Salesforce connector mTLS authentication is now generally available
Mutual TLS (mTLS) authentication for the Salesforce connector in Lakeflow Connect is now generally available. With mTLS, Databricks and Salesforce exchange and verify client certificates to establish two-way trust, combined with the OAuth client credentials flow. Choose it for API-only users or when your organization requires mTLS.
Also shipped Aug 20, 2026Databricks in August 2026 →
BigQuery adds ML.TREND, ML.SEASONALITY and ML.DETECT_CHANGE_POINTS in preview
New table-valued functions in the query editor and conversational analytics identify trends, repeating seasonal patterns and structural change points in time series data.
BigQuery Graph core processing limited to Enterprise editions from April 26, 2027
Standard edition and on-demand billing support for BigQuery Graph core graph processing is deprecated, with processing restricted to Enterprise and Enterprise Plus from April 26, 2027. Graph measures remain available except in Standard edition.
The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server
The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server. AI agents can now execute advanced BigQuery operations, such as job scheduling, job management, and reservation management, through a managed MCP endpoint. For more information, see Use the Cloud CLI remote MCP server . This feature is in Preview .
AI_EXTRACT and AI_PARSE_DOCUMENT support for client-side encrypted stages and network-restricted accounts (General availability)
AI_EXTRACT and AI_PARSE_DOCUMENT now support documents stored on stages that use client-side or server-side encryption, including in accounts that use PrivateLink or other network policies that restrict public network access to stages. For more information, see the following topics:
Cortex Agent code execution tool (Preview)
The Cortex Agent code execution tool is now in public preview. When you enable the tool on an agent, the agent can generate and run Python in a secure, isolated sandbox to process data, perform calculations, and produce visualizations.
Gemini Enterprise and Gemini Notebook Enterprise: Autocomplete for sharing notebooks and agents with Okta
If you use Okta as your external identity provider (IdP) with Workforce Identity Federation, you can configure System for Cross-domain Identity Management (SCIM). Configuring SCIM enables autocomplete when sharing Gemini Notebook Enterprise notebooks and when sharing agents in Gemini Enterprise.
More from LakeflowEvery Lakeflow release →
Performance mode now applies to materialized view and streaming table refreshes from dbt tasks
The job-level performance mode setting now propagates to materialized view and streaming table refreshes triggered by dbt tasks. You can set these jobs to Standard mode to optimize for cost, or keep the default Performance-optimized mode for faster startup. Previously, dbt tasks always ran refreshes in Performance-optimized mode.
Default Python package repositories are GA for Lakeflow pipelines and classic compute
Configuring default Python package repositories is now generally available for Lakeflow pipelines and for classic compute created via the UI and API. Workspace admins can set private or authenticated registries as the workspace default for these workloads. See Configure default package repositories .
Session restore for serverless jobs is now in Beta
Restore the Python variables and Spark session from a serverless compute job run into a new interactive notebook, so you can debug a failure or explore results without rerunning the job. Databricks automatically captures a state snapshot when an eligible run fails, runs 30 minutes or longer, or is cancelled, and keeps it for 7 days after the run completes.
Verkada connector (Beta)
The Verkada connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests organization audit logs and access users from your Verkada organization into Databricks. Authentication uses a Verkada organization API key. See Verkada connector .
Anysphere Audit Logs connector (Beta)
The Anysphere Audit Logs connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector uses the Anysphere (Cursor) Admin API to incrementally ingest team audit-log events into Databricks. Authentication uses a Cursor Admin API key. See Anysphere Audit Logs connector .
Zerobus Ingest into streaming tables is now generally available
Ingesting into streaming tables with Zerobus Ingest in Lakeflow Connect is now generally available. Writing to a streaming table works the same way as writing to a managed Delta table, with the same limits and quotas. See Create or identify the target table .
Workiva connector (Beta)
The Workiva connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests audit activity, users, and roles from your Workiva organization into Databricks. Authentication uses Workiva OAuth2 client credentials. See Workiva connector .
Lakeflow Designer August Release
The Lakeflow Designer August release adds the Unique operator, expands the Aggregate, Select, and Python operators, and improves the canvas, preview, and version-history experience.