code · pull · Aug 16, 2026 · Aug 16, 2026 · Aug 16, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.7.20](https://github.com/cube-js/cube/compare/v1.7.19...v1.7.20) (2026-08-16)
+
+### Bug Fixes
+
+- **cubestore:** bump lru to 0.18.2 to clear two use-after-free advisories ([#11531](https://github.com/cube-js/cube/issues/11531)) ([387e1ad](https://github.com/cube-js/cube/commit/387e1ad644030401d12bafd01f991e06fd97f441))
+- **cubestore:** drop async-std to clear the crossbeam advisories ([#11546](https://github.com/cube-js/cube/issues/11546)) ([58f3cd7](https://github.com/cube-js/cube/commit/58f3cd7825a1a8c0fb2d031ee021ce01173584e5))
+- **deps:** bump uuid from 8.3.2 to 11.1.1 across the packages that declare it ([#11534](https://github.com/cube-js/cube/issues/11534)) ([c66cbbe](https://github.com/cube-js/cube/commit/c66cbbe06c0269351395583cef8df64c0d1720ab))
+- **deps:** float handlebars, form-data and tar to clear two criticals ([#11549](https://github.com/cube-js/cube/issues/11549)) ([33c8828](https://github.com/cube-js/cube/commit/33c88288728ba29244ecc950107bb5f9d16d6bde)), closes [#7891](https://github.com/cube-js/cube/issues/7891) [#7589](https://github.com/cube-js/cube/issues/7589) [#11109](https://github.com/cube-js/cube/issues/11109) [#7589](https://github.com/cube-js/cube/issues/7589) [#8252](https://github.com/cube-js/cube/issues/8252)
+- **schema-compiler:** escape LIKE wildcards on the native planner ([#11569](https://github.com/cube-js/cube/issues/11569)) ([f050c08](https://github.com/cube-js/cube/commit/f050c080aab52eefbd7c20fef257f3852c66f634)), closes [#11570](https://github.com/cube-js/cube/issues/11570)
+- **shared,templates:** replace the unmaintained decompress package ([#11532](https://github.com/cube-js/cube/issues/11532)) ([f7822ca](https://github.com/cube-js/cube/commit/f7822cac0d4b16d8ee197e793192f5068cb8895a))
+- **tesseract:** project a primary key once in the keys subquery ([#11527](https://github.com/cube-js/cube/issues/11527)) ([528d755](https://github.com/cube-js/cube/commit/528d755d8ef4502917d86b545bf42b8a352775be)), closes [#11455](https://github.com/cube-js/cube/issues/11455)
+
 ## [1.7.19](https://github.com/cube-js/cube/compare/v1.7.18...v1.7.19) (2026-08-12)
 
 ### Bug Fixes

diff --git a/docs-mintlify/admin/deployment/environments.mdx b/docs-mintlify/admin/deployment/environments.mdx
@@ -52,6 +52,14 @@ regardless of user activity.
   <img src="https://ucarecdn.com/e0dcce34-a53a-4087-b021-25dbaf730a92/" />
 </Frame>
 
+The same toggle is available in the [CLI][ref-cli] and the [Control Plane
+API][ref-control-plane-api-staging], so it can be scripted, e.g. from CI:
+
+```bash
+cube data-model enable-branch DEPLOYMENT_ID BRANCH_NAME
+cube data-model disable-branch DEPLOYMENT_ID BRANCH_NAME
+```
+
 ### Resources and costs
 
 Staging environments run on Shared deployments, incurring [relevant
@@ -115,4 +123,6 @@ credentials**][ref-credentials].
 [ref-overview]: /admin/connect-to-data/visualization-tools
 [ref-credentials]: /admin/connect-to-data/visualization-tools
 [ref-version]: /admin/deployment#cube-version
-[ref-version-channel]: /admin/deployment#update-channels
+[ref-version-channel]: /admin/deployment#update-channels
+[ref-cli]: /reference/cli
+[ref-control-plane-api-staging]: /reference/control-plane-api#buildapiv1deploymentsdeployment_idbranchesstaging-environment
diff --git a/docs-mintlify/reference/cli.mdx b/docs-mintlify/reference/cli.mdx
@@ -151,7 +151,7 @@ Run `cube <command> --help` for the full options of any command.
 | `logs` | Tail deployment pod logs (`--pod`, `-c/--container`, `--source production\|dev`) |
 | `regions` | List available deployment regions |
 | `github` (`gh`) | GitHub integration: `status`, `installations`, `repos`, `branches`, `connect` |
-| `data-model` | Data model files and Git workflow: `list`, `get`, `put`, `delete`, `rename`, `file-hashes`, `branches`, `create-branch`, `dev-mode`, `commit`, `pull`, `merge`, `merge-to-default` |
+| `data-model` | Data model files and Git workflow: `list`, `get`, `put`, `delete`, `rename`, `file-hashes`, `branches`, `create-branch`, `enable-branch`/`disable-branch`, `dev-mode`, `commit`, `pull`, `merge`, `merge-to-default` |
 | `environments` | Deployment environments and environment tokens |
 | `variables` | Deployment environment variables |
 | `folders`, `workbooks`, `reports`, `workspace` | Workspace content management |
@@ -188,6 +188,19 @@ targeting any other branch are rejected by the API.
 
 </Info>
 
+`enable-branch` keeps a shared branch's [staging environment][ref-staging-env]
+always active, so it stays queryable without anyone viewing the branch in the
+UI — useful for running tests against a branch from CI. `disable-branch` reverts
+to the default, where the environment is only active while viewed.
+`cube data-model branches DEPLOYMENT_ID` shows the current state per branch, and
+`cube environments list DEPLOYMENT_ID --type staging` lists the enabled ones with
+their API credentials.
+
+```bash
+cube data-model enable-branch DEPLOYMENT_ID my-branch
+cube data-model disable-branch DEPLOYMENT_ID my-branch
+```
+
 ## Environment variables
 
 | Variable | Description |
@@ -210,3 +223,4 @@ or explicitly with `CUBE_NO_TELEMETRY=1` (or the legacy `CUBEJS_TELEMETRY=false`
 
 [ref-api-keys]: /admin/account-billing/api-keys
 [ref-rest-api]: /reference/core-data-apis/rest-api/index
+[ref-staging-env]: /admin/deployment/environments#staging-environments
diff --git a/docs-mintlify/reference/control-plane-api.mdx b/docs-mintlify/reference/control-plane-api.mdx
@@ -212,6 +212,67 @@ Example response:
 ```
 
 
+### `/build/api/v1/deployments/{deployment_id}/branches/staging-environment`
+
+Send a `PUT` request to enable or disable a branch, i.e. to control whether its
+[staging environment][ref-environments-staging] stays always active. Disabled
+(the default), a staging environment is only active while the branch is viewed
+in the Cube UI; enabled, it remains active and accessible regardless of user
+activity, and it is reported by
+[`/api/v1/deployments/{deployment_id}/environments`](#apiv1deploymentsdeployment_idenvironments)
+as a `staging` environment.
+
+Only shared branches can be enabled — personal development branches and the
+production branch are rejected.
+
+<Info>
+
+Note the `/build` prefix: data model and branch endpoints are served by the
+build API.
+
+</Info>
+
+Path parameters:
+
+| Parameter | Description |
+| --- | --- |
+| `deployment_id` | The deployment ID |
+
+Body parameters:
+
+| Parameter | Description | Required |
+| --- | --- | --- |
+| `enabled` | `true` enables the branch, `false` disables it | Yes |
+| `branchName` | Name of the branch to update | One of `branchName` or `branchId` |
+| `branchId` | ID of the branch to update, as returned by `GET /build/api/v1/deployments/{deployment_id}/branches` | One of `branchName` or `branchId` |
+
+Example request:
+
+```bash
+curl -X PUT \
+  -H "Authorization: Bearer YOUR_API_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{"branchName": "staging", "enabled": true}' \
+  "https://YOUR_CUBE_CLOUD_HOST/build/api/v1/deployments/123/branches/staging-environment"
+```
+
+Example response:
+
+```json
+{
+  "data": {
+    "id": 456,
+    "name": "staging",
+    "parentBranch": "main",
+    "lastHash": "9f2c1ab",
+    "isStagingEnvironmentEnabled": true
+  }
+}
+```
+
+The same operation is available in the [CLI][ref-cli] as
+`cube data-model enable-branch` / `cube data-model disable-branch`.
+
 ### `/api/v1/audit-logs/export`
 
 Send a `GET` request to export [audit log][ref-audit-log] events as a CSV
@@ -262,6 +323,8 @@ curl \
 [ref-metadata-api]: /reference/core-data-apis/rest-api/reference#metadata-api
 [ref-deployments]: /admin/deployment
 [ref-environments]: /admin/deployment/environments
+[ref-environments-staging]: /admin/deployment/environments#staging-environments
+[ref-cli]: /reference/cli
 [ref-api-keys]: /admin/account-billing/api-keys
 [ref-security-context]: /docs/data-modeling/access-control/context
 [ref-audit-log]: /admin/monitoring/audit-log
diff --git a/lerna.json b/lerna.json
@@ -1,5 +1,5 @@
 {
-  "version": "1.7.19",
+  "version": "1.7.20",
   "npmClient": "yarn",
   "command": {
     "bootstrap": {

diff --git a/packages/cubejs-api-gateway/CHANGELOG.md b/packages/cubejs-api-gateway/CHANGELOG.md
@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.7.20](https://github.com/cube-js/cube/compare/v1.7.19...v1.7.20) (2026-08-16)
+
+### Bug Fixes
+
+- **deps:** bump uuid from 8.3.2 to 11.1.1 across the packages that declare it ([#11534](https://github.com/cube-js/cube/issues/11534)) ([c66cbbe](https://github.com/cube-js/cube/commit/c66cbbe06c0269351395583cef8df64c0d1720ab))
+
 ## [1.7.19](https://github.com/cube-js/cube/compare/v1.7.18...v1.7.19) (2026-08-12)
 
 **Note:** Version bump only for package @cubejs-backend/api-gateway

diff --git a/packages/cubejs-api-gateway/package.json b/packages/cubejs-api-gateway/package.json
@@ -2,7 +2,7 @@
   "name": "@cubejs-backend/api-gateway",
   "description": "Cube API Gateway",
   "author": "Cube Dev, Inc.",
-  "version": "1.7.19",
+  "version": "1.7.20",
   "repository": {
     "type": "git",
     "url": "https://github.com/cube-js/cube.git",
@@ -27,9 +27,9 @@
     "dist/src/*"
   ],
   "dependencies": {
-    "@cubejs-backend/native": "1.7.19",
-    "@cubejs-backend/query-orchestrator": "1.7.19",
-    "@cubejs-backend/shared": "1.7.19",
+    "@cubejs-backend/native": "1.7.20",
+    "@cubejs-backend/query-orchestrator": "1.7.20",
+    "@cubejs-backend/shared": "1.7.20",
     "@ungap/structured-clone": "^0.3.4",
     "assert-never": "^1.4.0",
     "body-parser": "^1.19.0",
@@ -53,7 +53,7 @@
     "zod": "^4.1.13"
   },
   "devDependencies": {
-    "@cubejs-backend/linter": "1.7.19",
+    "@cubejs-backend/linter": "1.7.20",
     "@types/express": "^4.17.21",
     "@types/jest": "^29",
     "@types/jsonwebtoken": "^9.0.2",

diff --git a/packages/cubejs-athena-driver/CHANGELOG.md b/packages/cubejs-athena-driver/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.7.20](https://github.com/cube-js/cube/compare/v1.7.19...v1.7.20) (2026-08-16)
+
+**Note:** Version bump only for package @cubejs-backend/athena-driver
+
 ## [1.7.19](https://github.com/cube-js/cube/compare/v1.7.18...v1.7.19) (2026-08-12)
 
 **Note:** Version bump only for package @cubejs-backend/athena-driver

diff --git a/packages/cubejs-athena-driver/package.json b/packages/cubejs-athena-driver/package.json
@@ -2,7 +2,7 @@
   "name": "@cubejs-backend/athena-driver",
   "description": "Cube.js Athena database driver",
   "author": "Cube Dev, Inc.",
-  "version": "1.7.19",
+  "version": "1.7.20",
   "repository": {
     "type": "git",
     "url": "https://github.com/cube-js/cube.git",
@@ -31,12 +31,12 @@
   "dependencies": {
     "@aws-sdk/client-athena": "^3.22.0",
     "@aws-sdk/credential-providers": "^3.22.0",
-    "@cubejs-backend/base-driver": "1.7.19",
-    "@cubejs-backend/shared": "1.7.19"
+    "@cubejs-backend/base-driver": "1.7.20",
+    "@cubejs-backend/shared": "1.7.20"
   },
   "devDependencies": {
-    "@cubejs-backend/linter": "1.7.19",
-    "@cubejs-backend/testing-shared": "1.7.19",
+    "@cubejs-backend/linter": "1.7.20",
+    "@cubejs-backend/testing-shared": "1.7.20",
     "@types/ramda": "^0.27.40",
     "typescript": "~5.2.2"
   },

diff --git a/packages/cubejs-backend-cloud/CHANGELOG.md b/packages/cubejs-backend-cloud/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.7.20](https://github.com/cube-js/cube/compare/v1.7.19...v1.7.20) (2026-08-16)
+
+**Note:** Version bump only for package @cubejs-backend/cloud
+
 ## [1.7.19](https://github.com/cube-js/cube/compare/v1.7.18...v1.7.19) (2026-08-12)
 
 **Note:** Version bump only for package @cubejs-backend/cloud

diff --git a/packages/cubejs-backend-cloud/package.json b/packages/cubejs-backend-cloud/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cubejs-backend/cloud",
-  "version": "1.7.19",
+  "version": "1.7.20",
   "description": "Cube Cloud package",
   "main": "dist/src/index.js",
   "typings": "dist/src/index.d.ts",
@@ -30,15 +30,15 @@
   "devDependencies": {
     "@babel/core": "^7.24.5",
     "@babel/preset-env": "^7.24.5",
-    "@cubejs-backend/linter": "1.7.19",
+    "@cubejs-backend/linter": "1.7.20",
     "@types/fs-extra": "^9.0.8",
     "@types/jest": "^29",
     "jest": "^29",
     "typescript": "~5.2.2"
   },
   "dependencies": {
     "@cubejs-backend/dotenv": "^9.0.2",
-    "@cubejs-backend/shared": "1.7.19",
+    "@cubejs-backend/shared": "1.7.20",
     "chokidar": "^3.5.1",
     "env-var": "^6.3.0",
     "form-data": "^4.0.0",

diff --git a/packages/cubejs-backend-maven/CHANGELOG.md b/packages/cubejs-backend-maven/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.7.20](https://github.com/cube-js/cube/compare/v1.7.19...v1.7.20) (2026-08-16)
+
+**Note:** Version bump only for package @cubejs-backend/maven
+
 ## [1.7.19](https://github.com/cube-js/cube/compare/v1.7.18...v1.7.19) (2026-08-12)
 
 **Note:** Version bump only for package @cubejs-backend/maven

diff --git a/packages/cubejs-backend-maven/package.json b/packages/cubejs-backend-maven/package.json
@@ -2,7 +2,7 @@
   "name": "@cubejs-backend/maven",
   "description": "Cube.js Maven Wrapper for java dependencies downloading",
   "author": "Cube Dev, Inc.",
-  "version": "1.7.19",
+  "version": "1.7.20",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -31,12 +31,12 @@
     "dist/src/*"
   ],
   "dependencies": {
-    "@cubejs-backend/shared": "1.7.19",
+    "@cubejs-backend/shared": "1.7.20",
     "source-map-support": "^0.5.19",
     "xmlbuilder2": "^2.4.0"
   },
   "devDependencies": {
-    "@cubejs-backend/linter": "1.7.19",
+    "@cubejs-backend/linter": "1.7.20",
     "@types/jest": "^29",
     "@types/node": "^22",
     "jest": "^29",

diff --git a/packages/cubejs-backend-native/CHANGELOG.md b/packages/cubejs-backend-native/CHANGELOG.md
@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.7.20](https://github.com/cube-js/cube/compare/v1.7.19...v1.7.20) (2026-08-16)
+
+### Bug Fixes
+
+- **deps:** bump uuid from 8.3.2 to 11.1.1 across the packages that declare it ([#11534](https://github.com/cube-js/cube/issues/11534)) ([c66cbbe](https://github.com/cube-js/cube/commit/c66cbbe06c0269351395583cef8df64c0d1720ab))
+
 ## [1.7.19](https://github.com/cube-js/cube/compare/v1.7.18...v1.7.19) (2026-08-12)
 
 **Note:** Version bump only for package @cubejs-backend/native

diff --git a/packages/cubejs-backend-native/package.json b/packages/cubejs-backend-native/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cubejs-backend/native",
-  "version": "1.7.19",
+  "version": "1.7.20",
   "author": "Cube Dev, Inc.",
   "description": "Native module for Cube.js (binding to Rust codebase)",
   "main": "dist/js/index.js",
@@ -39,7 +39,7 @@
     "dist/js"
   ],
   "devDependencies": {
-    "@cubejs-backend/linter": "1.7.19",
+    "@cubejs-backend/linter": "1.7.20",
     "@types/jest": "^29",
     "@types/node": "^22",
     "cargo-cp-artifact": "^0.1.9",
@@ -50,8 +50,8 @@
     "uuid": "^11.1.1"
   },
   "dependencies": {
-    "@cubejs-backend/cubesql": "1.7.19",
-    "@cubejs-backend/shared": "1.7.19",
+    "@cubejs-backend/cubesql": "1.7.20",
+    "@cubejs-backend/shared": "1.7.20",
     "@cubejs-infra/post-installer": "^0.0.7"
   },
   "resources": {

diff --git a/packages/cubejs-backend-shared/CHANGELOG.md b/packages/cubejs-backend-shared/CHANGELOG.md
@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.7.20](https://github.com/cube-js/cube/compare/v1.7.19...v1.7.20) (2026-08-16)
+
+### Bug Fixes
+
+- **deps:** bump uuid from 8.3.2 to 11.1.1 across the packages that declare it ([#11534](https://github.com/cube-js/cube/issues/11534)) ([c66cbbe](https://github.com/cube-js/cube/commit/c66cbbe06c0269351395583cef8df64c0d1720ab))
+- **shared,templates:** replace the unmaintained decompress package ([#11532](https://github.com/cube-js/cube/issues/11532)) ([f7822ca](https://github.com/cube-js/cube/commit/f7822cac0d4b16d8ee197e793192f5068cb8895a))
+
 ## [1.7.19](https://github.com/cube-js/cube/compare/v1.7.18...v1.7.19) (2026-08-12)
 
 **Note:** Version bump only for package @cubejs-backend/shared

diff --git a/packages/cubejs-backend-shared/package.json b/packages/cubejs-backend-shared/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cubejs-backend/shared",
-  "version": "1.7.19",
+  "version": "1.7.20",
   "description": "Shared code for Cube.js backend packages",
   "main": "dist/src/index.js",
   "typings": "dist/src/index.d.ts",
@@ -27,7 +27,7 @@
   },
   "license": "Apache-2.0",
   "devDependencies": {
-    "@cubejs-backend/linter": "1.7.19",
+    "@cubejs-backend/linter": "1.7.20",
     "@types/bytes": "^3.1.5",
     "@types/cli-progress": "^3.9.1",
     "@types/jest": "^29",

diff --git a/packages/cubejs-base-driver/CHANGELOG.md b/packages/cubejs-base-driver/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.7.20](https://github.com/cube-js/cube/compare/v1.7.19...v1.7.20) (2026-08-16)
+
+**Note:** Version bump only for package @cubejs-backend/base-driver
+
 ## [1.7.19](https://github.com/cube-js/cube/compare/v1.7.18...v1.7.19) (2026-08-12)
 
 **Note:** Version bump only for package @cubejs-backend/base-driver