DuckDB: v1.4.2 Bugfix Release

This is a bug fix release for various issues discovered after we released 1.4.1. PR #19716 addresses the issues raised in [CVE-2025-64429]( https://github.com/duckdb/duckdb/security/advisories/GHSA-vmp8-hg63-v2hp). Users of the DuckDB encryption feature are encouraged to update. ## What's Changed * bump duckdb-azure ref for 1.4.1 by @benfleis in https://github.com/duckdb/duckdb/pull/19275 * Fix regex optimization to remove flags when converting to contains by @mlafeldt in https://github.com/duckdb/duckdb/pull/19290 * feat: Fix length of sort keys by @krlmlr in https://github.com/duckdb/duckdb/pull/19260 * Pass lambda bindings to next binder by @Dtenwolde in https://github.com/duckdb/duckdb/pull/19144 * bump Julia to v1.4.1 by @c-herrewijn in https://github.com/duckdb/duckdb/pull/19306 * Use cross-compilation for static libs on OSX by @hannes in https://github.com/duckdb/duckdb/pull/19304 * Allow multiple read-only attaches to the same database across database instances by @Mytherin in https://github.com/duckdb/duckdb/pull/19319 * hugeint_t fixes by @carlopi in https://github.com/duckdb/duckdb/pull/19318 * Use CMAKE_<LANG>_COMPILER_LAUNCHER by @evertlammerts in https://github.com/duckdb/duckdb/pull/19326 * Add settings field to test config by @Mytherin in https://github.com/duckdb/duckdb/pull/19330 * Keep track of which database managers have which databases attached in the DatabaseFilePathManager by @Mytherin in https://github.com/duckdb/duckdb/pull/19338 * Bugfixes by @lnkuiper in https://github.com/duckdb/duckdb/pull/19329 * skip several ci jobs on prs that only bump extensions by @samansmink in https://github.com/duckdb/duckdb/pull/19249 * [C API] bind_value out of range fix by @taniabogatsch in https://github.com/duckdb/duckdb/pull/19348 * Destroy TaskNotifier prior to calling FinishTask by @Mytherin in https://github.com/duckdb/duckdb/pull/19373 * Remove zip bombs by @Mytherin in https://github.com/duckdb/duckdb/pull/19380 * Avoid calling shared_from_this() and instead use the passed in ClientContext in buffered data by @Mytherin in https://github.com/duckdb/duckdb/pull/19379 * add test tag support [vfs integration tests p1] by @benfleis in https://github.com/duckdb/duckdb/pull/19331 * Throw if non-`VARCHAR` key is passed to `json_object` by @lnkuiper in https://github.com/duckdb/duckdb/pull/19365 * BUGFIX: Silent failure to write row groups with large lists by @J-Meyers in https://github.com/duckdb/duckdb/pull/19376 * Fixes for CTE (de)serialization compatibility with older versions by @Mytherin in https://github.com/duckdb/duckdb/pull/19393 * Fix #18139: correctly initialize flush size in MemoryStream, and re-use writer states by @Mytherin in https://github.com/duckdb/duckdb/pull/19398 * Fixup Kalman fiter: bound it's (0, scale_factor), not (0, 1) by @carlopi in https://github.com/duckdb/duckdb/pull/19395 * Fix StringDecompress for hugeint_t values by @ywelsch in https://github.com/duckdb/duckdb/pull/19403 * Fix #19211: make INSERT OR IGNORE correctly handle multiple constraints by @Mytherin in https://github.com/duckdb/duckdb/pull/19409 * Issue #19386: ICU TZDEFAULT by @hawkfish in https://github.com/duckdb/duckdb/pull/19413 * Fix issue in MetadataManager triggered when doing concurrent reads while checkpointing, and rework concurrent attach / detach test by @Mytherin in https://github.com/duckdb/duckdb/pull/19424 * ADBC fix: escape schema, table and column identifiers by @evertlammerts in https://github.com/duckdb/duckdb/pull/19407 * v1.4: Only serialize CTE nodes when MATERIALIZED is specified by @Mytherin in https://github.com/duckdb/duckdb/pull/19420 * Add forwards compatibility tests to CI by @Mytherin in https://github.com/duckdb/duckdb/pull/19432 * Internal #6168: Unsupported Correlated Binds by @hawkfish in https://github.com/duckdb/duckdb/pull/19431 * Don't pull up filters through `DISTINCT ON` and make `enum` casts in Parquet safe (bugfixes) by @lnkuiper in https://github.com/duckdb/duckdb/pull/19406 * Get table bindings for all operators under a logical get if the logical get function is an unnest by @Tmonster in https://github.com/duckdb/duckdb/pull/19467 * WASM #1897: UTC Offset Support by @hawkfish in https://github.com/duckdb/duckdb/pull/19464 * Add tests for nested lambda bindings by @Dtenwolde in https://github.com/duckdb/duckdb/pull/19453 * [Compression] Fix issue in ZSTD decompression related to mis-interpreted segment offsets by @Tishj in https://github.com/duckdb/duckdb/pull/19475 * vfs integration tests p2 - update (env) vars and tests by @benfleis in https://github.com/duckdb/duckdb/pull/19428 * CI Fix: clear benchmark cache between runs by @Mytherin in https://github.com/duckdb/duckdb/pull/19508 * Make `DatabaseInstance::log_manager` a `unique_ptr` by @Flogex in https://github.com/duckdb/duckdb/pull/19471 * Support non-standard NULL in Parquet again by @Mytherin in https://github.com/duckdb/duckdb/pull/19523 * Bump: inet by @samansmink in https://github.com/duckdb/duckdb/pull/19526 * Bump multiple extensions by @samansmink in https://github.com/duckdb/duckdb/pull/19522 * add upcoming patch release to internal versions by @samansmink in https://github.com/duckdb/duckdb/pull/19525 * Add test that either 'latest' or 'vX.Y.Z' are supported STORAGE_VERSIONs by @carlopi in https://github.com/duckdb/duckdb/pull/19527 * Moving staging to cf and uploading to install bucket by @hannes in https://github.com/duckdb/duckdb/pull/19539 * Creating separate OSX cli binaries for each arch by @hannes in https://github.com/duckdb/duckdb/pull/19538 * [Dev] Disable the use of `ZSTD` if the block_manager is the `InMemoryBlockManager` by @Tishj in https://github.com/duckdb/duckdb/pull/19543 * Follow up to staging move by @hannes in https://github.com/duckdb/duckdb/pull/19551 * Bugfixes: Parquet JSON+DELTA_LENGTH_BYTE_ARRAY and sorting iterator by @lnkuiper in https://github.com/duckdb/duckdb/pull/19556 * [ported from main] Fix bug initializing std::vector for column names by @evertlammerts in https://github.com/duckdb/duckdb/pull/19555 * Disable jemalloc on BSD by @lnkuiper in https://github.com/duckdb/duckdb/pull/19560 * Fix race condition between `Append` and `Scan` by @Captain32 in https://github.com/duckdb/duckdb/pull/19571 * Release relevant tests to still be run on all builds by @carlopi in https://github.com/duckdb/duckdb/pull/19559 * fix inconsistent behavior in remote read_file/blob, and prevent union… by @Maxxen in https://github.com/duckdb/duckdb/pull/19531 * [v1.4-andium] Add Profiler output to logger interface by @carlopi in https://github.com/duckdb/duckdb/pull/19572 * Fix edge case in uncompressed validity scan with offset and fix off-by-one in ArrayColumnData::Select by @Maxxen in https://github.com/duckdb/duckdb/pull/19567 * Skip compiling remote optimizer test when TSAN Is enabled by @Mytherin in https://github.com/duckdb/duckdb/pull/19590 * Wal index deletes by @artjomPlaunov in https://github.com/duckdb/duckdb/pull/19477 * add vortex external extension by @samansmink in https://github.com/duckdb/duckdb/pull/19580 * Avoid eagerly resolving the next on-disk pointer in the MetadataReader, as that pointer might not always be valid by @Mytherin in https://github.com/duckdb/duckdb/pull/19588 * [DevEx] Improve error message when FROM clause is omitted by @Tishj in https://github.com/duckdb/duckdb/pull/18995 * bump iceberg by @Tmonster in https://github.com/duckdb/duckdb/pull/19618 * Improve error message around compression type deprecation/availability checks by @Tishj in https://github.com/duckdb/duckdb/pull/19619 * Increase cast-cost of old-style implicit cast to string by @Maxxen in https://github.com/duckdb/duckdb/pull/19621 * Try to prevent overshooting of `FILE_SIZE_BYTES` by pre-emptively increasing bytes written in Parquet writer by @lnkuiper in https://github.com/duckdb/duckdb/pull/19622 * Bump: spatial by @Maxxen in https://github.com/duckdb/duckdb/pull/19620 * Detect invalid merge into action and throw exception by @Mytherin in https://github.com/duckdb/duckdb/pull/19636 * Fix #19455: correctly extract root table in merge into when running ajoin that contains single-sided predicates that are transformed into filters by @Mytherin in https://github.com/duckdb/duckdb/pull/19637 * Remove `FlushAll` from `DETACH` by @lnkuiper in https://github.com/duckdb/duckdb/pull/19644 * Bump MySQL scanner by @staticlibs in https://github.com/duckdb/duckdb/pull/19643 * Enable running all extensions tests as part of the build step by @carlopi in https://github.com/duckdb/duckdb/pull/19631 * Always remember extra_metadata_blocks when checkpointing by @ywelsch in https://github.com/duckdb/duckdb/pull/19639 * duckdb_logs_parsed to do case-insensitive matching by @carlopi in https://github.com/duckdb/duckdb/pull/19669 * Categorize ParseLogMessage as CAN_THROW_RUNTIME_ERROR by @carlopi in https://github.com/duckdb/duckdb/pull/19672 * Fixup linking for LLVM by @carlopi in https://github.com/duckdb/duckdb/pull/19668 * Log total probe matches in hash join by @lnkuiper in https://github.com/duckdb/duckdb/pull/19683 * Fix InsertRelation on attached database by @evertlammerts in https://github.com/duckdb/duckdb/pull/19583 * Add request timing to HTTP log by @samansmink in https://github.com/duckdb/duckdb/pull/19691 * Add missing query location to blob cast by @Mytherin in https://github.com/duckdb/duckdb/pull/19689 * Bump: aws, ducklake, httpfs, iceberg by @samansmink in https://github.com/duckdb/duckdb/pull/19654 * Bump: delta, ducklake, httpfs by @samansmink in https://github.com/duckdb/duckdb/pull/19715 * Fix #19355: correctly resolve subquery in MERGE INTO action condition by @Mytherin in https://github.com/duckdb/duckdb/pull/19720 * Fix #19700: correctly sort output selection vector in nested selection operations by @Mytherin in https://github.com/duckdb/duckdb/pull/19718 * Bump httpfs and resume testing on Windows by @carlopi in https://github.com/duckdb/duckdb/pull/19714 * [Dev] Fix assertion failure for empty ColumnData serialization by @Tishj in https://github.com/duckdb/duckdb/pull/19713 * Bump the Postgres scanner extension by @Mytherin in https://github.com/duckdb/duckdb/pull/19730 * Add explicit Initialize(HTTPParam&) method to HTTPClient by @carlopi in https://github.com/duckdb/duckdb/pull/19723 * Logs to be case-insensitive also at enable_logging callsite by @carlopi in https://github.com/duckdb/duckdb/pull/19734 * Fix CVE https://github.com/duckdb/duckdb/security/advisories/GHSA-vmp8-hg63-v2hp crypto issues by @samansmink in https://github.com/duckdb/duckdb/pull/19716 **Full Changelog**: https://github.com/duckdb/duckdb/compare/v1.4.1...v1.4.2