Description: [SEC] Part 1 of #3268: SSRF guard for connector URL credential checks.
Changes
- [SEC] Part 1 of #3268: SSRF guard for connector URL credential checks (#3269).
- Consolidate all connector Kubernetes config under a single Advanced configuration section (#3237).
- [FRONT] Part 2 of #3218: extract datamodel lineage metrics into composable (#3267).
- [TESTCLEAN] Part 1 of #3291: remove can’t-fail / zombie / duplicate pipeline-entity tests (#3292).
- DP - Auto initial load (#3207).
- BigQuery target: support key-less (append) subscriptions — make the primary key optional (#3260).
- [SEC] Part 2 of #3268: SSRF guard for DLT schema-fetch background task (#3289).
- [TESTS] Part 3 of #3155: env/team request-creation rejection branches (#3290).
- [ARCH] Part 3 of #3208: relocate repository-interface contract DTOs into the domain layer (#3266).
- [SEC] Part 3 of #3268: reject non-DNS-label subdomain in Pipedrive/Zendesk checks (#3321).
- [TESTS] Part 1 of #3322: connector-OAuth proxy route auth + CP-error mapping (#3323).
- [TESTCLEAN] Part 2 of #3291: harden can’t-fail env id assertions (#3324).
- Kafka to jdbc dependency upgrades better jvm docker file (#3326).