An updated Theming experience is now available. Users on the Business and Enterprise plans can now see a revamped organization-level theme editing experience with expanded functionality, including:

• The ability to create custom color, typography, and metric tokens for use in the theme editor and app component styles.
• The ability to create multiple modes within a theme and switch between modes in an app using theme.setMode().
• The ability to configure default styles for individual components, as well as bulk edit shared styles for multiple components at once.
• Expanded typography controls—including the ability to configure multiple fonts in a theme using a CSS import or Google Fonts, set a default font family, and control font family and font weight for headings.

For users on all plans:

• Component-level font weight and font family style controls.
• A refreshed app-level theme experience with expanded typography controls.
• An updated component style editing experience.

Subfolders is now available to all users on Retool Cloud and Retool Self-hosted versions 3.93 and later. Subfolders helps you manage and organize your Retool apps, workflows, and resources. To implement proper inheritance for security measures, we also now enforce the following:

• A child subfolder or app must be at least as permissive as its parent.
• In order to move an object, you must have Own access to the object (App or Folder) being moved and Edit or Own on its destination.

In making changes to certain groups’ folder permissions, this means some users may no longer create apps inside of folders. Access to any existing apps or modules has changed. You can always update your group settings to enable app creation within folders.

Retool continually works on stability and security improvements for our customers. We are updating our infrastructure that will result in a change to the IP addresses that Retool uses. This change will not affect most customers but impacts those who must allow connections to Retool IP addresses through a firewall. This includes:

• Retool Cloud customers who have inbound firewall rules for resources on the network (e.g., databases)
• Self-hosted Retool customers who have outbound firewall rules on the network (air-gapped deployments are not affected)

**If you explicitly allow connections from or to Retool’s IP addresses, you must include additional IP addresses before December 1st, 2022. If you have difficulty updating this information, please reach out to us by emailing ip-changes@retool.com. **

Retool Cloud customers​

Retool must be allowed to connect to your resources using the following IP addresses. Update your inbound firewall rules to ensure Retool has continued access to your data:

• 52.177.12.28/32
• 52.175.251.223/32
• 35.90.103.132/30
• 44.208.168.68/30

Failure to update this information in time can prevent Retool from accessing your data and result in failed queries.

Self-hosted Retool customers​

Self-hosted Retool deployments must be allowed to connect to Retool’s license check, email, and usage reporting services using the following IP addresses. Update your outbound firewall rules to ensure Retool has continued access:

• 13.66.159.82/32
• 13.66.251.59/32
• 35.92.202.168/29
• 44.211.178.248/29

Failure to update this information in time can result in failed license checks and user invites.

Reachability test​

You can test your changes within Retool to make sure your deployment can reach the new IP addresses:

1. Sign in to Retool and navigate to the Query Library.
2. Click + New to create a new query.
3. Select the **REST **resource and GET action type.
4. Set the URL to https://reachability-test.retool.com.
5. Click Save to save the query, then click ▶ to run the query.

If the query returns a 200 status and OK status text, your deployment can successfully reach the new IP addresses.