Added: Support for retrieving secrets from AWS Secrets Manager as a Run Secret. The worker count for a File Data Discovery run can now be specified in the UI when starting a Discovery run. The number of workers defaults to 1. mask_unique_key tasks that mask foreign keys will now cascade across schemas. The Continue On Failure option has been added to File Masking. If this option is enabled, and an error occurs when masking a file, DataMasque will log the error and continue to the next file. The run will have a failed status. Agent logs now contain the run ID and worker process ID, for easier filtering.

Changed: Support for generating rulesets for large schemas using the Ruleset Generator UI has been improved. During File or Database Data Discovery, if an error occurs when performing discovery on a table or file, the error is logged and discovery continues to the next table or file. Previously the discovery would fail. The 1,000 column display limit in the Ruleset Generator has been removed. Rulesets generated through the UI may contain only 1,000 columns at a time. If more columns need rules generated, the large ruleset generation API should be used. The Run Date column in the run logs screen has been renamed to Run Start Time. Ignored or custom keywords CSV uploads are now allowed to be either in a single column or single row, instead of just a single row. Docker Compose V2 is now required for Podman installations. Docker Compose V2 is recommended for Docker installations as well, but not required.

Fixed: Fixed HTTPS SSL certificate uploads being rejected by the DataMasque UI. Fixed issue where only the first connection clone would succeed, with subsequent clones failing for any connection. Removed link to Ruleset Editor and Ruleset Generator links for Mask Runner users, who do not have permission to access these pages. File data discovery runs started using the API now show their results in the UI (previously only runs started in the UI would show results in the UI). Fixed error handling in Connection form to display missing region validation for DynamoDB connections when a region is required. Fix for a case where downloadable Discovery Report for a Data Discovery would not reflect the most recent discovery until the page was refreshed. retain_date_component mask no longer fails when retaining days from the 29th-31st, if randomly selecting a month with fewer days. The disable_warning_on_use_of_conditionals setting now correctly disables all related conditional warnings. Fix masking of Parquet columns that are all null. Parquet integer types are retained after masking (for example, INT96 remains INT96 where previously it would be converted to INT64). The Ruleset Generator no longer generates imitate masks for Parquet columns whose sensitive data type cannot be determined. Instead, appropriate date, time or numeric masks are generated. Progress logging has been improved, to prevent crashes in cases where the admin-server container may restart. Fixed searching of File Data Discovery results, and switching back and forth from Show-Sensitive to Show All when there are no results. Improved documentation on required Oracle and PostgreSQL privileges. Documentation of incorrect csv_file in Ruleset Generator API documentation has been fixed. The correct csv_or_zip_file is now documented.