Port graph for antalya-26.4

[zvonand]

Port dependency graph — antalya-26.4

Generated by releasy graph at 2026-06-02T00:04:13+00:00.

44 unit(s) across 44 PR(s) — 5 group(s), 30 standalone. PRs inside a group port together as one combined PR, cherry-picked in the listed order (prerequisite first).

Groups (port together, in apply order)

auto-grp-pr-1658

1. #1658 Antalya 26.3 forward-port: Token Authentication and Authorization
2. #1777 Antalya 26.3: address OAuth security audit
3. #1784 Antalya 26.3: OAuth -- rework Entra ID workflow
4. #1799 Antalya 26.3: OAuth improvements

auto-grp-pr-1694

1. #1694 Antalya 26.3 forward-port: Hybrid tables
2. #1723 Antalya-26.3 Frontport of Antalya 26.1 - Add ALTER TABLE MODIFY SETTING support for Hybrid watermarks  #1659 - Add ALTER TABLE MODIFY SETTING support for Hybrid watermarks

auto-grp-pr-1687

1. #1687 Antalya 26.3 port - improvements for cluster requests
2. #1759 Antalya 26.3: Fix view over iceberg
3. #1751 Antalya 26.3: Fix condition for using parquet metadata cache

auto-grp-pr-1718

1. #1718 Antalya 26.3: apassos-3: combined port of 12 PRs
2. #1730 improve observability over exceptions

auto-grp-pr-1713

1. #1713 Remove lock inside the task export partition
2. #1741 Export partition all

Standalone PRs

• #1662 Antalya 26.3 forward-port: Expose IcebergS3 partition_key and sorting_key in system.tables
• #1646 26.3 Antalya port - fixes for s3Cluster distributed calls
• #1747 Antalya 26.3: Fix rescheduleTasksFromReplica
• #1748 Antalya 26.3: Fix file identifier in rescheduleTasksFromReplica
• #1752 Antalya 26.3: Add design for ALTER TABLE EXPORT + design review skill
• #1640 26.3 Antalya port - Alternative syntax for cluster functions
• #1743 Antalya 26.3: Enabled experimental datalake catalogues by-default
• #1744 Antalya 26.3: Fix export task not being killed during s3 outage
• #1749 Antalya 26.3: Add OAuth2 login to clickhouse-client (--login / --login=device)
• #1762 Do not read empty namespaces from catalog
• #1655 feature (iceberg): Implement TRUNCATE TABLE for Iceberg Engine (REST …
• #1781 Antalya 26.3 Backport - Added test cases for s3 encoding fix
• #1788 Antalya 26.3 Hybrid: added support for segment pruning
• #1789 hybrid: added system.hybrid_watermarks to inspect the Hybrid table watermarks
• #1742 Antalya 26.3: Fix failing delta lake test
• #1783 Fix incorrect interaction between object_storage_remote_initiator and object_storage_cluster.
• #1804 Antalya 26.3: Query condition cache for iceberg tables
• #1803 Antalya 26.3: normalizing format check using lower case
• #1807 Antalya 26.3: Share S3 client cache per bucket
• #1806 Antalya 26.3: Parallelize reads from a single Parquet file in StorageFile
• #1800 Antalya 26.3: Change the interface for Iceberg inserts with the catalog
• #1728 Make export part and partition respect background tasks memory limit
• #1761 Support for 'time' type in Iceberg
• #1813 dont commit while holding the lock on cleanup thread
• #1836 Do not require iceberg insert settings on replicas
• #1843 Make the export task timeout 24 hours instead of 1 hour
• #1812 Antalya 26.3: support external paths in Iceberg tables
• #1809 Antalya 26.3: add --jwt-command to client
• #1847 Export partition - Introduce commit lock
• #1782 Antalya 26.3: Cluster Joins part 2 - global mode

---

Org members can comment on this issue to change the graph — add or veto PRs, regroup, or set ordering — then run releasy graph update to apply your feedback.

Dependencies set by graph update are human/AI-asserted, not trial-pick-verified. Re-run releasy graph discover for conflict-verified dependencies.

[zvonand]

#1809 should better be moved to auto-grp-pr-1658

[zvonand]

also add #1859 -- it is not in the list