT` • Support writing data into Azure Data Lake Storage Gen2 • Add `RowBinaryWithNamesAndTypesAndDefaults` format to support schema evolution • Implement `ADD ENUM VALUES` in `ALTER TABLE` queries to append new values to existing Enum types • Add interactive help command (`help`, `/help`, `man`, `/man`) to clickhouse-client and clickhouse-local for syntax-highlighted documentation lookup • Support `SYSTEM START LISTEN` and `SYSTEM STOP LISTEN` in clickhouse-local to enable TCP/HTTP connections Breaking changes: • The `allow_experimental_query_deduplication` feature is removed; queries relying on it will fail. • The `system.instrumentation.parameters` column and `SYSTEM INSTRUMENT ADD ... HANDLER PARAMETERS ...` syntax are renamed to `arguments` and `SYSTEM INSTRUMENT ADD ... HANDLER ARGUMENTS ...`; old names are no longer supported. • The default of the server setting `insert_deduplication_version` changes from `compatible_double_hashes` to `new_unified_hash`, altering deduplication scope from per-partition to per-insert block. • The setting `show_data_lake_catalogs_in_system_tables` is renamed to `show_remote_databases_in_system_tables`; when set to 0, MySQL and PostgreSQL databases are also hidden from `system.tables`, `system.columns`, and `system.completions`. • The default x86 build now targets x86-64-v3 (AVX2); CPUs without AVX2 support must switch to the amd64compat build. • icebergHash and icebergBucket now reject Int128, UInt128, Int256, UInt256, and Decimal256 arguments with an explicit error instead of silently truncating. • ALTER TABLE ... REPLACE PARTITION ... FROM ... no longer silently drops the destination partition's data if the source has no parts; it is now rejected with BAD_ARGUMENTS by default. Set `allow_replace_partition_from_empty_source = 1` or compatibility to 26.5 to restore old behavior. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 26.5

Thu, 21 May 2026 00:00:00 GMT

ClickHouse 26.5 adds filesystem table function, Paimon engine support, and various new config settings and SQL features. • `filesystem` table function allows querying directory structure as a SQL table • Adds `kafka_autodetect_client_rack` setting to discover Availability Zone via cloud facilities for librdkafka • Supports `CREATE OR REPLACE MATERIALIZED VIEW` with atomic swap semantics • Allows passing bare function names to higher-order functions (e.g., arrayMap(negate, ...)) without lambda wrapping • Adds `tokenizeQuery` and `highlightQuery` SQL functions for query tokenization and syntax highlighting • Supports negative values in the `LIMIT BY` clause to select rows from the end of each group • Adds support for JSONPath arguments in `JSON_VALUE`, `JSON_EXISTS`, and `JSON_QUERY` for Tuple/Array paths • Adds `Paimon`, `PaimonS3`, `PaimonAzure`, `PaimonHDFS`, and `PaimonLocal` table engines with incremental read support • Adds `max_bytes_ratio_before_external_join` setting to control spill-to-disk threshold for hash joins Breaking changes: • `date_time_input_format` and `cast_string_to_date_time_mode` defaults changed from `basic` to `best_effort`; strict parsing now requires explicitly setting these to `basic` or using `compatibility`. • Tuple element name `null` is forbidden; ambiguous subcolumn resolution will fail if this name was previously used. • Obsolete Arrow-based Parquet reader and writer are removed; native implementation is now enforced. • `kql` table function removed; use `SET dialect = 'kusto'` instead. • `RANK` and `DENSE_RANK` window functions now reject arguments (SQL standard); previously lenient behavior requires setting `allow_rank_dense_rank_arguments = 1`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 26.4

Thu, 30 Apr 2026 00:00:00 GMT

ClickHouse 26.4 adds Arrow Flight SQL, NLP stem function, JSON skip indexes, NATURAL JOIN, and Keeper watch/lsr commands. • Add `ArrowFlightSQL` protocol support • Add `JSONAllPaths` skip index type with bloom_filter, tokenbf_v1, ngrambf_v1, and text (inverted) index types for MergeTree JSON columns • Implement new `commit_order` projection index to reorganize data in insertion order • Introduce `QUERIES_PER_NORMALIZED_HASH` quota resource type with `NORMALIZED_QUERY_HASH` key type to protect public services from abuse • Allow NATURAL JOIN syntax to automatically match on columns sharing the same name and deduplicate those columns • Add `watch` command to `clickhouse-keeper-client` for get, exists, and ls commands • Add `lsr` (getChildrenRecursive) request to ClickHouse Keeper and lsr command to clickhouse-keeper-client Breaking changes: • The IN operator now uses exact value semantics for Bool type: only 0 and 1 values in the set match Bool values; previously, numeric values greater than 255 were incorrectly clamped to true • Disallows using SELECT as a bareword identifier in a WITH expression list element • Reduced default `http_max_fields` from 1,000,000 to 1,000 and `http_max_field_name_size` from 128 KB to 4 KB; added `http_max_request_header_size` and `http_headers_read_timeout` settings • The H3 library has been updated to v4, which improves the precision of length, area, and other metric calculations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 26.3

Thu, 26 Mar 2026 00:00:00 GMT

ClickHouse 26.3 adds map bucketing, async insert default, materialized CTEs, WebAssembly UDFs and new UTF functions. • Adds `bucketed serialization for Map columns` via the `map_serialization_version`, `max_buckets_in_map`, `map_buckets_strategy`, `map_buckets_coefficient`, and `map_buckets_min_avg_size` settings to enable faster single-key lookups • Enables `async insert` by default using the compatibility layer, allowing ClickHouse to batch small inserts automatically • Supports `materialized CTE` by allowing evaluation of CTEs only once and storing results in temporary tables • Adds experimental support for WebAssembly-based user-defined functions (UDFs) via the Wasmtime backend • Adds the mergeTreeTextIndex(database, table, index) table function to read data directly from a text index • Adds the `table_readonly` MergeTree setting to mark tables as read-only and prevent inserts/modifications • Adds `use_partition_pruning` and alias `use_partition_key` settings to control partition pruning behavior • Implements ALTER TABLE ... EXECUTE expire_snapshots('') for Iceberg tables • Allows each type=http entry in `` to specify a custom `` key pointing to a separate `` config section • Adds `pretty=1` option to EXPLAIN for tree-style indented output and `compact=1` to collapse Expression steps • Adds the `restore_access_entities_with_current_grants` server setting for backup restoration behavior • Adds `caseFoldUTF8`, `removeDiacriticsUTF8`, and `normalizeUTF8NFKCCasefold` functions for Unicode handling • Adds `unicode_word` tokenizer for full-text indexes • Adds `max_skip_unavailable_shards_num` and `max_skip_unavailable_shards_ratio` settings to limit silently skipped shards • Supports the `SOME` keyword for subquery expressions, identical to `ANY` • Adds `output_format_trim_fixed_string` setting to strip trailing null bytes from FixedString values in text output • Supports parenthesized table join expressions in the FROM clause • Implements the `toDaysInMonth` function • Allows accepting array of part names instead of regexp for `mergeTreeAnalyzeIndexes{,UUID}` Breaking changes: • The `hypothesis` skip index type is removed; creating tables with `INDEX ... TYPE hypothesis` will produce an error • The experimental `detectProgrammingLanguage` function is removed • NOT operator precedence now matches the SQL standard, changing the parse result of queries like `NOT (x) IS NULL` compared to previous versions • Downgrading after upgrading to 26.3 may cause data loss because newly created data parts with nested types using propagated serialization versions cannot be read by older versions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 26.2

Thu, 26 Feb 2026 00:00:00 GMT

ClickHouse 26.2 adds BigLake catalog integration, ClickStack UI, TOTP auth, jemalloc profiling tables, and new dedup/hash functions. • Adds Google BigLake catalog integration as a managed database source • Enables direct access to ClickStack (observability UI) from within ClickHouse for debugging and local development • Supports time-based one-time password (TOTP) as an authentication method • Adds `lazy_load_tables` database setting to defer table engine materialization until first access • Adds `input_format_max_block_wait_ms` setting to control HTTP block emission timeout during incomplete uploads • Adds system tables `system.tokenizers`, `system.user_defined_functions`, and `system.jemalloc_stats` for inspecting tokenizers, UDF status, and memory allocator stats respectively • Exposes `/jemalloc.html` HTTP endpoint for interactive visualization of jemalloc statistics • Adds system table `system.jemalloc_profile_text` with configurable output format (raw, symbolized, collapsed) via `jemalloc_profile_text_output_format` setting for heap profiling • Adds `default_dictionary_database` setting to resolve unqualified external dictionary references without modification • Adds support for auxiliary Zookeeper nodes in `DatabaseReplicated` setups • Implements new table function primes() and system table `system.primes` containing ascending prime numbers • Enables parallel quorum replication for async inserts with duplicate detection and synchronization waits • Adds `colorOKLABToSRGB` and `colorSRGBToOKLAB` functions for sRGB/OKLAB color space conversion • Adds new `deduplicate_insert` setting that overrides both `insert_deduplicate` and `async_insert_deduplicate` • Introduces `insert_deduplication_version` server setting for unified deduplication hash migration • Adds `xxh3_128` hashing function • Adds `OPTIMIZE DRY RUN PARTS ` query syntax to simulate merges without committing results • Adds `check_named_collection_dependencies` setting (enabled by default) to prevent dropping named collections used by tables • Adds `system.fail_points` system table for inspecting server failpoints to assist in test automation Breaking changes: • Deduplication is now turned ON by default for all inserts; explicitly set `deduplicate_insert='backward_compatible_choice'` to keep the old behavior if deduplication was disabled. • Renamed system tables: `azure_queue` is now `azure_queue_metadata_cache` and `system.s3queue` is now `s3queue_metadata_cache`. • Applying a function to an incompatible Variant sub-type now throws an exception instead of silently returning NULL. • The `do_not_merge_across_partitions_select_final` setting now defaults to 0 with automatic merging enabled only if `enable_automatic_decision_for_merging_across_partitions_for_final=1`; explicit configuration may be required to restore previous behavior. • Creating an S3 table with mismatched column names relative to the remote file schema now fails at table creation time instead of working. • Subqueries in `ORDER BY` and other table key expressions are now forbidden. • For `optimize_move_to_prewhere_if_final=1`, row policies are now applied after FINAL by default; use `apply_row_policy_after_final` to change this behavior. • Date columns from PostgreSQL are now inferred as Date32 instead of Date; adjust queries if this overflow prevention affects logic relying on the narrower range. • Date type serialization in Arrow/ArrowStream formats now uses Arrow's native date32 instead of uint16; restore old behavior with `output_format_arrow_date_as_uint16`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse

ClickHouse 26.1

Thu, 29 Jan 2026 00:00:00 GMT

ClickHouse 26.1 adds Keeper HTTP API/Web UI, async insert deduplication with materialized views, rcfg command, and Variant type support. • Adds `rcfg` four-letter command for ClickHouse Keeper to change cluster configuration via JSON string over TCP interface • Adds new system table `zookeeper_info` to expose Keeper metadata • Enables async insert deduplication when dependent materialized views are present, filtering conflicting rows by block_id • Makes the Hash output format independent of block sizes, producing stable hash values regardless of block size • Adds support for the Variant type in all functions • Adds `max_min_fair` value to `concurrent_threads_scheduler` server setting for max-min fair concurrency control • Allows DDL queries with ON CLAUSE for Replicated Database when `ignore_on_cluster_for_replicated_database` is enabled • Adds `icebergLocalCluster` table function for local Iceberg integration • Adds `use_primary_key` setting to disable granule pruning based on primary key Breaking changes: • DEFLATE_QPL and ZSTD_QAT codecs are removed; users must convert existing data before upgrading • The Lazy database engine is removed and no longer available • The `escape_index_filenames` setting is required to handle indices with non-ASCII characters created in previous versions, otherwise loading fails • Format settings `exact_rows_before_limit`, `rows_before_aggregation`, `cross_to_inner_join_rewrite`, `regexp_dict_allow_hyperscan`, `regexp_dict_flag_case_insensitive`, `regexp_dict_flag_dotall` and `dictionary_use_async_executor` are now regular settings; specifying them in Iceberg/DeltaLake/Kafka/S3/etc. table engine definitions throws an error • joinGet/joinGetOrNull functions now enforce SELECT privileges on the underlying Join table, requiring explicit grants or failing with ACCESS_DENIED Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clickhouse