---
collection: data-engineering
collection_name: Data & Analytics Engineering
week_start: 2026-10-19
title: Tinybird tightens the permission model as ClickHouse benchmarks agents
release_count: 24
generated: 2026-10-26
canonical: https://releases.sh/collections/data-engineering/digest/2026-10-19
---

# Tinybird tightens the permission model as ClickHouse benchmarks agents

Tinybird turned Workspace secrets into read-only objects for viewers and made Explorations shareable team-wide, while dbt State became free forever with a monthly DATT allowance and ClickHouse put GPT-6 and Claude Opus 5.5 through its Agentic Analytics Benchmark.

### Permissions and sharing in Tinybird

Tinybird spent the week drawing lines around who can touch what. Viewers can still list and read Workspace secrets, but [creating, updating or deleting them now returns a 403](https://www.tinybird.co/docs/changelog/2026-10-23-october-week-four) — and the same tightening extends to Classic Releases, where only admins can create, promote or delete. It's the kind of change that shows up as a failed CI job for anyone who handed a service account the viewer role and assumed it could manage variables.

The friendlier half of the story is collaboration. Explorations, which used to live entirely in their creator's private space, can now be shared with the whole Workspace from the Share control beside the title, with the familiar Favorites, Private and Workspace tabs in the sidebar to sort your own work from your team's. Only the owner can change the sharing, so the permission model stays consistent: read is broad, write stays narrow.

### dbt State goes free, and the Champions program turns six months old

dbt State's trial no longer leads to a paywall. [A free plan now picks up where the trial ends](https://www.getdbt.com/blog/dbt-state-now-available-free-forever), with a monthly 1,000 DATT allowance that resets on the first of the month and asks for no card or contract. Self-hosted users who switch dbt State on get the same deal; anyone already on the dbt platform gets 2,000 DATT a month through March 2027. For teams that have been weighing whether to try dbt State for orchestration and warehouse cost tuning, the decision is now essentially free to make.

Alongside it, dbt Labs [looked back at the first six months of its Champions program](https://www.getdbt.com/blog/dbt-champions-what-we-learned-from-founding-members) — 30 Champions, 20 Big Projects, and a pile of community work spanning dbt Pipelines, finance modeling and open-source tooling. Less a product announcement than a check-in with the people doing the unpaid evangelism, but a useful map of where community energy is going.

### ClickHouse: agent benchmarks, NVIDIA silicon, and Postgres observability

The ClickHouse blog kept up a steady pace. Round two of the [Agentic Analytics Benchmark added GPT-6 Astra, Luna and Sol, plus Claude Opus 5.5 and Claude Sonnet 5.5](https://clickhouse.com/blog/agentic-analytics-benchmark-round-two) — all five land within a point of each other mid-board, with Sonnet 5.5 moving most on turns, cost and truncated runs. If model choice for text-to-SQL felt settled, this suggests the leaderboard is compressing rather than diverging. On the hardware side, [ClickHouse on NVIDIA's Vera CPU topped ClickBench](https://clickhouse.com/blog/clickhouse-performance-on-nvidia-vera), with micro-benchmarks for filters, aggregation and joins showing near-linear scaling across 176 cores. And for anyone running Postgres on the side, [Query Insights now surfaces wait events](https://clickhouse.com/blog/postgres-wait-events-query-insights): breakdowns of what active sessions are blocked on, lock-wait and blocked-session charts, and the same metrics exported to Prometheus.

There's also a practical walkthrough for [tracing Cursor agents with Langfuse on ClickHouse](https://clickhouse.com/blog/cursor-agents-with-langfuse), covering per-turn traces, spotting expensive model and tool calls, and confirming with evaluations that a fix actually helps.

Meanwhile ClickHouse's release train rolled out [another week of stable and LTS patches](https://github.com/ClickHouse/ClickHouse/releases/tag/v26.10.2.103-stable) across the 26.3, 26.7, 26.8, 26.9 and 26.10 lines — routine version churn rather than a story, though anyone pinned to an LTS branch has fresh builds to pick up, including the [latest 26.3 LTS](https://github.com/ClickHouse/ClickHouse/releases/tag/v26.3.60.2-lts) and [26.8 LTS](https://github.com/ClickHouse/ClickHouse/releases/tag/v26.8.34.13-lts) cuts.

## Releases covered

### ClickHouse

- [The Agentic Analytics Benchmark, round two: GPT-6, Claude Opus 5.5, Claude Sonnet 5.5](https://clickhouse.com/blog/agentic-analytics-benchmark-round-two)
- [Running ClickHouse on NVIDIA Vera CPU: Is your favorite database up to the challenge?](https://clickhouse.com/blog/clickhouse-performance-on-nvidia-vera)
- [Postgres wait events, now in Query Insights](https://clickhouse.com/blog/postgres-wait-events-query-insights)
- [Trace and evaluate Cursor agents with Langfuse, powered by ClickHouse](https://clickhouse.com/blog/cursor-agents-with-langfuse)
- [Release v26.10.2.103-stable](https://github.com/ClickHouse/ClickHouse/releases/tag/v26.10.2.103-stable)
- [Release v26.3.60.2-lts](https://github.com/ClickHouse/ClickHouse/releases/tag/v26.3.60.2-lts)
- [Release v26.8.34.13-lts](https://github.com/ClickHouse/ClickHouse/releases/tag/v26.8.34.13-lts)

### dbt Labs

- [dbt State launches free tier with monthly DATT allowance](https://www.getdbt.com/blog/dbt-state-now-available-free-forever)
- [dbt Blog reflects on first six months of dbt Champions program](https://www.getdbt.com/blog/dbt-champions-what-we-learned-from-founding-members)

### Tinybird

- [Tinybird lets viewers read but no longer manage Workspace secrets](https://www.tinybird.co/docs/changelog/2026-10-23-october-week-four)
