What's Changed

Fixed

• fix(monitors): drop notify_by=["*"] when query has no by-group clause by @riyazsh in #625
• fix(downtime_schedules): rewrite past end on create path by @riyazsh in #626
• fix(sensitive_data_scanner_rules): align name with linked standard pattern on write by @riyazsh in #627
• fix(downtime_schedules): request include=created_by on source fetches by @riyazsh in #628
• fix(metrics_metadata): skip distribution-typed metrics in update path by @riyazsh in #633

Added

• feat: --drop-unresolvable-principals flag + drop-aware connection scaffolding (1/4) by @michael-richey in #629

Full Changelog: 4.12.0...4.13.0

What's Changed

Fixed

• fix(roles): surface source ids on sync failure + paginated-list truncation by @riyazsh in #614
• Port restriction_policy remap to synthetics_tests by @riyazsh in #616
• Filter metrics_metadata by destination-existence by @riyazsh in #617
• fix(monitors): apply schema migrations for custom_schedule and warning_recovery by @riyazsh in #619
• fix(dashboards): clone on read-only PUT conflict; skip unmodified suggested presets by @riyazsh in #621

Added

• feat(sync): --refresh-destination-state-before-apply flag by @riyazsh in #618
• feat(sync): per-resource-type worker cap via --max-workers-per-type by @riyazsh in #623

Changed

• Scope current_user lookup to policy-carrying resources by @riyazsh in #622

Full Changelog: 4.11.0...4.12.0

What's Changed

Added

• feat(http): support HTTP proxy via --http-client-trust-env (HAMR-393) by @nathantournant in #615

Full Changelog: 4.10.0...4.11.0

What's Changed

Fixed

• fix(logs_pipelines): skip update on read-only integration pipelines by @riyazsh in #604
• fix(metric_percentiles): use PATCH percentiles/{enable,disable} endpoints by @riyazsh in #602
• fix(sorter): skip transitive dep-only nodes not in --resources by @riyazsh in #610

Added

• [HAMR-392] feat(monitors): per-type concurrency cap, overload backoff, error logging by @riyazsh in #603

Changed

• feat(sync): add --force-missing-dependencies to import command by @michael-richey in #550

Full Changelog: 4.9.0...4.10.0

What's Changed

Fixed

• fix(http): apply per-read socket timeout to bound body-stall hangs by @nathantournant in #590
• Add support for Synthetics Private Locations for DDR in dd-sync-cli by @melkouri in #526

Added

• feat(id-file): enable authn_mappings + team_memberships by @michael-richey in #594

Full Changelog: 4.8.1...4.9.0

What's Changed

Added

• feat(sync_report): emit failure_class on ResourceOutcome for HTTP errors by @nathantournant in #587

Full Changelog: 4.8.0...4.8.1

What's Changed

Fixed

• fix(notebooks): surface exception type on empty-message failures by @nathantournant in #581
• fix(host_tags): skip 404 "Host doesn't exist" instead of failing the resource by @nathantournant in #582

Full Changelog: 4.7.0...4.8.0

What's Changed

Added

• feat: add --destination-logs-intake-url flag by @michael-richey in #579

Full Changelog: 4.6.0...4.7.0

What's Changed

Fixed

• fix(roles): reconcile source state when destination silently drops permissions by @nathantournant in #572
• Make TaggingConfig.add_default_tags idempotent by @nathantournant in #571

Full Changelog: 4.5.0...4.6.0

What's Changed

Added

• fix(sync): log ResourceConnectionError at ERROR with missing-connections detail by @michael-richey in #565

Changed

• feat(notebooks): lightweight LIST + per-id GET by @riyazsh in #567

Full Changelog: 4.4.0...4.5.0