Databricks Release Notes

Secrets in Unity Catalog will be available by default for workspaces with the compliance security profile enabled in late September 2026.

Store, govern, and access secrets as securable objects in Unity Catalog. A Unity Catalog secret uses the three-level namespace (catalog.schema.secret) and is governed by Unity Catalog privileges, so you can apply the same access controls and auditing that you use for other data assets.

See Secrets in Unity Catalog.

Databricks SQL version 2026.32 is rolling out to the Current channel. See features in 2026.32.

Lakebase updated its supported Postgres versions to 16.15, 17.11, and 18.6. These minor releases bring you the latest upstream Postgres fixes and security patches. When a new minor version is available, Lakebase applies it the next time your compute restarts. See Manage updates.

A new Genie entry in the Lakebase project sidebar opens Genie Code, the agentic Databricks assistant, scoped to your Lakebase project. Ask it in natural language to run multi-step data and AI tasks: explore your databases and tables, investigate and debug issues, and create and populate tables. It's the same Genie Code you use elsewhere in Databricks, here working on your Lakebase project, and it's now available for all Lakebase projects. See Genie Code.

Genie Code in the Lakebase project UI, opened from the Genie entry in the project sidebar, showing example prompts such as "Tell me about my Lakebase project" and "Create a table and insert data".

Govern Provisioned Throughput (PT) traffic through Unity Gateway, bringing PT models under the same access controls, usage tracking, rate limits, payload logging, and guardrails as other model traffic.

See AI governance with Unity Gateway.

The Verkada connector is now available in Lakeflow Connect in Beta. Workspace admins can control access to this feature from the Previews page.

The connector ingests organization audit logs and access users from your Verkada organization into Databricks. Authentication uses a Verkada organization API key.

See Verkada connector.

Private network gateway is in Private Preview. A private network gateway connects Databricks serverless compute to resources in your VPC, on-premises systems, and the internet through a single managed gateway, reusing your existing network connectivity configuration (NCC). Use it for broad private connectivity without onboarding each resource individually, to route serverless egress through your own security appliances for content inspection, or to send egress from a stable set of IP addresses. See Private network gateway.

When you sign in to the Databricks Genie app in Microsoft Teams, you can now enter your workspace URL instead of a server hostname to connect to your Databricks account. See Databricks Genie app in Microsoft Teams.

The INSERT, UPDATE, and DELETE privileges are in Beta in Unity Catalog. These privileges are least-privilege alternatives to MODIFY that let you grant write access to a table's data without also granting the ability to change its schema or other metadata.

The privileges require Databricks Runtime 18.1 or above.

For details, see Fine-grained DML privileges.

The Supervisor API (Beta) reaches end of life on September 30, 2026. After that date, the API is no longer available.

Databricks recommends migrating to custom agents on Databricks Apps.

See Supervisor API (deprecated).

The unified trace table is in Beta. It captures every request and response across your Unity Gateway services into one Unity Catalog table in OpenTelemetry format, giving you a single place to monitor, debug, secure, and audit all AI activity.

See Monitor all AI activity using the unified trace table.

Configuring default Python package repositories is now generally available for Lakeflow pipelines and for classic compute created via the UI and API. Workspace admins can set private or authenticated registries as the workspace default for these workloads. See Configure default package repositories.

Mutual TLS (mTLS) authentication for the Salesforce connector in Lakeflow Connect is now generally available. With mTLS, Databricks and Salesforce exchange and verify client certificates to establish two-way trust, combined with the OAuth client credentials flow. Choose it for API-only users or when your organization requires mTLS. See Mutual TLS (mTLS) authentication.

The Databricks Connector for Google Sheets now lets you write data from Google Sheets back to a Unity Catalog table. You can create a new table or overwrite an existing table without leaving Google Sheets. See Write data back to Databricks from Google Sheets.

Role-based access control (RBAC) will be available by default for workspaces with the compliance security profile enabled in mid-September 2026.

RBAC lets users assume a role in Databricks. When a user assumes a role, only that role's permissions apply, rather than the user's accumulated permissions. This enables exclusive access. Users must actively assume a role to access sensitive data, preventing them from accessing it under their own identity and from mixing data across use cases, clinical trials, projects, or clients.

See Role-based access control (RBAC).

Role-based access control (RBAC) is now generally available. RBAC lets users assume a role in Databricks. When a user assumes a role, only that role's permissions apply, rather than the user's accumulated permissions. This enables exclusive access. Users must actively assume a role to access sensitive data, preventing them from accessing it under their own identity and from mixing data across use cases, clinical trials, projects, or clients.

To enable RBAC, an account admin must turn on the feature at the account level. Workspace admins then enable it in each workspace.

See Role-based access control (RBAC).