Self-hosted Retool Edge release 3.342
Release notes for the Self-hosted Retool 3.342 edge release.
Releases on the Edge channel occur weekly. Each release occurs one week after the equivalent release for cloud-hosted Retool.
Edge releases are available for organizations that want the latest features or to use closed beta functionality. Retool recommends most organizations use Stable releases unless you have a specific need for Edge releases and can keep your deployment up-to-date.
Retool supports only the most recent release on the Edge channel. As Edge releases are weekly, bug fixes and improvements are included in the next release. All previous releases are then considered deprecated.
Self-hosted Retool 3.342
No longer supported
Edge release notes
Bug fixes, improvements, and other incremental updates across all edge releases in this release.
| Type | Description |
|---|---|
| 3.342.028 changes↑ | |
| security fix | Fixed a security vulnerability in the Mailgun email webhook endpoint that could allow an unauthenticated attacker to exfiltrate the Mailgun API key. [#71482] |
| security fix | Upgraded jspdf to 4.1.0, fixing CVE-2026-24133, CVE-2026-24737, CVE-2026-24043, and CVE-2026-24040. [#71167] |
| security fix | Upgraded sharp to 0.32.6, fixing CVE-2023-4863, a high-severity heap buffer overflow in libwebp. [#71170] |
| security fix | Upgraded uglify-js to 2.8.29, fixing CVE-2015-8857. [#71180] |
| fixed | Fixed an issue where GitLab source control commits failed due to incorrect encoding of commit actions. [#71500] |
| fixed | Fixed Auth0 access tokens not being invalidated when Auth0 configuration is updated on a REST resource. [#71253] |
| fixed | Fixed internationalization settings not syncing correctly during multiplayer app editing sessions. [#71262] |
| fixed | Fixed an issue where admins were unable to delete or move workflows when VERSION_CONTROL_LOCKED is enabled. [#71231] |
| fixed | Fixed the email query signature suppression checkbox not being tracked as an unsaved change. [#71030] |
| fixed | Fixed an issue where branch syncing incorrectly deleted release artifacts, manifests, and other non-branching files during merge commits. [#71067] |
| fixed | Fixed an issue where branch merging failed for Azure DevOps repositories. [#71197] |
| fixed | Fixed custom component dev mode serving stale cached files instead of the latest revision. [#71138] |
| fixed | Fixed custom headers not being sent when executing Guided REST queries with JSON array request bodies. [#71290] |
| fixed | Fixed an issue with broken source control links in workflow and agent popovers. [#71223] |
| fixed | Fixed source control deployments failing when a protected app is moved into a folder with a toolscript-reserved name (such as test, src, or lib). [#70668] |
| fixed | Fixed Assist context window showing incorrect token counts when Anthropic prompt caching is active. [#71270] |
| fixed | Fixed vector queries not enforcing AI resource access permissions, preventing unauthorized users from running semantic search or creating embeddings. [#69839] |
| improved | Added secret autocomplete to API credential fields when configuring AI provider resources. [#70923] |
| improved | Agents now display an error when the configured AI provider resource has been deleted. [#70965] |
| improved | Removed unnecessary confirmation dialogs when disabling individual AI settings. [#70442] |
| improved | Improved workflow block timeout error messages to clarify when a longer timeout applies only to full workflow runs. [#70439] |
| improved | Improved performance for large organizations by batching dependency tracking queries to prevent backend crashes. [#71215] |
| improved | Reduced database connector memory usage by loading connector drivers on demand instead of at startup. [#70884] |
| improved | Improved database connector worker memory usage by ~18 MB per worker through lazy-loading SSH libraries. [#71036] |
| improved | Improved backend memory usage by ~16 MB through lazy-loading vector embedding data. [#71035] |
| improved | Improved Guided REST editor to fall back to cached operation data when the API spec is unavailable, and display a warning when the spec has changed. [#70902] |
| improved | Improved Guided REST editor to use raw body mode with the correct Content-Type header for OpenAPI operations with array request bodies. [#70858] |
| added | Added CACHE_CONTROL_NO_CACHE environment variable to return Cache-Control: no-cache headers. [#71101] |
| 28 changes | |