chore(deps): bump openmetadata-ingestion from 2.0.0.0rc1 to 2.0.0.0rc2 in /ingestion-automation in the ingestion-automation-python group

[dependabot]

Bumps the ingestion-automation-python group in /ingestion-automation with 1 update: openmetadata-ingestion.

Updates openmetadata-ingestion from 2.0.0.0rc1 to 2.0.0.0rc2

Release notes

Sourced from openmetadata-ingestion's releases.

2.0.0-rc2-release

This is a Release Candidate for the upcoming 2.0.0 release and there will be changes until the final release is published.

DO NOT use this in PROD. Please, only use it in DEV/TEST environments to provide any feedback or migration issues you encounter.

1.13.3-release

Changelog

OpenMetadata 1.13.3 is a maintenance release delivering data contract and governance workflow fixes, alert delivery fixes, a Snowflake foreign-key reflection fix, and UI fixes.

🔌 Connectors & Ingestion

• Snowflake: foreign-key collisions across tables sharing a constraint name #30473: Foreign-key reflection is now keyed on (fk_name, table_name), so cloned tables that reuse a constraint name no longer merge into a single constraint referencing another table's columns and getting rejected with 400 Invalid column name.

🛡️ Data Governance & Quality

• Data contracts stuck at Running after a Data Quality pipeline completes #30531: The testSuite → dataContract reverse relationship is now persisted on contract create/update, so contract status resolves when the pipeline finishes instead of sitting at Running indefinitely. Regression from 1.13.0.
• Sanitize poisoned governance trigger filters 5963637b: Event-based workflow trigger filters stored as an empty or placeholder value ("", {}) are now ignored instead of rejecting every event, and a 1.13.3 migration repairs affected workflowDefinitions rows in place.
• Hide soft-deleted owners on the Test Suite detail page #30520: Editing owners on a logical Test Suite no longer fails with array item index is out of range; TestSuiteResource.getByName now honours includeRelations, matching every other detail page.
• Intake form formFields support #30614: Added a formFields array with a per-field required flag to the IntakeForm schema, along with a migration that backfills it from the legacy requiredFields. Backend only in this release.

⚙️ Platform

• Skip notification recipients without contact information #30518: A team or user with no email address or webhook no longer discards every other recipient of the same alert; recipients are now resolved individually, matching the webhook path.

🎛️ UI

• Tag and Glossary dropdowns not selectable in the Column Bulk Operations edit drawer #30634: The tag and glossary dropdowns now render inside the edit drawer, so options can be selected instead of having clicks swallowed by the drawer's focus containment.

2.0.0-rc1-release

This is a Release Candidate for the upcoming 2.0.0 release and there will be changes until the final release is published.

DO NOT use this in PROD. Please, only use it in DEV/TEST environments to provide any feedback or migration issues you encounter.

1.13.2-release

Changelog

OpenMetadata 1.13.2 is a maintenance release delivering MCP tool enhancements, search and reindexing reliability fixes, security patches, connector improvements, data governance and quality updates, lineage fixes, and UI enhancements.

🔒 Security

• Jackson, Logback, Postgres & Calcite dependency pins #30396: Aligned Jackson, Logback, Postgres, and Calcite dependency pins with main to clear Inspector high findings.
• Log4j CVE-2026-49844 #30311: Bumped log4j from 2.25.4 to 2.25.5 to patch CVE-2026-49844.
• Trivy ingestion image CVEs #30516: Resolved Trivy-flagged CVEs by upgrading Airflow to 3.2.2, updating Spark Hive jars, and patching perl/nss packages.
• Trim vulnerable apt packages from ingestion Docker images #30024 #30454: Removed CVE-flagged apt packages from ingestion Docker base images and hardened apt-get security.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions