All Stable releases of Self-hosted Retool
All release notes for the Stable channel of Self-hosted Retool
Text version of release notes for the Stable channel of Self-hosted Retool. Use the Self-hosted Retool release notes app to search and compare changes between versions.
Self-hosted Retool 3.334
Latest releaseCurrently supported
| First release version | 3.334.0 | March 03, 2026 | tryretool/backend:3.334.0-stable on Dockerhub |
| Latest release version | 3.334.4 | March 25, 2026 | tryretool/backend:3.334.4-stable on Dockerhub |
Major changes in this release
- Multi-instance releases for Source Control are now generally available.
- LICENSE_KEY is required for multiplayer on self-hosted starting in Q3 2026.
- Agents now support the A2A protocol.
- Ask and Build mode is now available with Assist.
- Assist thread summarization is now available.
- Improvements to writing SQL with Assist are now available.
- Multiple Secrets Manager configurations are now available in public beta.
- Resource type restrictions are now available for self-hosted Retool.
- Improvements to editing with Assist are now available.
- README files can now be created for workflows.
- The Google Slides integration is now available.
- Assist now supports Azure OpenAI.
- Admins can now configure role-based access controls for Assist.
- Assist now supports additional controls for configuring app themes.
- A new version of the Microsoft SQL Server integration is now available.
- Assist can now create and edit multipage apps.
- Workflow releases can now be unpublished.
- OpenAI GPT-5.1 is now available in Retool.
- OpenAI GPT-5.2 is now available in Retool.
- Google Gemini 3 Pro Preview is now available in Retool.
- Optionally use security-hardened images for stable releases.
- DeepSeek-V3.2 is now supported in Baseten, replacing the deprecated DeepSeek-R1.
Patch release notes
3.334.4 – Mar 25, 2026
fixed
- Fixed synchronous workflow runs getting stuck in
PENDINGstatus when the workflow execution environment was unreachable.
3.334.3 – Mar 19, 2026
fixed
- Fixed Snowflake OAuth infinite reauth loop caused by stale refresh token expiration not persisting after token refresh.
3.334.2 – Mar 18, 2026
fixed
- Bug fixes and improvements.
3.334.1 – Mar 13, 2026
added
- Added support for the Workflows README beta setting.
fixed
- Fixed SAML SSO login failures for identity providers whose X.509 certificates contain large OID arc values.
- Fixed workflow block-level logs not appearing in run history when blocks were stopped mid-execution.
- Fixed workflow trigger environment mapping causing deployment failures when syncing workflows via Source Control.
improved
- Improved workflow block result storage configuration with
WORKFLOW_BLOCK_STORAGE_LOCATIONenvironment variable for switching between PostgreSQL and S3 storage.
security-fix
- Prevented XML files in Retool Storage from being rendered inline in browsers to mitigate XSLT transformation vulnerabilities.
- Changed Retool Storage external URLs to download HTML and XHTML files as attachments instead of rendering inline in browsers.
3.334.0 – Mar 3, 2026
added
- Added support for
excludedAttributes=membersquery parameter in SCIMGet GroupAPI to improve compatibility with SSO providers like Entra ID. - Added Assignment tab to group pages for RBAC management.
- Enabled the Tavily resource type for all eligible customers.
- Added support for YAML format OpenAPI specifications in OpenAPI resources.
- Added ca-west-1 as a region option for AWS resources.
- Added authorization code grant with PKCE as an OAuth 2.0 option for Snowflake resources.
- Added an accessible focus state for Image components with a click handler.
- Added a
folder_idfield to public API endpoints forGET /resourcesandGET /resources/:resourceId. - Added support for OpenAPI ParameterGroup editor for editing JSON objects in Guided REST mode.
- Added support for returning a list of groups when requested from the
GET /user_invitesendpoint. - Added an Assist section to the list of keyboard shortcuts, and added two new shortcuts:
Switch to Ask modeandSwitch to Build mode. - Added optional pagination to GET /accessTokens.
- Added optional pagination to GET /user_requests.
- Added a new GET /deployments API endpoint to list source control deployments. Adds additional response body fields to the existing get deployment and trigger deployment endpoints.
- Added support for a Trigger authentication on every query option for GraphQL resources.
- Added a list of groups the user is in to the GET /user API endpoint.
- Added the ability for Assist to reference URL parameters when writing queries, transformers, and embedded expressions.
- Fixed an issue in the SCIM API that prevented modification of default groups.
- Added support for additional permissions on business plans.
- Added client credentials authentication for Databricks.
- Added search bar to Roles & Permissions page.
- Added a new native video component for mobile apps.
- Added new Secrets Manager scoped secrets behavior: if the
SCOPED_SECRETSenvironment variable is true, then secrets whose names begin withscoped--resources--$FOLDER_NAME--can only be used in resources within the specified folder. - Added support for pagination on the public API GET /groups method.
- Added support for pagination on the public API GET /folders method.
- Added support for pagination on the public API GET /spaces method.
- Added support for pagination on the public API GET /apps method.
- Added bearer token authentication to MCP resources for use in Agents.
- Added the ability to add and revoke screen access for groups with the API.
- Added support for encoding user email in the Intercom JWT payload for improved authentication.
- Added optional pagination to GET /user_invites for the public API.
- Added optional pagination to GET /environments for the public API.
- Added support for Assist to create forms outside of modals, when the form is the primary purpose of a page.
- Adds a shadow style property and basic organization-level theming support for Alert v2.
- Added spell check support to editable string cells in Table and Key Value components.
- Added support for GPT-5.1.
- Added a shadow style property to the Image component.
- Added
initialDeeplinkobject to the Retool mobile app model for accessing URL parameters and screen navigation information when an app is opened via a deep link. - Added the
ariaLabelproperty to Link components. - Added availability for editing "Roles and permissions" to the Business plan.
- Added a shadow style property to the ImageGrid component.
- Added the
gemini-3-pro-previewmodel for use in Retool AI. - Added an additional permissions banner to the Groups page.
- Added support for creating release artifacts of protected workflows from the configured default branch.
- Added a search option to the Groups page.
- Adds a notification banner to Assist chat threads for token consumption awareness.
- Added
RESOURCE_TYPES_DENY_LIST_CREATE_ONLYenv-var, which prevents users from creating new resources of specific types, but does not block queries the wayRESOURCE_TYPES_DENY_LISTdoes. - Added the trigger type to workflowContext.
- Added permission guards for resource access via Assist.
- Added sorting options to list of spaces in the Spaces settings. Defaults to alphabetical sorting based on space names.
- Added support for Google Slides resources.
- Added support for
isEditorModetoQUERY_RUNaudit trail log events. - Added Google Slides tools to Retool Agents.
- Added support for Azure OpenAI as a single model provider for Assist.
- Added support for Google Search grounding in Gemini for Retool AI. You can enable this option in the organizaton's Beta settings.
- Added the
RESOURCE_TYPES_DENY_LISTenvironment variable to prevent users from creating and running against the provided resource types.
fixed
- Fixed AWS knowledge base vector queries failing with "AWS region is missing" error.
- Fixed an issue in Signature component when global orientation was not set as default.
- Fixed issue in Query Library where users were unable to add a new resource from the resource picker.
- Fixed navigation to shortlinked apps in presentation mode loading incorrect cached app.
- Fixed drag-and-drop issue with top folder drop zone.
- Fixed folder order when changing scope during drag operations.
- Fixed edit modal from resource dropdown appearing behind workflow canvas.
- Fixed transaction handling in workflow template conversion.
- Fixed Save button not appearing when adding or removing members from groups as admin or group admin.
- Improved error message when attempting to rename protected apps.
- Fixed missing environment variable for Java database connector.
- Fixed a bug that caused Secrets Manager secrets in resources not to work in public apps without a logged-in user.
- Fixed mobile video aspect ratio to be dynamic based on the source video dimensions.
- Fixed Scanner component to no longer add an extra leading zero when scanning UPC-A barcodes.
- Fixed an issue that prevented the camera from switching between front and back when using the WebView component in Retool Mobile.
- Fixed layout issue for HTML elements with data-click-target attribute.
- Fixed an issue where the module input window displays a JavaScript error under certain conditions.
- Fixed an issue that caused an error when connecting to Snowflake via OAuth. Retool no longer sends the parameter
prompt. This extension to the OAuth protocol is not supported by Snowflake, and was ignored in the past, but now Snowflake treats it as an error. - Fixed custom groups being unarchived on plan upgrade.
- Fixed an issue where offline jobs would incorrectly parse request bodies as JSON when using non-JSON content types.
- Fixed an issue where workflows libraries
requirements.txtshowed deleted library. - Fixed an issue where the Re-auth button did not show for resource query tools in the agents tool creation canvas.
- Fixed an issue in workflows where function parameters were not evaluated for a duplicated function.
- Fixed an issue where granted permissions per resource for query authoring were not applied to auto-fixing queries.
- Fixed an issue with string interpolation in OpenAPI query blocks in workflows.
- Fixed an issue where long JavaScript query blocks in workflows caused a bug with scrolling.
- Fixed an issue where Assist users saw an error when using Ask mode and generating apps from scratch with no resources configured in their organization.
- Fixed an issue with the UI in the event handler editor.
- Fixed an issue where users needed to be admins to have access to source control. Users just need manage access.
- Fixed an issue that could cause the OAuth callback URL to be incorrect when using Share credentials between users for a resource.
- Fixed an issue with Chart rendering when nested in Stacks.
- Fixed autocomplete in resource fields to not show "secrets" as a global object if Secrets Manager is not enabled.
- Fixed an issue with merging branches in multiplayer.
- Fixed an issue where containers on Android devices get a vertical empty space.
- Fixed an issue that allowed permission group creation on Free and Team plans.
- Fixed unsandboxed execution, which now reads max CPU/memory limits exclusively from env vars.
- Fixed
baseDomainshown in source control deployment email alerts. - Fixed a visual bug in column text colors.
- Fixed an issue so that when the
SCOPED_SECRETSenv var is enabled, autocompletion for template strings in resources will filter the secrets to omit any scoped secrets that are not available for that resource. - Fixed an issue where reset password confirmation emails would still be sent to users even when reset password emails are disabled in an organization.
- Fixed an issue where Assist would incorrectly think it could not perform some tasks.
- Fixed an issue with HTML sanitization in the "Failed workflow" alert emails.
- Custom component edits in apps will sync more consistently for multiple editors.
- Fixed an issue where queries containing the word "select" may return an error.
- Fixed an issue with the State tab.
- Fixed an issue with scrolling in the Roles page.
- Fixed an issue where Assist may remove existing column configuration properties that it doesn't support whenever it edits any table column.
- Fixed an issue where the navigation header may flash during redirect.
- Fixed an issue with multi-instance releases so users can protect an element, create a release artifact, and update the manifest in the same PR.
- Fixed an issue where an agent may attempt to continue, before a child agent, invoked as a tool, has finished.
- Fixed an issue where the Source Control branch menu may not load correctly.
- Fixed an issue where Code Executor does not support the
LOG_LEVELenvironment variable. - Fixed an issue that prevented the Retool API from creating folders without passing in
parent_folder_id. - Fixes UI issue for thinking box states.
- Fixed non-admin users ability to see the External Users group and any groups they are an admin of in Settings if they are group admins and have external Retool manage scope.
- Fixed an issue with Retool header flashing on redirect to a workspace.
- Fixed an issue with REST API resources where the
metadata.requestproperties may not always be correctly sanitized. - Fixed an issue with OpenAPI resources where the
metadata.requestproperties may not always be correctly sanitized. - Fixed an issue with GraphQL resources where the
metadata.requestproperties may not always be correctly sanitized. - Fixed issues where Assist failed to add components to header frames.
- Fix an incorrect documentation link for the Event List component.
- Fixed an issue when opening an app in the IDE using the
historyOffsetURL parameter. - Fixed an issue with placeholders in the Key Value component.
- Fixed an issue where tooltips may not appear in the App IDE code editor.
- Fixed an issue with renaming modules.
- Fixed an issue where global error handlers for workflows would trigger even when errors were already handled by block-level On Error handlers.
- Fixed dropdown selection issues in the function canvas.
- Fixed token consumption calculation for Assist thread summarization and enabled it by default.
- Fixed a permission check that incorrectly restricted role-based access.
- Fixed UX when workflow block results are truncated due to size limits by showing run logs and hiding unusable filter button.
- Fixed an issue where AI queries were not emitting token usage telemetry.
- Fixed an issue where branch syncing incorrectly deleted release artifacts, manifests, and other non-branching files during merge commits.
- Fixed an issue where Azure Repos source control diffs included directory entries as files, which caused deployment errors during partial deploys.
- Fixed an issue where self-hosted instances were incorrectly logging to Retool's error tracking service.
- Fixed an issue with GitHub OAuth for MCP resources by including the required
Accept: application/jsonheader in access token requests. - Fixed an issue where admins were unable to delete or move workflows when
VERSION_CONTROL_LOCKEDis enabled. - Fixed Assist context window showing incorrect token counts when Anthropic prompt caching is active.
- Fixed source control manifest UI incorrectly passing file paths to Bitbucket API, which caused manifest contents to be wiped.
- Fixed an infinite retry loop in Assist single-shot agent mode.
- Fixed an issue where GitLab source control commits failed due to incorrect encoding of commit actions.
- Fixed template substitution not being applied to form data keys.
- Fixed Assist role-based access controls to correctly apply to the All Users group.
- Fixed an issue where queries using permissioned resources could not be disabled.
- Fixed missing telemetry for AI thread summarization.
improved
- Improved Assist page switching behavior by disabling navigation while actively generating to prevent conflicts.
- Added visual indicator when page switching is disabled during Assist generation.
- Improved folder ordering behavior in multiplayer editing.
- Enabled plugin ordering synchronization in multiplayer.
- Improved component tooltips to be hoverable so end users can follow Markdown links and copy text to their clipboard.
- Improved resource Usage tab to display a trash badge for apps and workflows in trash folders.
- Improved app transition feedback with loading indicator when using Go to app or
utils.openApp. - Improved view mode performance by caching app data with service worker.
- Improved code tree display consistency between single page and multipage apps.
- Improved AWS Bedrock resource with updated AI21 Labs and Stability AI models.
- Improved custom component library editing in multiplayer mode for increased reliability.
- Improved query handling logic for mobile apps to defer UI feedback until offline jobs actually run online. Added the Completed section back to the Offline Job Manager screen.
- Improved GUI query behavior.
- Improved PDF rotation in the PDF viewer component in Mobile to use native rotation support for smoother performance. Fixed an issue where very large PDFs in Mobile could cause memory issues. Improved page navigation in the PDF viewer component in Mobile to use native page navigation methods for more reliable page transitions.
- Improved accessibility when setting up two-factor authentication.
- Improved the way that Assist troubleshoots issues.
- Improved UI of the OpenAPI resource editor.
- Improved Assist's understanding of how to use the tools available to it.
- Exposed font names in the Theme object.
- Improved the performance of Assist-generated UI changes to large apps.
- Improved Assist's ability to write event handler scripts.
- Improved accuracy of custom component library dev modes.
- Adds pagination parameters to the
getUsersRetool API endpoint. - Improved component icon handling for Assist.
- Improved the speed and quality of Assist edits on existing UI layouts.
- Improved the hint when there's existing messages in the thread in the Assist input text box.
- Assist can now verify the configuration of AI models and display an error if verification fails.
- Improved the layout of the Workflows tab.
- Improved visibility of errors when protected apps reference unprotected modules.
- Improved error reporting within single-model providers to show model-specific information.
- Improved workflow execution performance by using compressed block result sizes when determining whether to truncate large results exceeding 10MB.
changed
- Changed terminology from "private beta" to "closed beta" in API endpoints.
- Changed Snowflake Node SDK to use version 2.2.0.
- Changed behavior for Assist to show a loading spinner when Assist is about to execute an auto-submitted prompt.
- Changed Assist behavior so that when the default models are selected, Retool attempts to use the Anthropic resource for Anthropic requests, and sends requests to Anthropic through Amazon Bedrock as a fallback.
- Changed protected trigger feature to be generally available.
- Changed behavior so that if the
SCOPED_SECRETSenv var is set, secrets with scoped names are shown separately in the Secrets Manager list. - Renamed the OpenAI resource to OpenAI Platform.
- Updated the app Share modal.
- Changed the Login Retool Event to be enabled by default.
- Changed references of AWS Bedrock to Amazon Bedrock.
- User profile pictures now appear when viewing group members.
- Changed required permission level for folder delete, rename, and move to trash operations from
edittoownaccess.
removed
- Removed the 'Require is not defined' lint warning in JavaScript code editor.
- Removed OAuth access tokens and non-sensitive ID tokens from audit logs.
- Removed resizability of the Description field of a role if the description itself cannot be edited.
- Removed sensitive user tokens from audit logs with OAuth2 SSO.
- Removed user access to app modules in other app pages if they only have access to a specific page, not the entire app.
- Removed expiry warning banners during signup and guided-tour.
security-fix
- Fixed XSS vulnerability in REST API custom authentication by adding validation for custom auth URLs.
- Upgraded jsPDF library to version 4.0.0 to address CVE-2025-68428.
- Changed behavior so that the HTTP path field in the Databricks resource now sanitizes semicolons to prevent JDBC parameter injection. If you were previously including connection parameters in the HTTP path (e.g.,
/sql/1.0/warehouses/abc;parameter=value), these will now be stripped. Use the dedicated connection parameters field instead. - Patched a security issue related to auto-join domains.
- Fixed authorization bypass vulnerability in folder deletion that allowed users without proper permissions to delete folders.
Self-hosted Retool 3.300
Currently supported
| First release version | 3.300.0 | December 03, 2025 | tryretool/backend:3.300.0-stable on Dockerhub |
| Latest release version | 3.300.19 | March 25, 2026 | tryretool/backend:3.300.19-stable on Dockerhub |
Major changes in this release
- Llama 4 model is deprecated and will be removed in a future release.
- Kimi K2 Instruct model is now available.
- Resource type restrictions are now available.
- Secrets Manager now supports multiple configurations.
- Enterprise customers can now use the Get IP Allowlist by Region endpoint to programmatically retrieve Retool's IP addresses.
- App pages can now be reordered.
- Workflow triggers can now be protected with Source Control.
- Claude Haiku 4.5 model is now available.
- Agents can now be protected with Source Control.
- Additional improvements to Assist are now available.
- Assist now supports Amazon Bedrock.
- GPT-3.5 Turbo Instruct model is deprecated and will be removed in a future release.
- The Kafka, SQS, SNS, and Tavily integrations are now generally available.
- Claude Sonnet 3.5 model is deprecated and will be removed in a future release.
Patch release notes
3.300.19 – Mar 25, 2026
fixed
- Fixed synchronous workflow runs getting stuck in
PENDINGstatus when the workflow execution environment was unreachable.
3.300.18 – Mar 18, 2026
fixed
- Bug fixes and improvements.
3.300.17 – Mar 12, 2026
fixed
- Fixed workflow block-level logs not appearing in run history when blocks were stopped mid-execution.
improved
- Improved workflow block result storage configuration with
WORKFLOW_BLOCK_STORAGE_LOCATIONenvironment variable for switching between PostgreSQL and S3 storage.
security-fix
- Prevented XML files in Retool Storage from being rendered inline in browsers to mitigate XSLT transformation vulnerabilities.
- Changed Retool Storage external URLs to download HTML and XHTML files as attachments instead of rendering inline in browsers.
3.300.16 – Mar 4, 2026
fixed
- Fixed an issue where queries using permissioned resources could not be disabled.
3.300.15 – Feb 25, 2026
changed
- Changed required permission level for folder delete, rename, and move to trash operations from
edittoownaccess.
security-fix
- Fixed authorization bypass vulnerability in folder deletion that allowed users without proper permissions to delete folders.
3.300.14 – Feb 19, 2026
fixed
- Fixed an issue with the source control manifest UI not correctly navigating to directory contents.
- Fixed an issue where GitLab source control commits failed due to incorrect encoding of commit actions.
security-fix
- Fixed a security vulnerability in the Mailgun email webhook endpoint that could allow an unauthenticated attacker to exfiltrate the Mailgun API key.
3.300.13 – Feb 18, 2026
fixed
- Fixed an issue where global error handlers for workflows would trigger even when errors were already handled by block-level On Error handlers.
- Fixed an issue where branch syncing incorrectly deleted release artifacts, manifests, and other non-branching files during merge commits.
- Fixed an issue where Azure Repos source control diffs included directory entries as files, which caused deployment errors during partial deploys.
- Fixed an issue with GitHub OAuth for MCP resources by including the required
Accept: application/jsonheader in access token requests. - Fixed an issue where auto catchup commits in source control corrupted binary release artifact zip files by incorrectly reading binary content as UTF-8.
- Fixed an issue where admins were unable to delete or move workflows when
VERSION_CONTROL_LOCKEDis enabled.
3.300.12 – Feb 12, 2026
fixed
- Fixed UX when workflow block results are truncated due to size limits by showing run logs and hiding unusable filter button.
3.300.9 – Feb 5, 2026
fixed
- Fixed an issue in Secrets Manager where HashiCorp Vault secret lookups may fail when the lookup occurs very near to the access token expiration time.
- Fixed a multiplayer syncing issue where client app changes could be overwritten when connecting to a new session.
improved
- Improved workflow execution performance by using compressed block result sizes when determining whether to truncate large results exceeding 10MB.
security-fix
- Fixed XSS vulnerability in REST API custom authentication by adding validation for custom auth URLs.
3.300.8 – Jan 28, 2026
fixed
- Bug fixes and improvements.
3.300.7 – Jan 22, 2026
added
- Added a search option to the Groups page.
3.300.6 – Jan 20, 2026
security-fix
- Patched XSS vulnerability in the Rich Text Editor component.
3.300.5 – Jan 14, 2026
fixed
- Fixed performance issue causing browser lagging when deleting components in apps with nested repeatable components.
- Fixed race condition in agents Monitoring page that showed stale data when switching between runs.
improved
- Improved component tooltips to be hoverable so end users can follow Markdown links and copy text to their clipboard.
security-fix
- Upgraded jsPDF library to version 4.0.0 to address CVE-2025-68428.
3.300.4 – Dec 19, 2025
added
- Added password protocol to whitelisted link protocols for improved URL handling.
fixed
- Fixed an issue that caused an error when connecting to Snowflake via OAuth. Retool no longer sends the parameter
prompt. This extension to the OAuth protocol is not supported by Snowflake, and was ignored in the past, but now Snowflake treats it as an error.
improved
- Improved accessibility features with keyboard navigation and screen reader support enhancements.
security-fix
- Added postMessage origin validation for custom component collections to prevent cross-origin security issues.
- Added sanitization for all Databricks connection string inputs to prevent parameter injection attacks.
3.300.2 – Dec 17, 2025
fixed
- Fixed an issue where the Re-auth button did not show for resource query tools in the agents tool creation canvas.
- Fixed an issue where users needed to be admins to have access to source control. Users just need manage access.
improved
security-fix
- Changed behavior so that the HTTP path field in the Databricks resource now sanitizes semicolons to prevent JDBC parameter injection. If you were previously including connection parameters in the HTTP path (e.g.,
/sql/1.0/warehouses/abc;parameter=value), these will now be stripped. Use the dedicated connection parameters field instead.
3.300.1 – Dec 10, 2025
added
- Added the
RESOURCE_TYPES_DENY_LISTenvironment variable to prevent users from creating and running against the provided resource types. - Added
RESOURCE_TYPES_DENY_LIST_CREATE_ONLYenv-var, which prevents users from creating new resources of specific types, but does not block queries the wayRESOURCE_TYPES_DENY_LISTdoes. - Added permission guards for resource access via Assist.
fixed
- Fixed an issue with Retool header flashing on redirect to a workspace.
- Fixed an issue with GraphQL resources where the
metadata.requestproperties may not always be correctly sanitized. - Fixed an issue with multi-instance releases so users can protect an element, create a release artifact, and update the manifest in the same PR.
- Fixed an issue where reset password confirmation emails would still be sent to users even when reset password emails are disabled in an organization.
removed
- Removed sensitive user tokens from audit logs with OAuth2 SSO.
3.300.0 – Dec 3, 2025
added
- Added a feature flag
sourceControlConfigAllowTemplatesthat enables Source Control configurations to use configuration variables and/or Secrets Manager secrets for sensitive credential fields. - Added support for drag-and-drop page reordering.
- Added a new API endpoint, Get IP Allowlist By Region, which returns Retool's whitelisted IP addresses.
- Added audit log events for Source Control deployments.
- Added support for managed key AI features when using a HTTP proxy.
- Added permission checks for page cloning.
- Added options to select either Amazon Bedrock, OpenAI, or Anthropic as the single-model provider for Assist.
- Added support for Claude Haiku 4.5.
- Added support for README interactions to Assist.
- Added the
RESOURCE_TYPES_DENY_LISTenvironment variable to prevent users from creating and running against the provided resource types. - Added support to Assist for referencing global objects in Javascript queries and transformers.
- Added automatic app name generation to empty apps when using Assist.
- Added the
RTEL_SEND_TO_RETOOL_INPUT_ALLOWLISTenvironment variable to specify which data to send to Retool's telemetry server. - Added a call to action in all single-page apps that prompts users to migrate to multipage.
- Added support for multiple configurations in Secrets Manager.
- Added web grounding support for Google Gemini models, allowing them to search the web for up-to-date information when answering queries.
- Added new beta features for Secrets Manager in on-premise instances, allowing multiple Secrets Manager configurations to be used at once (to get secrets from different providers, or from different areas within the same provider).
- Added a CTA to the homepage announcing Assist.
- Added an option to exclude Table columns from search.
- Added
cmd+ias a new keyboard shortcut to toggle the Assist panel open or closed. - Added toggling the Assist tab as an option in the command palette.
- Added OpenAPI/Swagger spec support to REST API resources, enabling structured API queries with autocompletion of endpoints and properties.
- Added more detailed response messages for insufficient user permissions when editing Agents.
- Added an empty object default for the
GET /resource_configurationsAPI endpoint. - Added one-click removal of roles from Groups.
- Added a
.focus()method for Container components. - Added an OAuth form for the RetoolAI resource page.
- Added a new, dismissable Assist call to action to the Add Component tab.
fixed
- Fixed an issue where popups may incorrectly stack on the workflow canvas.
- Fixed an issue with Assist tool call checkmark alignment.
- Fixed an issue where the Create dropdown may include duplicate links.
- Fixed an issue where the Assist prompt UI disappeared on short screens.
- Fixed an issue where the user interface didn't appear as expected when a white-labeled theme was used with Assist.
- Fixed an issue with the Assist prompt appearing incorrectly on some browsers.
- Fixed a connection error for customers with long running source control deployments.
- Fixed an issue with incorrect access level displaying to external apps on the Users page.
- Fixed an issue with query formatting in workflow blocks.
- Fixed a scrolling issue with the canvas.
- Fixed an issue that prevented protected apps from loading correctly.
- Fixed an issue where OpenAPI responses had data left out. This data is now encoded as Base64.
- Fixed an issue with Assist where navigating to a module prevented the module settings panel from opening.
- Fixed an issue that prevented the default credential provider from being utilized by SQS and SNS resources.
- Added the Retool AI Vector: Retool AI query writers (edit access) can manage vectors to the Beta settings which allows users with Retool AI edit permission to use create and manage vector documents.
- Fixed an issue where previews for draft mobile apps may not load correctly.
- Fixed an issue with branch merging and collaborative app editing.
- Fixed an issue where the Source Sontrol settings page failed to display correctly for customers with older GitHub app-based configurations.
- Fixed an issue where Assist may fail and return partially streamed Markdown results.
- Fixed an issue where collaborative editing may not function correctly with protected apps.
- Fixed an issue with skipped releases getting unpublished for users with multi-instance releases and spaces.
- Fixed an issue where apps may incorrectly report an undefined theme.
- Fixed an issue causing workflows using OAuth resources to break inside of nested workflows.
- Fixed an issue where the Query Library would show unclear error messages if proxy authentication was misconfigured.
- Fixed the
aria-labelledbyattribute for the Checkbox Group component. - Fixed an issue with branch cleanup in Source Control.
- Fixed an issue that could delay a Secrets Manager update for several minutes after a configuration change.
- Fixed an issue where the App IDE may fail to respond when attempting to edit a module.
- Fixed an issue with multi-spec OpenAPI resources.
- Fixed a bug in the public API when deleting workflow folders and added support for creating, updating, retrieving, and deleting agent folders.
- Fixed ordered list numbers not showing up when there are many steps in Assist's planned action.
- Fixed formatting of dynamic columns in Tables to apply to columns with an inferred type.
- Fixed the Vault integration in Secrets Manager so that it no longer incorrectly states the connection failed if the list of secrets is empty.
- Fixed an issue with OpenAPI Query Editor for Firefox which wouldn't open the dropdown when a value was already selected.
- Fixed an issue where an error from an MCP server could cause a Retool backend service to crash.
- Fixed an issue where organizations on the Free or Team plan may have limited access to Organization Themes.
- Fixed an issue with the
enableInstanceValuesproperty of List View children. - Fixed an issue where resource configuration options did not appear for calls to
/resource_configurationsfor gRPC resources. - Fixed an issue where long JavaScript queries in single-step functions were being truncated unexpectedly.
- Fixed a bug that caused a
ReferenceErrorFirebase` raw-mode queries. - Fixed issues with validation in List Views.
- Fixed an issue that prevented SSO buttons from appearing on user invite screens.
- Fixed an issue that caused flickering when scrolling through a group's members list.
- Fixed an issue that prevented a tool from appearing in the UI during agent execution if the tool had a long description (>2000 chars).
- Fixed an issue with cycling through Assist history within an Assist thread using up/down keyboard arrows.
- Fixed an issue that could cause autocomplete in resource editors not to include Secrets Manager secret names.
- Fixed an issue where old MCP resources may be set up with invalid authentication settings when auto-configuring authentication.
- Fixed an issue where non-Enterprise organizations were incorrectly shown an admin granularity banner.
improved
- Improved load times for high-latency connections.
- Updated the Email sent page.
- Improved the appearance of Assist autocomplete.
- Improved the appearance of the user login page.
- Improved the accessibility of buttons used for authentication pages.
- Improved focus states and design for improved accessibility.
- Improved granular access permissions so that users can also delete API tokens they've created.
- Improved the layout of Assist property blocks.
- Improved the header style in Assist.
- Improved accessibility experience for two-factor authentication setup.
- Improved Assist's ability to work on globally scoped JavaScript queries.
- Improved the error message in Assist when proxy authentication issues occur.
- Improved the Navigation component by exposing
persistUrlParamsas a property. - Improved app accessibility by disabling keyboard focus for tooltips.
- Improved UI in Secrets Manager settings.
- Improved Assist's ability to work with globally scoped queries and components.
- Improved the information architecture of the Groups settings page and added a separate section to display the group's roles and permissions.
- Improved custom component dev mode fetching to make the component more responsive to backend changes. A toast now appears to show when a refresh is underway.
- Improved the resource description field to expand automatically as you type.
changed
- Changed Source Control configuration forms to allow embedded expressions when appropriate, if the
sourceControlConfigAllowTemplatesflag is set. - Changed ... action menu behavior to disable it and add an explanatory tooltip if there are no actions a user can take. If a single action in a menu is disabled, a tooltip is added upon hover.
- Changed the behavior when a user tries to access a Workflow they don't have permissions for. Now they will be redirected back to the workflows landing page with an error toast.
- Changed all emails from Retool so that they use the most updated Retool logo.
- Changed behavior so that if the
snowflakeShowPopulateQueryTagOptionfeature flag is set, the Snowflake resource options now include "Automatically set QUERY_TAG on all queries". Checking this box makes Retool generate aQUERY_TAGfor every query to that resource, whose value is a JSON object with information about the resource and the source of the query. - OAuth resources are now only available when using directly invoked workflows, apps, and agent tool calls.
- Changed apps to use a default width of
100%. This reverts a previous change that made apps1200pxwide by default. - Changed workflow overage emails so that they include the organization subdomain.
- Changed Kafka, SQS, SNS, and Tavily Web Search integrations from beta to general availability.
- Changed the login page text content.
- Updated the menu options for blocks in workflow functions.
- Moved the Close button for workflow functions to the top right.
- Changed a rule so that non-admins (with proper role) can provide tokens to create custom components.
- Changed per-screen permissions to be enabled by default for Enterprise customers.
deprecated
- Deprecated the open source
llama-4-maverickAI model in favor ofkimi-k2-instruct-0905. - Deprecated the
llama-4model in the open source AI provider. This has been replaced withkimi-k2-instruct-0905. - Deprecated OpenAI's GPT-3.5-turbo-instruct model in favor of GPT-4.0-mini.
- Deprecated Claude 3.5 Sonnet in favor of Claude Sonnet 4.5.
Self-hosted Retool 3.284
No longer supported
| First release version | 3.284.0 | October 21, 2025 | tryretool/backend:3.284.0-stable on Dockerhub |
| Latest release version | 3.284.25 | March 18, 2026 | tryretool/backend:3.284.25-stable on Dockerhub |
Major changes in this release
- Assist is now available.
- Improvements to the README feature of Retool apps are now available.
- Agents can now be protected with Source Control.
- Merging changes from your default branch into your feature branch is now supported in Source Control.
- Source Control multi-instance releases are now supported.
- Databricks Lakehouse integration is now available.
- OAuth support for MCP agents is now available.
- Granular admin permissions using role-based access control is now in beta.
- Internationalization (i18n) support is now generally available.
- Performance monitoring features have been introduced.
- FullStory integration is now generally available.
- You can now see the output of an agent run with the Result (sync) return type when using the Invoke Agent block in workflows.
- Retool removed some JDBC connectors that were inadvertently included in certain self-hosted release versions.
- Retool updated the custom component support library to version 1.9.0, which adds a new verbose option with `deploy` and `sync` commands.
- You can now restrict users from creating draft apps.
- Update to default user permissions on Business and Enterprise plans.
Patch release notes
3.284.25 – Mar 18, 2026
fixed
- Bug fixes and improvements.
3.284.24 – Mar 12, 2026
improved
- Improved workflow block result storage configuration with
WORKFLOW_BLOCK_STORAGE_LOCATIONenvironment variable for switching between PostgreSQL and S3 storage.
3.284.23 – Mar 4, 2026
changed
- Removed deprecated Claude Sonnet 3.7 and Claude Haiku 3.5 models from Assist and updated fallback configurations to use Claude Sonnet 4.5.
3.284.22 – Feb 25, 2026
changed
- Changed required permission level for folder delete, rename, and move to trash operations from
edittoownaccess.
security-fix
- Fixed authorization bypass vulnerability in folder deletion that allowed users without proper permissions to delete folders.
3.284.21 – Feb 18, 2026
fixed
- Fixed an issue with source control manifest UI not correctly navigating to directory contents.
security-fix
- Fixed a security vulnerability in the Mailgun email webhook endpoint that could allow an unauthenticated attacker to exfiltrate the Mailgun API key.
3.284.20 – Feb 18, 2026
fixed
- Fixed an issue where global error handlers for workflows would trigger even when errors were already handled by block-level On Error handlers.
- Fixed an issue where Azure Repos source control diffs included directory entries as files, which caused deployment errors during partial deploys.
- Fixed an issue where admins were unable to delete or move workflows when
VERSION_CONTROL_LOCKEDis enabled.
3.284.19 – Feb 12, 2026
fixed
- Bug fixes and improvements.
3.284.16 – Feb 5, 2026
fixed
- Fixed an issue in Secrets Manager where HashiCorp Vault secret lookups may fail when the lookup occurs very near to the access token expiration time.
security-fix
- Fixed XSS vulnerability in REST API custom authentication by adding validation for custom auth URLs.
3.284.15 – Jan 28, 2026
added
- Added
focus()method to HTML component to programmatically set focus to the first focusable element. - Added a search option to the Groups page.
3.284.14 – Jan 20, 2026
security-fix
- Patched XSS vulnerability in the Rich Text Editor component.
3.284.14 – Jan 20, 2026
security-fix
- Patched XSS vulnerability in the Rich Text Editor component.
3.284.13 – Jan 14, 2026
security-fix
- Upgraded jsPDF library to version 4.0.0 to address CVE-2025-68428.
3.284.12 – Dec 19, 2025
fixed
- Fixed an issue that caused an error when connecting to Snowflake via OAuth. Retool no longer sends the parameter
prompt. This extension to the OAuth protocol is not supported by Snowflake, and was ignored in the past, but now Snowflake treats it as an error.
3.284.11 – Dec 18, 2025
fixed
- Bug fixes and improvements.
3.284.10 – Dec 17, 2025
fixed
- Fixed an issue where the Re-auth button did not show for resource query tools in the agents tool creation canvas.
security-fix
- Changed behavior so that the HTTP path field in the Databricks resource now sanitizes semicolons to prevent JDBC parameter injection. If you were previously including connection parameters in the HTTP path (e.g.,
/sql/1.0/warehouses/abc;parameter=value), these will now be stripped. Use the dedicated connection parameters field instead.
3.284.9 – Dec 11, 2025
fixed
- Fixed an issue where reset password confirmation emails would still be sent to users even when reset password emails are disabled in an organization.
improved
- Improved accessibility when setting up two-factor authentication.
removed
- Removed sensitive user tokens from audit logs with OAuth2 SSO.
3.284.8 – Dec 3, 2025
fixed
- Bug fixes and improvements.
3.284.7 – Nov 20, 2025
added
- Added permission guards for resource access via Assist.
- Added support for
isEditorModetoQUERY_RUNaudit trail log events. - Added the
ariaLabelproperty to Link components.
fixed
- Fixed the
aria-labelledbyattribute for the Checkbox Group component. - Fixed an issue with multi-spec OpenAPI resources.
- Fixed an issue with Retool header flashing on redirect to a workspace.
- Fixed an issue with multi-instance releases so users can protect an element, create a release artifact, and update the manifest in the same PR.
3.284.6 – Nov 13, 2025
added
- Added the
RESOURCE_TYPES_DENY_LISTenvironment variable to prevent users from creating and running against the provided resource types. - Added Google Slides tools to Retool Agents.
3.284.5 – Nov 5, 2025
added
- Added a
.focus()method for Container components.
fixed
- Fixed a bug that caused a
ReferenceErrorFirebase` raw-mode queries. - Fixed an issue that prevented the default credential provider from being utilized by SQS and SNS resources.
changed
- Changed a rule so that non-admins (with proper role) can provide tokens to create custom components.
3.284.4 – Nov 3, 2025
fixed
- Fixed an issue so that there is proper validation for model provider API keys coupled with model provider settings.
improved
- Improved app accessibility by disabling keyboard focus for tooltips.
changed
- Changed Assist behavior to allow Retool-managed AI connection features to work with the
HTTP_PROXYenvironment variable.
3.284.3 – Oct 29, 2025
fixed
- Bug fixes and improvements.
3.284.2 – Oct 27, 2025
fixed
- Fixed an issue where an error from an MCP server could cause a Retool backend service to crash.
3.284.1 – Oct 22, 2025
added
- Added the
RTEL_SEND_TO_RETOOL_INPUT_ALLOWLISTenvironment variable to specify which data to send to Retool's telemetry server.
3.284.0 – Oct 21, 2025
added
- Added support for using secrets in headers when using a custom AI provider.
- Adds the
draftAppsAccessscope to groups to grant access to draft apps. - Added the ability to persist SAML assertion attributes to user metadata during login (beta feature).
- Added support for filtering OpenAPI resources in Assist to provide more relevant schema information based on user requirements.
- Added organization-level setting to restrict users to only view their own files in Retool Storage.
- Added a new organization setting to restrict Retool Storage file access for users with Use permissions to only files they uploaded.
- Added a
-vverbose option to the Custom Component Library. - Added a requirement that cloud-hosted organization users must verify their email address prior to making an app public.
- Added endpoint
/api/checkReadinessto check if Retool is ready to serve requests. - Added a welcome banner for Assist that introduces users to AI-powered app building capabilities.
- Added tooltip to workflow name on the index page to increase visibility of long names.
- Added options to convert empty strings and
NULLvalues to actual null values when importing CSV or Google Sheets data into nullable Retool Database columns. - Added
current_useraccess in function blocks for custom tools in Agents. - Added a new AI Provider resource type that allows users to configure and manage AI providers (OpenAI, Anthropic, Google AI, etc.) as unified resources.
- Added informational banner for organizations with admin granularity enabled on user, groups, and roles pages.
- Added commit signing option for source control with GitHub.
- Added OAuth 2.0 support when adding an MCP server as a tool for an agent.
- Added the ability to copy the secret key during OTP setup instead of only relying on the QR code.
- Added support for Hashicorp Vault database engine in Secrets Manager. Vault database role names are treated as secret names, and credential properties (such as
usernameandpassword) can be accessed using syntax like{{ secrets.pg.username }}. - Added
.focus()method for Button components. - Added organization information to the "Login from new IP address" email to reduce user confusion.
- Added capability for admin users to be able to edit and delete Source Control branches created by other users.
- Added a description for embedded apps.
- Added
release_versionto apps-related public API endpoints. - Added a Select all button in the access token creation UI.
- Added support for the Jira v3 API in the Jira resource type.
- Added a new dialog for users to provide feedback for Assist.
- Added source control protection to Agents.
fixed
- Fixed typos in the Create Agent template descriptions.
- Fixed an issue with the Notion resource where it may fail to perform requests relating to pages.
- Fixed an issue where the temperature setting was incorrectly shown for GPT-5 model selection in AI queries.
- Fixed an issue where an email verification error was incorrectly displayed when sharing a public app.
- Fixed an issue with the Workflow Outline component display and overflow handling.
- Fixed an issue where the App inspector may not display labels or values for Pie Chart components added by Assist.
- Fixed an issue where New thread and View history icons may not appear in the Assist header when using Safari.
- Fixed an issue where module inputs failed to load.
- Fixed an issue where
current_user.groupsmay not be evaluated in resource queries. - Fixed a bug in Google Cloud Storage connector that could make downloads fail.
- Fixed flashing navigation bar when redirecting to landing page.
- Fixed a bug that prevented configuring a foreign key that references an autoincrement integer column.
- Fixed an issue with Retool Storage Next Page and Previous Page links that caused them to open content in a new tab.
- Fixed an issue where Source Control may not function correctly with Azure Repos if Use Basic Auth is enabled.
- Fixed an issue where an open query could be overwritten by Assist.
- Fixed an issue causing login loops when signing in with two-factor authentication on Safari.
- Fixed an issue when reverting changes with Assist where queries did not reflect the reverted values.
- Fixed an issue where CSV and Google Sheets imports incorrectly pre-selected timestamp type for integer columns containing values 1-12.
- Fixed an issue where instrumentation events would have scope errors if they were on the page.
- Fixed accessibility issue with toast notification icons by adding aria roles.
- Fixed inconsistencies in user interface standardization in Retool Database.
- Fixed aria-labels for Select and Radio components to improve accessibility.
- Fixed an issue where Source Control deployments may fail in rare circumstances.
- Fixed an issue where toggles in the Retool Database UI were not working in the field visibility popup.
- Fixed an issue with the Resource dependencies permissions flyout bar.
- Fixed an issue where landing pages may not work correctly for some groups.
- Fixed a bug that caused inconsistent behavior of Etags in the public API for Source Control configuration.
- Fixed an issue where autocomplete popup for resource configuration forms showed JavaScript keywords in places where only constants are allowed.
- Fixed an issue where published releases weren't being updated properly in the UI without a refresh.
- Fixed an issue where modal dialogs would not display properly due to stale component state.
- Fixed an issue with Anthropic API key handling when using a custom proxy.
- Fixed an issue that caused idle-in-transaction errors for releases in Source Control deploys.
- Fixed an issue where a Loop block input showed the block ID when positioned after a Branch block. Also fixed an issue that caused a missing dependencies warning not showing in the Loop block.
- Fixed an issue that prevented AskAI from being used when OpenAI provider BYOK or managed key was not configured.
- Fixed a backend error message related to white-labeled mobile apps to be more clear.
- Fixed an issue that prevented workflow owners without access to the trash folder from deleting their workflows.
- Fixed an issue with the Select component's
aria-activedescendantproperty - Fixed incorrect error messages regarding page scope in the editor for Retool Storage queries.
- Fixed an issue where Assist sometimes did not provide a title on Modal frames.
- Fixed an issue with Assist tool call checkmark alignment.
- Added the Retool AI Vector: Retool AI query writers (edit access) can manage vectors to the Beta settings which allows users with Retool AI edit permission to use create and manage vector documents.
- Fixed an issue with resources that use OAuth authentication that prevented them being used being used in workflows.
- Fixed an issue with skipped releases getting unpublished for users with multi-instance releases and spaces.
- Fixed an issue causing workflows using OAuth resources to break inside of nested workflows.
- Fixed an issue where the module editor may crash when refreshing.
improved
- Improved the appearance of workflow outlines.
- Improved the user experience of the Assist chat thread.
- Improved the user interface for agents when providing additional context.
- Improved the theme details in the Assist response, which is now rendered with color preview.
- Improved startup performance of workflows.
- Improved the authentication prompt to include any query parameters that might be included.
- Improved the experience of creating eval test cases from Agent chats threads.
- Improved the max iterations error message in Agents to direct users to advanced settings.
- Improved the behavior of Source Control to prevent files or other elements having the same name as a Toolscript folder.
- Improved the experience of selecting multiple apps.
- Improved workflows code block testing latency.
- Improved error handling for large imports from Google Sheets into Retool Database.
- Improved the target of the SkipLink accessibility feature to focus on main content instead of the header.
- Improved error logging in jobs runner by including additional license check errors.
- Improved user interface standardization in Retool Database forms by updating toggle components.
- Improved user interface standardization in Retool Database forms by updating icons and buttons.
- Improved accessibility by adding aria-labels to modal containers.
- Improved keyboard focus management when opening and closing Modal and Drawer components.
- Improved accessibility of the Drawer frame by adding the ARIA
dialogrole. - Improved the Retool Database form UI experience.
- Improved screen reader accessibility of localized content when the locale updates.
- Improved accessibility of the Retool app structure tree.
- Improved test interface by disabling the Run all tests button when no tests exist.
- Improved alert styling to enhance icon contrast in light mode.
- Improved the layout of the Verify Email page.
- Improved test suite management by automatically removing empty test suites when closing without a name.
- Improved the agent-worker configuration to be simplified, and eliminate the need for
WORKER_TEMPORAL_TASKQUEUE. - Improved the Verify your email message in the Share modal for better user clarity.
- Improved latency.
- Improved the accuracy of the step counter shown in Assist threads.
- Improved the consistency with which Assist is able to correctly populate the options of a Select input.
- Improved the display of status text in Assist.
- Fixed an issue where Assist would unnecessarily disable row selection on Table components.
- Improved accessibility experience for two-factor authetnication setup.
changed
- Changed the default permissions for All users when creating a new organization on the Business or Enterprise plans. This group now has no permissions by default and can be updated as needed. This does not affect existing organizations.
- Parent window communication in embedded apps is now generally available, and configuring a setting is no longer required.
- Changed the internationalization feature to general availability.
- Changed permission configuration so that users who do not have permission for an agent, regardless of whether or not they have permission for a workflow, will be unable to see the Agents tab in the navigation bar.
- Changed the default app width to be 1200px wide.
- Changed apps to use a default width of
100%. This reverts a previous change that made apps1200pxwide by default.
removed
- Remove Last Actions from Assist Tool Call header.
deprecated
- Deprecated Gemini 1.5 models. Gemini 2.0 Flash will be used instead.
Self-hosted Retool 3.253
No longer supported
| First release version | 3.253.0 | September 09, 2025 | tryretool/backend:3.253.0-stable on Dockerhub |
| Latest release version | 3.253.29 | March 12, 2026 | tryretool/backend:3.253.29-stable on Dockerhub |
Major changes in this release
- Code executor changes in self-hosted 3.251 and later require updating existing installations.
- Bitbucket access token support has been added.
- You can now protect workflow releases with Source Control.
- Some terminology changes in the Workflows IDE.
- You can now view which users and permission groups have access to a workflow, resource, and agent.
- Modules now support typed data inputs. This change makes your modules more reliable by catching mismatched data types early.
- Organizations on the Business or Enterprise plan can now restrict users from accessing specific app pages with per-page permissions.
- Source Control now uses UUIDs to identify protected objects.
- Modules now have configurable height and overflow options.
Patch release notes
3.253.29 – Mar 12, 2026
fixed
- Bug fixes and improvements.
3.253.28 – Feb 25, 2026
changed
- Changed required permission level for folder delete, rename, and move to trash operations from
edittoownaccess.
security-fix
- Fixed authorization bypass vulnerability in folder deletion that allowed users without proper permissions to delete folders.
3.253.27 – Feb 18, 2026
fixed
- Fixed an issue where global error handlers for workflows would trigger even when errors were already handled by block-level On Error handlers.
- Fixed an issue where Azure Repos source control diffs included directory entries as files, which caused deployment errors during partial deploys.
- Fixed an issue where admins were unable to delete or move workflows when
VERSION_CONTROL_LOCKEDis enabled. - Fixed an issue with the source control manifest UI not correctly navigating to directory contents.
security-fix
- Fixed a security vulnerability in the Mailgun email webhook endpoint that could allow an unauthenticated attacker to exfiltrate the Mailgun API key.
3.253.26 – Feb 11, 2026
added
- Added
CACHE_CONTROL_NO_CACHEenvironment variable to returnCache-Control: no-cache headers.
3.253.24 – Feb 5, 2026
fixed
- Fixed an issue in Secrets Manager where HashiCorp Vault secret lookups may fail when the lookup occurs very near to the access token expiration time.
security-fix
- Fixed XSS vulnerability in REST API custom authentication by adding validation for custom auth URLs.
3.253.23 – Jan 28, 2026
added
- Added a search option to the Groups page.
3.253.22 – Jan 20, 2026
security-fix
- Patched XSS vulnerability in the Rich Text Editor component.
3.253.22 – Jan 20, 2026
security-fix
- Patched XSS vulnerability in the Rich Text Editor component.
3.253.21 – Jan 14, 2026
security-fix
- Upgraded jsPDF library to version 4.0.0 to address CVE-2025-68428.
3.253.20 – Jan 14, 2026
fixed
- Bug fixes and improvements.
3.253.19 – Dec 19, 2025
fixed
- Fixed an issue that caused an error when connecting to Snowflake via OAuth. Retool no longer sends the parameter
prompt. This extension to the OAuth protocol is not supported by Snowflake, and was ignored in the past, but now Snowflake treats it as an error.
3.253.18 – Dec 18, 2025
security-fix
- Changed behavior so that the HTTP path field in the Databricks resource now sanitizes semicolons to prevent JDBC parameter injection. If you were previously including connection parameters in the HTTP path (e.g.,
/sql/1.0/warehouses/abc;parameter=value), these will now be stripped. Use the dedicated connection parameters field instead.
3.253.17 – Dec 11, 2025
removed
- Removed sensitive user tokens from audit logs with OAuth2 SSO.
3.253.16 – Dec 3, 2025
fixed
- Bug fixes and improvements.
3.253.15 – Nov 20, 2025
added
- Added support for more resource types behind
RESOURCE_TYPES_DENY_LISTand introduced theRESOURCE_TYPES_CREATION_DENY_LISTenvironment variable.
fixed
- Fixed an issue with GraphQL resources where the
metadata.requestproperties may not always be correctly sanitized.
improved
- Added the
RESOURCE_TYPES_DENY_LISTenvironment variable to prevent users from creating and running against the provided resource types.
3.253.14 – Nov 13, 2025
added
- Added Google Slides tools to Retool Agents.
3.253.13 – Nov 5, 2025
fixed
- Fixed a bug that caused a
ReferenceErrorFirebase` raw-mode queries. - Fixed an issue that prevented the default credential provider from being utilized by SQS and SNS resources.
3.253.12 – Oct 29, 2025
fixed
- Bug fixes and improvements.
3.253.11 – Oct 27, 2025
fixed
- Fixed an issue where an error from an MCP server could cause a Retool backend service to crash.
3.253.10 – Oct 24, 2025
fixed
- Bug fixes and improvements.
3.253.9 – Oct 22, 2025
added
- Added the
RTEL_SEND_TO_RETOOL_INPUT_ALLOWLISTenvironment variable to specify which data to send to Retool's telemetry server.
3.253.8 – Oct 15, 2025
fixed
- Added the Retool AI Vector: Retool AI query writers (edit access) can manage vectors to the Beta settings which allows users with Retool AI edit permission to use create and manage vector documents.
- Fixed an issue causing workflows using OAuth resources to break inside of nested workflows.
3.253.7 – Oct 15, 2025
fixed
- Fixed an issue with OAuth resources being used in workflows, restricting their usage to directly invoked workflows, apps, and agent tool calls.
- Fixed an issue with skipped releases getting unpublished for users with multi-instance releases and spaces.
3.253.6 – Oct 8, 2025
added
- Added support for the Jira v3 API in the Jira resource type.
3.253.5 – Oct 1, 2025
changed
- Changed permission configuration so that users who do not have permission for an agent, regardless of whether or not they have permission for a workflow, will be unable to see the Agents tab in the navigation bar.
3.253.4 – Sep 27, 2025
fixed
- Bug fixes and improvements.
3.253.3 – Sep 24, 2025
fixed
- Bug fixes and improvements.
3.253.2 – Sep 17, 2025
added
- Added informational banner for organizations with admin granularity enabled on user, groups, and roles pages.
fixed
- Fixed an issue where instrumentation events would have scope errors if they were on the page.
- Fixed an issue causing login loops when signing in with two-factor authentication on Safari.
- Fixed an issue with the Resource dependencies permissions flyout bar.
security-fix
- Patched a security vulnerability in the Databricks connector to prevent file inclusion attacks.