Summary
SSH connect now supports serverless usage policies via `--usage-policy-id`. Bundle deploy and destroy operations are more robust, with better handling of app lifecycle states, automatic cleanup of empty-string optional fields, and stricter validation of grants that now error on missing principals or empty privilege lists.
Summary generated by brickster.ai. For the full changelog and any code/binary attachments, follow the GitHub link above.
More from databricks/cli
Genie natural-language queries are promoted from experimental to stable, letting you ask questions about your data directly from the CLI. The release also fixes reliability issues with auth profiles timing out on unreachable workspaces and GCS-backed UC Volumes deletion, adds instance pool support to Declarative Automation bundles, and enhances `bundle generate job` to automatically download referenced workspace files.
Bundles auto-migrate from terraform to direct engine when configured and post-deploy dry-run succeeds, and scripts now support env: sections for declaring environment variables. SSH connect resolves python/pip to the virtual environment instead of system, bundle init accepts ssh:// URLs with better error messages for unsupported protocols, and auth describe correctly attributes profiles from environment variables.
CLI profiles now correctly override auth environment variables instead of being shadowed by them, and API pagination crashes are fixed. Bundles add experimental job_runs resources, fix permissions handling with `bundle deploy --select`, and introduce `purge_on_delete` and `replace_existing` options for Lakebase management.
SSH connect now accepts a --base-environment flag to run serverless sessions on custom environments, and aitools install is now plugin-first, installing through agent CLIs instead of copying skill files. Bundle deployments fix persistent drift on model serving endpoints, spurious job and cluster updates, and migration failures on permissioned resources.
The workspace export-dir command now exports notebooks with Windows-illegal filenames by sanitizing names instead of failing, and ssh connect now defaults to bash shells in workspace home directories. Bundle run displays modern job URLs for non-admin access, and bundle deploy --plan no longer recreates postgres roles on repeated deploys.
SSH connections now display server error logs, support 45-minute GPU timeout, and work with Cursor remote environments, while authentication is fixed to respect environment variables over default profiles. Bundles adds postgres_roles and postgres_databases resources for Lakebase, fixes WAL corruption after failed deploys and spurious resource recreations, and supports Unicode in variable path segments.