From ce9a88709c27171a93252aceb81ca9304cabe9ef Mon Sep 17 00:00:00 2001
From: adela
Date: Wed, 24 Dec 2025 16:44:12 +0800
Subject: [PATCH 1/3] update changelog 3.13.0
---
docs/changelog/bytebase-3-13-0.mdx | 25 +++++++++++++------------
1 file changed, 13 insertions(+), 12 deletions(-)
diff --git a/docs/changelog/bytebase-3-13-0.mdx b/docs/changelog/bytebase-3-13-0.mdx
index 24c58aea..8afdd650 100644
--- a/docs/changelog/bytebase-3-13-0.mdx
+++ b/docs/changelog/bytebase-3-13-0.mdx
@@ -2,24 +2,25 @@
title: Bytebase 3.13.0 - Dec 18, 2025
author: Adela
updated_at: 2025/12/18 18:00:00
-description: 'Support MCP integration'
+description: 'Support MCP integration and simplified approval flow configuration'
---
import InstallUpgrade from '/snippets/install/install-upgrade.mdx';
## 🔔 Notable Changes
-- **Consolidate DDL and DML changes** so users no longer need to select them explicitly.
-- Update SQL review configuration for Terraform: (e.g. [sql_review.tf](https://github.com/bytebase/terraform-provider-bytebase/blob/main/examples/setup/sql_review.tf))
- - SQL review rules use typed payload fields (`number_payload`, `string_payload`, `string_array_payload`, `naming_payload`, etc.).
- - Generic payload and comment fields are removed.
- - Rule level enums from `SQLReviewRuleLevel_WARNING/ERROR` to `SQLReviewRule_WARNING/ERROR`.
+- **Consolidate DDL and DML changes** so users no longer need to select them explicitly when initiating New Plan or configuring approval flow.
- **Simplify approval workflows**:
- Approval flows are defined directly using CEL expressions, without intermediate risk definitions.
- - Risk evaluation uses system presets.
+ - Risk level is automatically evaluated using a standardized assessment framework.
- `risk.level` is an optional CEL factor for CHANGE_DATABASE approval flows.
- For Terraform, approval flows are defined via bytebase_setting (settings/WORKSPACE_APPROVAL) using approval_flow.rules.flow, and risk resources are removed.(e.g. [approval_flow.tf](https://github.com/bytebase/terraform-provider-bytebase/blob/main/examples/setup/approval_flow.tf))
-- Move rollout policy checkers (**Require issue approval**, **Plan check enforcement**) from environment to project.
+- Update SQL review configuration for Terraform: (e.g. [sql_review.tf](https://github.com/bytebase/terraform-provider-bytebase/blob/main/examples/setup/sql_review.tf))
+ - SQL review rules use typed payload fields (`number_payload`, `string_payload`, `string_array_payload`, `naming_payload`, etc.).
+ - Generic payload and comment fields are removed.
+ - Rule level enums migrate from `SQLReviewRuleLevel_WARNING/ERROR` to `SQLReviewRule_WARNING/ERROR`.
+- Move rollout policy checkers from environment to project level: **Require issue approval** and **Plan check enforcement**. Project settings are checked if any checker is previously used via automatic migration.
+- Migrate user identifiers: User references change from users/{id} to users/{email} in APIs and storage. Audit logs store user emails directly.
- Rename **Masking Exception** to **Masking Exemption**:
- APIs rename `MaskingException` to `MaskingExemption`.
- The action field is removed.
@@ -29,14 +30,14 @@ import InstallUpgrade from '/snippets/install/install-upgrade.mdx';
- Refine database group permissions:
- Roles with `bb.projects.get` gain `bb.databaseGroups.list/get`.
- Roles with `bb.projects.update` gain `bb.databaseGroups.create/update/delete`.
-- Migrate user identifiers: User references change from `users/{id}` to `users/{email}` in APIs and storage. Audit logs store user emails directly.
+ - For Terraform, please update the permissions of custom roles accordingly.
- Update batch task APIs: The `reason` field is removed from `BatchRunTasks` and `BatchCancelTaskRuns`. `reason` is supported only for skip operations.
-- Remove **SchemaTemplate** functionality.
+- Remove **Schema Template** functionality.
## 🚀 Features
-- Support **MCP integration** under Workspace Integration > MCP.
-- Add **Workload Identity** as a dedicated account type for OIDC-based authentication, with **GitHub Actions** support.
+- Support [MCP integration](/integrations/mcp).
+- Add **Workload Identity** as a dedicated account type for OIDC-based authentication, with [GitHub Actions support](/administration/user-groups/workload-identity/github-actions).
- Support direct messages for **Microsoft Teams**.
## 🎄 Enhancements
From 0ba2f7348fb3e24430e3797cd25150148090d803 Mon Sep 17 00:00:00 2001
From: Adela
Date: Wed, 24 Dec 2025 16:49:45 +0800
Subject: [PATCH 2/3] Update docs/changelog/bytebase-3-13-0.mdx
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
docs/changelog/bytebase-3-13-0.mdx | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/changelog/bytebase-3-13-0.mdx b/docs/changelog/bytebase-3-13-0.mdx
index 8afdd650..c5186fc9 100644
--- a/docs/changelog/bytebase-3-13-0.mdx
+++ b/docs/changelog/bytebase-3-13-0.mdx
@@ -20,7 +20,7 @@ import InstallUpgrade from '/snippets/install/install-upgrade.mdx';
- Generic payload and comment fields are removed.
- Rule level enums migrate from `SQLReviewRuleLevel_WARNING/ERROR` to `SQLReviewRule_WARNING/ERROR`.
- Move rollout policy checkers from environment to project level: **Require issue approval** and **Plan check enforcement**. Project settings are checked if any checker is previously used via automatic migration.
-- Migrate user identifiers: User references change from users/{id} to users/{email} in APIs and storage. Audit logs store user emails directly.
+- Migrate user identifiers: User references change from `users/{id}` to `users/{email}` in APIs and storage. Audit logs store user emails directly.
- Rename **Masking Exception** to **Masking Exemption**:
- APIs rename `MaskingException` to `MaskingExemption`.
- The action field is removed.
From a39cb9ec5d37cdc0c0f37dd99b285421b68afbfd Mon Sep 17 00:00:00 2001
From: adela
Date: Wed, 24 Dec 2025 16:58:49 +0800
Subject: [PATCH 3/3] update
---
docs/changelog/bytebase-3-13-0.mdx | 1 +
1 file changed, 1 insertion(+)
diff --git a/docs/changelog/bytebase-3-13-0.mdx b/docs/changelog/bytebase-3-13-0.mdx
index c5186fc9..7c6f80e0 100644
--- a/docs/changelog/bytebase-3-13-0.mdx
+++ b/docs/changelog/bytebase-3-13-0.mdx
@@ -14,6 +14,7 @@ import InstallUpgrade from '/snippets/install/install-upgrade.mdx';
- Approval flows are defined directly using CEL expressions, without intermediate risk definitions.
- Risk level is automatically evaluated using a standardized assessment framework.
- `risk.level` is an optional CEL factor for CHANGE_DATABASE approval flows.
+ - For non-Terraform, existing approval flows are automatically migrated.
- For Terraform, approval flows are defined via bytebase_setting (settings/WORKSPACE_APPROVAL) using approval_flow.rules.flow, and risk resources are removed.(e.g. [approval_flow.tf](https://github.com/bytebase/terraform-provider-bytebase/blob/main/examples/setup/approval_flow.tf))
- Update SQL review configuration for Terraform: (e.g. [sql_review.tf](https://github.com/bytebase/terraform-provider-bytebase/blob/main/examples/setup/sql_review.tf))
- SQL review rules use typed payload fields (`number_payload`, `string_payload`, `string_array_payload`, `naming_payload`, etc.).