10.0.0 - 2026-06-23¶

Summary¶

In this major release, several modifications were made to the PTB’s workflow templates and actions:

the default DB-version was updated to come from BaseConfig instead of the hardcoded 7.1.9, so ITDE-related test flows use the configured Exasol baseline and unit-test help no longer advertises --db-version.
the github_template_dict.custom_workflows entry now auto-detects secret names from custom workflow files and passes them into PTB-controlled workflow templates. For example:
```
on:
  workflow_call:
    secrets:
      PYPI_TOKEN:
        required: true
      SONAR_TOKEN:
        required: true
```
the Python environment GitHub action now accepts extras as a comma-separated list, which makes it easier to pass multiple optional dependency groups in one value. Additionally, it supports all-extras, so that all extras are installed without further specification needed.
the new workflow:audit Nox session runs zizmor against GitHub Actions and reusable workflows, so security checks are part of the normal checks.yml pipeline instead of being a separate manual step. It also keeps the audit configuration in the project root via .zizmor.yml; see the zizmor configuration guide and the troubleshooting guide for findings for details on tuning or suppressing findings locally.

This release fixes vulnerabilities by updating dependencies:

Dependency	Vulnerability	Affected	Fixed in
cryptography	GHSA-537c-gmf6-5ccf	48.0.0	48.0.1
msgpack	GHSA-6v7p-g79w-8964	1.1.2	1.2.1

#874: Added the security label to dependency update PR creation
#699: Added all-extras support to the Python environment GitHub action
#875: Added name attribute to generated workflow jobs using -extension.yml workflows

#744: Updated nox DB-version handling to use BaseConfig.minimum_exasol_version instead hardcoded 7.1.9

#878: Added Nox session workflow:audit which uses zizmor and added it in checks.yml
#872: Added custom_workflows to github_template_dict for automatic custom workflow secret extraction

#744: Extracted shared minimum-version selection logic into minimum_declared_version()
#699: Switched extras in the Python environment GitHub action to comma-separation

#828: Removed the legacy migration page and merged the useful guidance into getting started
#789: Consolidated the metrics and Sonar documentation to reflect the current PTB reporting flow