Self-hosted Retool Edge release 3.363
Release notes for the Self-hosted Retool 3.363 edge release.
Releases on the Edge channel occur weekly. Each release occurs one week after the equivalent release for cloud-hosted Retool.
Edge releases are available for organizations that want the latest features or to use closed beta functionality. Retool recommends most organizations use Stable releases unless you have a specific need for Edge releases and can keep your deployment up-to-date.
Retool supports only the most recent release on the Edge channel. As Edge releases are weekly, bug fixes and improvements are included in the next release. All previous releases are then considered deprecated.
Self-hosted Retool 3.363
No longer supported
Edge release notes
Bug fixes, improvements, and other incremental updates across all edge releases in this release.
| Type | Description |
|---|---|
| 3.363.035 changes↑ | |
| added | Added ability to assign users and groups directly to custom roles from the role details page. [#73919] |
| added | Added ability to delete and rename custom roles. [#73820] |
| added | Added scope management to custom role details pages. [#73909] |
| added | Added audit logging for failed query executions. [#73892] |
| added | Added name_contains filter to the GET /api/v2/apps endpoint for filtering apps by name. [#74154] |
| added | Added POST /api/v2/users/{userId}/logout endpoint to terminate user sessions and return OIDC RP-initiated logout URL. [#73524] |
| added | Added No filtering or sorting search mode to Select, Multiselect, Listbox, and Multiselect Listbox components to preserve server-side ordering. [#73758] |
| added | Added {{ current_user }} as a supported template string in the resource editor. [#73822] |
| added | Added Azure Blob Storage resource to the public API. [#73889] |
| added | Added support for multiple deployments in Azure AI queries. [#73592] |
| added | Added ability to create a new app from app version history. [#73613] |
| fixed | Fixed JDBC schema introspection for IBM DB2 and Hive databases. [#73520] |
| fixed | Fixed workflow source control deployment failures caused by createdBy metadata in protected trigger data. [#73990] |
| fixed | Fixed PDF Viewer component infinite loop when cancelling the password prompt for password-protected PDFs. [#73866] |
| fixed | Fixed Number Input form validation for minimum and maximum constraints, and re-triggers validation when min/max properties change. [#73624] |
| fixed | Fixed Stack component widths being incorrectly converted to percentages on app reload. [#74077] |
| fixed | Fixed agent execution errors when using Claude Opus 4.6+ models. [#74066] |
| fixed | Fixed component drag-and-drop positioning when moving components from canvas into Stack components. [#73878] |
| fixed | Fixed race condition causing JavaScript errors when navigating between apps with the openApp event handler. [#74087] |
| fixed | Fixed AI query streaming errors not displaying in the UI. [#73612] |
| fixed | Fixed OAuth2 flow to allow cursor:// protocol redirect URIs for Cursor IDE connections. [#74151] |
| fixed | Fixed a bug where components could not be moved from the Stack component to the canvas. [#73828] |
| changed | Marked the guided REST API as generally available and added a deprecation notice to the OpenAPI connector. [#73694] |
| changed | Updated OpenAI GPT-4 model replacement from gpt-4-turbo to gpt-4.1. [#74065] |
| security fix | Fixed SSRF bypass vulnerability in image proxy endpoint. Fixes CVE-2025-57814. [#73530] |
| security fix | Updated webpack to 5.104.1 to address security vulnerabilities. Fixes CVE-2025-68157 and CVE-2025-68458. [#74019] |
| security fix | Updated CPython standalone to 3.10.20+20260310 in the Python sandbox. Fixes CVE-2025-8869, CVE-2026-1703, and CVE-2025-47273. [#74005] |
| security fix | Updated ajv, markdown-it, and flatted in the workflow code executor. Fixes CVE-2025-69873, CVE-2026-2327, and CVE-2026-33228. [#74004] |
| security fix | Updated Python packages in sandbox environments to address security vulnerabilities. [#73824] |
| security fix | Updated JavaScript packages in sandbox and workflow environments to address security vulnerabilities. [#73823] |
| security fix | Removed deprecated request package. Fixes CVE-2023-28155. [#73513] |
| security fix | Updated backend npm packages to address security vulnerabilities. Fixes CVE-2025-25288. [#73503] |
| security fix | Updated @smithy/config-resolver to address GHSA-6475-r3vj-m8vf. [#73496] |
| security fix | Removed Cargo.lock from the backend Docker image to address security vulnerabilities. [#73994] |
| security fix | Removed dead hoek dependency and updated coveralls. Fixes CVE-2020-36604 and CVE-2018-3728. [#74024] |
| 35 changes | |