ydb/yt, branch oidc-1.2.2

YT: Allow serializing TCompactSet

2025-07-10T19:56:45Z

commit_hash:733610a293a0c3a2656dbef77630d359c16d3bdf

Intermediate changes

2025-07-10T17:44:49Z

commit_hash:d711f24fe0934dc2a089b6993f506a210ab55a51

YT: Support std::string in yson struct schema

2025-07-10T16:52:04Z

commit_hash:745dceac20d37dfe49e7fd69650c1d4b5779f5b3

YT-15805: Add Tz types to arrow parser

2025-07-10T13:06:04Z

* Changelog entry Type: feature Component: proxy Support tz types in arrow parser. commit_hash:4bc9c3bb135db4b30576a3a94ca24b21d17f9e2d

Intermediate changes

2025-07-10T12:43:27Z

commit_hash:8a7fc218f76bbb66d7129f5450b1e9daab37bc8e

YT-24840: Move EJobStderrType to client/api

2025-07-10T12:09:52Z

commit_hash:9b8fd0952d7d3e283fcc02ed3e9eb8b6e09607d7

yt/core/https: verify server certificate

2025-07-10T06:08:01Z

- **yt/yt/core/test_framework: update and refactor test keys** Present certificate are expired: Issuer: C = CN, ST = Some-State, O = Internet Widgits Pty Ltd Validity Not Before: Nov 1 06:59:16 2014 GMT Not After : Oct 29 06:59:16 2024 GMT Subject: C = CN, ST = Some-State, O = Internet Widgits Pty Ltd Issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 Validity Not Before: Feb 12 19:27:22 2018 GMT Not After : May 13 19:27:22 2018 GMT Subject: CN = cpp.manytask.org Issuer: O = Digital Signature Trust Co., CN = DST Root CA X3 Validity Not Before: Mar 17 16:40:46 2016 GMT Not After : Mar 17 16:40:46 2021 GMT Subject: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 Reuse test certificate from yt/yt/core/bus for "localhost". Issuer: C = RU, ST = Moscow, O = Yandex, CN = CA@localhost Validity Not Before: Jul 13 11:51:17 2023 GMT Not After : Jul 10 11:51:17 2033 GMT Subject: C = RU, ST = Moscow, O = Yandex, CN = localhost Issuer: C = RU, ST = Moscow, O = Yandex, CN = CA@localhost Validity Not Before: Jul 13 11:51:11 2023 GMT Not After : Jul 10 11:51:11 2033 GMT Subject: C = RU, ST = Moscow, O = Yandex, CN = CA@localhost - **yt/core/https: verify server certificate** NYT::NCrypto::TTlsConnection should verify server certificate and hostname. --- * Changelog entry Type: fix Component: misc-server Verify server certificate --- Pull Request resolved: https://github.com/ytsaurus/ytsaurus/pull/1357 Co-authored-by: yuryalekseev commit_hash:c88f00ab5fc82507b4b56c25cf25d18904aaec24

mTLS: add public rpc server to rpc proxies

2025-07-09T19:38:27Z

- **yt/rpc-proxy: add dedicated bus server for public use** - **yt/driver: add option for rpc-proxy default address type** - **yt/environment: separate internal and public CA** - **yt/environment: prefer https for rpc proxy discovery** - **yt/test: use rpc proxy public rpc port for tls setup** --- * Changelog entry Type: feature Component: misc-server Add public RPC server for RPC proxies with own TLS certificate. --- Pull Request resolved: https://github.com/ytsaurus/ytsaurus/pull/1358 Co-authored-by: yuryalekseev commit_hash:6f0fbae00978dcc529c08ab4eb995f92357abbd9

YT-25612: Optimize TColumnarStatistics::Update

2025-07-09T12:01:50Z

Removed unnecessary copying and allocations. Processor branch predictor should eat the `if` statements which emerged as a result. * Changelog entry Type: fix Component: misc-server Optimized heavy TColumnarStatistics::Update call. commit_hash:293eeca2347e71cc3ea8fe61a2faa83211c8bd15

Intermediate changes

2025-07-09T10:00:13Z

commit_hash:0f510cbd7d839d7f3baf830f59d746ab5e47e4cb