# What changed in duckdb

> 7 changes in duckdb 1 from its official release notes, upgrade guides and advisories: 1 security, 2 new APIs and options. Each one cited. Sources checked 2026-10-19. HTML: https://unstale.sh/pypi/duckdb/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## duckdb 1

### Security

- DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator (1.4.2) — [security advisory](https://github.com/advisories/GHSA-VMP8-HG63-V2HP)

### New APIs and options

- Accepts pathlib.Path, os.PathLike, bytes, and file-like objects as inputs. (1.5.4) — [release notes](https://github.com/duckdb/duckdb-python/releases/tag/v1.5.4)
- Accepts pathlib.Path, os.PathLike, bytes, and file-like objects as inputs. (1.5.4) — [release notes](https://github.com/duckdb/duckdb-python/releases/tag/v1.5.4)

### Behavior and default changes

- Arrow exports are unified across all query result types. (1.5.4) — [release notes](https://github.com/duckdb/duckdb-python/releases/tag/v1.5.4)
- Polars dynamic predicates are ignored. (1.5.4) — [release notes](https://github.com/duckdb/duckdb-python/releases/tag/v1.5.4)

### Fixes and other changes

- Fixes the alias of DuckDBPyRelation.query. (1.5.5) — [release notes](https://github.com/duckdb/duckdb-python/releases/tag/v1.5.5)
- Relation queries now work with a read-only connection. (1.5.4) — [release notes](https://github.com/duckdb/duckdb-python/releases/tag/v1.5.4)