Changes compared to upstream's v23.8.16.40-lts (e143a90)

Fixes partition pruning for extra columns in a set. (ClickHouse#55172 by @amosbird via #342)
Fixed rare bug when we produced invalid read ranges for queries with FINAL. Resulted in Cannot read out of marks range exception. (ClickHouse#54934 by @nickitat via #343)
Fix incorrect free space accounting for least_used JBOD policy (ClickHouse#56030 by @azat via #344)
Fix ALTER COLUMN with ALIAS that previously threw the NO_SUCH_COLUMN_IN_TABLE exception. (ClickHouse#57395 by @evillique via #345)
Disable system.kafka_consumers by default (due to possible live memory leak) (ClickHouse#57822 by @azat via #346)
Fix expiration in RoleCache (ClickHouse#67748 by @vitibar via #451)
Fix crash with invalid access to AccessControl instance (ClickHouse#65051 by @davenger via #465)
fix SIGSEGV due to profiler (ClickHouse#63865 by @azat via #466)
Projection analysis now comes after partition pruning, resulting in better plan efficiency and better statistic log (ClickHouse#56502 by @amosbird via #391)^*new
Fix broken partition key analysis when doing projection optimization with force_index_by_date = 1 (ClickHouse#58638 by @amosbird via #391)^*new

Fixed filtering by IN(...) condition for Merge table engine. (ClickHouse#54905 by @nickitat via #341)

Support S3 access through AWS Private Link Interface endpoints. (ClickHouse#62208 by @arthurpassos via #389)
Fixed accounting of memory allocated before attaching thread to a query or a user (ClickHouse#56089 by @nickitat via #388)
Engine Merge filters the records according to the row policies of the underlying tables (ClickHouse#50209 by @ilejn via #446)

Make builds possible on Altinity's infrastructure
clickhouse-regression test suite (#338 by @MyroTk)
Changed "version is not official" log message on failure (#369 by @Enmk)
Fix kerberized_hadoop docker image build issue (#394 by @ilejn)
Reuse unchanged images #455 by @MyroTk
Pinned version of pip packet requests==2.31.0 in attempt to fix: 'Error while fetching server API version: Not supported URL scheme http+docker' (#409 by @Enmk)
Aarch64 builds with better introspection (-no-pie) (#396 by @Enmk)
Fixed the docker tag for docker server test image (#463 by @MyroTk)
Add SignAarch64 job to match SignRelease (#462 by @MyroTk)
Fix test_distributed_directory_monitor_split_batch_on_failure_OFF (#464 by @Enmk)
Fix kererberized_hadoop tests (#468, #459 by @ilejn)
Updated reference to clickhouse-regression suite (#467 by @MyroTk)
Scheduled run + CI/CD fixups (#402 by @MyroTk)
Fixed some dependencies versions (#507)
Snapshot runners and other infrastructure improvements (#506)
Updated package metadata (#505)

Build report

Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/ as either .deb, .rpm, or .tgz