Release databricks-sdk-java

.codegen/_last_sha

@@ -1 +1 @@
-3fe38876198dc0eb5355c51cc3b52a3182d5525f
+27d6278bf873fe656816e3fa5e329d8fb2a90e92

.github/workflows/sync-label.yml

@@ -7,27 +7,36 @@ name: Sync label
 
 on:
   pull_request:
-    types: [opened, reopened, synchronize, labeled, unlabeled]
+    types: [reopened, synchronize, labeled, unlabeled]
   # The label gate runs at PR level — a PR can't enter the merge queue
   # until this check passes there. Merge-group events carry no label
   # context, so on them the job passes trivially; without this trigger
   # a required sync-label check would stall every queue entry.
   merge_group:
     types: [checks_requested]
 
+permissions:
+  pull-requests: read
+
 jobs:
   sync-label:
     name: sync-label
     runs-on: ubuntu-latest
     steps:
-      - name: Merge queue — gate already applied at PR level
-        if: ${{ github.event_name == 'merge_group' }}
-        run: echo "merge group — sync label was enforced when the PR entered the queue."
       - name: Require the `sync` label
-        if: ${{ github.event_name == 'pull_request' && !contains(github.event.pull_request.labels.*.name, 'sync') }}
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
         run: |
-          echo "::error::This PR does not carry the 'sync' label. This repository is a read-only mirror — only release sync PRs merge here. If this IS a release sync PR, a maintainer must apply the 'sync' label; community contributions are re-applied in the internal repository instead (see CONTRIBUTING.md)."
-          exit 1
-      - name: Label present
-        if: ${{ github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'sync') }}
-        run: echo "sync label present — this is a release sync PR."
+          if [[ "$GITHUB_EVENT_NAME" == "merge_group" ]]; then
+            echo "merge group — sync label was enforced when the PR entered the queue."
+            exit 0
+          fi
+          # Event labels are snapshots; delayed runs and reruns must read current labels.
+          has_sync_label=$(gh api "repos/$GITHUB_REPOSITORY/pulls/$PR_NUMBER" --jq 'any(.labels[]; .name == "sync")')
+          if [[ "$has_sync_label" != "true" ]]; then
+            echo "::error::This PR does not carry the 'sync' label. This repository is a read-only mirror — only release sync PRs merge here. If this IS a release sync PR, a maintainer must apply the 'sync' label; community contributions are re-applied in the internal repository instead (see CONTRIBUTING.md)."
+            exit 1
+          fi
+          echo "sync label present — this is a release sync PR."

CHANGELOG.md

@@ -1,5 +1,18 @@
 # Version changelog
 
+## Release v0.167.0 (2026-10-14)
+
+### API Changes
+* Add `revealRolePassword()` method for `workspaceClient.postgres()` service.
+* Add `replicationConfig` field for `com.databricks.sdk.service.sharing.CreateShare`.
+* Add `replicationConfig` field for `com.databricks.sdk.service.sharing.ShareInfo`.
+* Add `REALTIME` enum value for `com.databricks.sdk.service.sql.CreateWarehouseRequestWarehouseType`.
+* Add `REALTIME` enum value for `com.databricks.sdk.service.sql.EditWarehouseRequestWarehouseType`.
+* Add `REALTIME` enum value for `com.databricks.sdk.service.sql.EndpointInfoWarehouseType`.
+* Add `REALTIME` enum value for `com.databricks.sdk.service.sql.GetWarehouseResponseWarehouseType`.
+* Add `REALTIME` enum value for `com.databricks.sdk.service.sql.WarehouseTypePairWarehouseType`.
+* [Breaking] Remove `effectiveServerlessComputeId` field for `com.databricks.sdk.service.jobs.RunTask`.
+
 ## Release v0.166.0 (2026-10-13)
 
 ### API Changes

databricks-sdk-java/lockfile.json

@@ -1,7 +1,7 @@
 {
   "artifactId": "databricks-sdk-java",
   "groupId": "com.databricks",
-  "version": "0.166.0",
+  "version": "0.167.0",
   "lockFileVersion": 1,
   "dependencies": [
     {

databricks-sdk-java/pom.xml

@@ -5,7 +5,7 @@
   <parent>
     <groupId>com.databricks</groupId>
     <artifactId>databricks-sdk-parent</artifactId>
-    <version>0.166.0</version>
+    <version>0.167.0</version>
   </parent>
   <artifactId>databricks-sdk-java</artifactId>
   <name>Databricks SDK for Java</name>

databricks-sdk-java/src/main/java/com/databricks/sdk/core/UserAgent.java

@@ -36,7 +36,7 @@ public String getValue() {
   // TODO: check if reading from
   // /META-INF/maven/com.databricks/databrics-sdk-java/pom.properties
   // or getClass().getPackage().getImplementationVersion() is enough.
-  private static final String version = "0.166.0";
+  private static final String version = "0.167.0";
 
   public static void withProduct(String product, String productVersion) {
     UserAgent.product = product;

databricks-sdk-java/src/main/java/com/databricks/sdk/service/postgres/RevealRolePasswordRequest.java

@@ -0,0 +1,45 @@
+// Code generated from OpenAPI specs by Databricks SDK Generator. DO NOT EDIT.
+
+package com.databricks.sdk.service.postgres;
+
+import com.databricks.sdk.support.Generated;
+import com.databricks.sdk.support.ToStringer;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import java.util.Objects;
+
+/** Request to reveal the current password for a password-authenticated Postgres role. */
+@Generated
+public class RevealRolePasswordRequest {
+  /**
+   * The full resource path of the role whose password should be revealed. Format:
+   * projects/{project_id}/branches/{branch_id}/roles/{role_id}
+   */
+  @JsonIgnore private String name;
+
+  public RevealRolePasswordRequest setName(String name) {
+    this.name = name;
+    return this;
+  }
+
+  public String getName() {
+    return name;
+  }
+
+  @Override
+  public boolean equals(Object o) {
+    if (this == o) return true;
+    if (o == null || getClass() != o.getClass()) return false;
+    RevealRolePasswordRequest that = (RevealRolePasswordRequest) o;
+    return Objects.equals(name, that.name);
+  }
+
+  @Override
+  public int hashCode() {
+    return Objects.hash(name);
+  }
+
+  @Override
+  public String toString() {
+    return new ToStringer(RevealRolePasswordRequest.class).add("name", name).toString();
+  }
+}

databricks-sdk-java/src/main/java/com/databricks/sdk/service/postgres/RevealRolePasswordResponse.java

@@ -0,0 +1,43 @@
+// Code generated from OpenAPI specs by Databricks SDK Generator. DO NOT EDIT.
+
+package com.databricks.sdk.service.postgres;
+
+import com.databricks.sdk.support.Generated;
+import com.databricks.sdk.support.ToStringer;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import java.util.Objects;
+
+/** Response containing the password for a password-authenticated Postgres role. */
+@Generated
+public class RevealRolePasswordResponse {
+  /** The current password for the Postgres role. */
+  @JsonProperty("password")
+  private String password;
+
+  public RevealRolePasswordResponse setPassword(String password) {
+    this.password = password;
+    return this;
+  }
+
+  public String getPassword() {
+    return password;
+  }
+
+  @Override
+  public boolean equals(Object o) {
+    if (this == o) return true;
+    if (o == null || getClass() != o.getClass()) return false;
+    RevealRolePasswordResponse that = (RevealRolePasswordResponse) o;
+    return Objects.equals(password, that.password);
+  }
+
+  @Override
+  public int hashCode() {
+    return Objects.hash(password);
+  }
+
+  @Override
+  public String toString() {
+    return new ToStringer(RevealRolePasswordResponse.class).add("password", password).toString();
+  }
+}