Self-hosted Retool Edge release 3.355
Release notes for the Self-hosted Retool 3.355 edge release.
Releases on the Edge channel occur weekly. Each release occurs one week after the equivalent release for cloud-hosted Retool.
Edge releases are available for organizations that want the latest features or to use closed beta functionality. Retool recommends most organizations use Stable releases unless you have a specific need for Edge releases and can keep your deployment up-to-date.
Retool supports only the most recent release on the Edge channel. As Edge releases are weekly, bug fixes and improvements are included in the next release. All previous releases are then considered deprecated.
Self-hosted Retool 3.355
No longer supported
Edge release notes
Bug fixes, improvements, and other incremental updates across all edge releases in this release.
| Type | Description |
|---|---|
| 3.355.029 changes↑ | |
| added | Added bearer token authentication for Snowflake resources. [#72227] |
| added | Added Python 3.14 support for Python queries and transformers. [#72421] |
| added | Added filterBy support for Google Sheets read operations. [#72117] |
| added | Added describe and describeGlobal operations for Salesforce resources. [#72146] |
| added | Added static database role support for Vault secrets manager configuration. [#72264] |
| added | Added web grounding configuration support for Google Gemini resources. [#72060] |
| added | Added support for GPT-5.4 model with 1,050,000 token context window for AI resource queries. [#72480] |
| fixed | Fixed REST API URL parameter parsing truncating values containing = characters. [#72626] |
| fixed | Fixed SAML SSO login failures for identity providers whose X.509 certificates contain large OID arc values. [#72515] |
| fixed | Fixed utils.copyToClipboard failing in Safari browser. [#72128] |
| fixed | Fixed Slack resource markdown mode toggle not bypassing HTML conversion. [#72040] |
| fixed | Fixed Edit Resource Modal stacking issues in workflows. [#72510] |
| fixed | Fixed passwordless magic link URLs to use custom domain when configured. [#72228] |
| fixed | Fixed Vault database engine to correctly handle 404 errors. [#72435] |
| changed | Updated Kimi K2 model to automatically use Kimi K2.5. [#72594] |
| changed | Changed audit log behavior to omit query content for improved security. [#72207] |
| improved | Improved REST API guided configuration to handle deepObject parameter style. [#72053] |
| improved | Improved REST API configuration to validate OpenAPI specification URLs. [#72103] |
| deprecated | Deprecated Deepseek 3.2 and Kimi 0905 AI models. [#72299] |
| security fix | Updated fast-xml-parser to address CVE-2026-25896 XSS vulnerability and CVE-2026-26278 DoS vulnerability. [#71952] |
| security fix | Updated tar dependency to address CVE-2026-26960 and CVE-2026-29786 path traversal vulnerabilities. [#72733] |
| security fix | Updated path-to-regexp dependency to address CVE-2024-45296 ReDoS vulnerability. [#72730] |
| security fix | Updated underscore dependency to address CVE-2026-27601 DoS vulnerability. [#72736] |
| security fix | Updated semver dependency to address CVE-2022-25883 ReDoS vulnerability. [#72735] |
| security fix | Updated nodemailer dependency to address CVE-2025-14874 DoS vulnerability. [#72734] |
| security fix | Updated basic-ftp dependency to address CVE-2026-27699 vulnerability. [#72616] |
| security fix | Updated jspdf dependency to address CVE-2026-25535 vulnerability. [#72315] |
| security fix | Updated minimatch dependency to address CVE-2026-26996 ReDoS vulnerability. [#72335] |
| security fix | Updated serialize-javascript to address GHSA-5c6j-r48x-rmvq code injection vulnerability. [#72537] |
| 29 changes | |