Self-hosted Retool Edge release 3.375
Release notes for the Self-hosted Retool 3.375 edge release.
Releases on the Edge channel occur weekly. Each release occurs one week after the equivalent release for cloud-hosted Retool.
Edge releases are available for organizations that want the latest features or to use closed beta functionality. Retool recommends most organizations use Stable releases unless you have a specific need for Edge releases and can keep your deployment up-to-date.
Retool supports only the most recent release on the Edge channel. As Edge releases are weekly, bug fixes and improvements are included in the next release. All previous releases are then considered deprecated.
Self-hosted Retool 3.375
No longer supported
Edge release notes
Bug fixes, improvements, and other incremental updates across all edge releases in this release.
| Type | Description |
|---|---|
| 3.375.036 changes↑ | |
| added | Added a Clear action to the Google Sheets integration to clear a range of cells. [#75335] |
| added | Added a timescale selector to the Timeline component for Week, Month, Quarter, and Year views. [#74940] |
| added | Added audit log events for app theme creation, updates, deletion, and branding setting changes. [#75129] |
| added | Added an authentication prompt when opening an agent chat with no messages. [#75035] |
| added | Added the offline assets tab and Offline Asset PDF source option to all mobile app settings. [#75230] |
| fixed | Fixed AWS SigV4 signing to derive host from request URL, resolving AccessDenied errors. [#75354] |
| fixed | Fixed S3 query Max Keys validation incorrectly rejecting numeric values. [#75323] |
| fixed | Fixed Snowflake connection test to correctly validate connections and preserve failure details. [#75349] |
| fixed | Fixed MongoDB SCRAM-SHA-256 authentication failures with the upgraded MongoDB 4.17 driver. [#75405] |
| fixed | Fixed 'Failed to Open App' error after navigating to a new app via a custom login page. [#74871] |
| fixed | Fixed query reordering failures in apps with modules during simultaneous multiplayer editing. [#75417] |
| fixed | Fixed the app editor remaining in multiplayer mode when previewing a previous app version. [#75018] |
| fixed | Fixed UI issues for agents with view-only permissions, including false error banners. [#75265] |
| fixed | Fixed Android mobile app rendering issues including clipped modals and invisible text in alerts. [#75023] |
| fixed | Fixed iOS camera and barcode scanner not remounting correctly after navigation. [#75022] |
| fixed | Fixed Camera and Image Input preview UIs in the mobile app to respect device safe areas. [#75198] |
| fixed | Fixed JavaScript query timeouts being incorrectly reported as out-of-memory errors. [#75452] |
| fixed | Fixed the resource usage count for AI resources to include Assist, Ask AI, and Vector instances. [#75345] |
| improved | Introduced a warning when reconfiguring a Retool Database that existing app and query references will break. [#75453] |
| improved | Introduced a warning when deleting an AI resource that is configured for Assist or Ask AI. [#75325] |
| improved | Enabled gRPC connection pooling by default, improving performance for gRPC resource queries. [#75357] |
| improved | Enabled structured REST API query mode by default for resources with an OpenAPI spec configured. [#75295] |
| improved | Improved SQL query streaming performance by batching model updates until the stream completes. [#71114] |
| security fix | Blocked JNDI injection in JDBC connection strings to prevent remote code execution via DB2 driver. [#75194] |
| security fix | Upgraded axios to 1.15.0 to fix a SSRF vulnerability in NO_PROXY handling. Fixes CVE-2025-62718. [#75188] |
| security fix | Upgraded protobufjs to fix a gRPC schema code injection vulnerability. Fixes CVE-2026-41242. [#75528] |
| security fix | Upgraded d3-color to 3.1.0 to fix a ReDoS vulnerability in color parsing functions. [#75430] |
| security fix | Upgraded hono and nodemailer to fix SSE injection and static file security vulnerabilities. [#75347] |
| security fix | Disabled JavaScript evaluation in the PDF Viewer component to prevent script execution. Fixes CVE-2024-4367. [#75098] |
| security fix | Upgraded webpack-dev-server to 5.2.3 to fix host header bypass vulnerabilities. Fixes CVE-2025-30359 and CVE-2025-30360. [#75113] |
| security fix | Upgraded path-to-regexp to fix multiple ReDoS vulnerabilities. [#75106] |
| security fix | Upgraded lodash to 4.18.1 to fix a prototype pollution vulnerability. Fixes CVE-2026-4800. [#75138] |
| security fix | Upgraded the tar package in workflow code execution to fix a path traversal vulnerability. Fixes CVE-2026-23745. [#75237] |
| security fix | Applied SSRF protection to vector URL crawling to prevent DNS rebinding attacks. [#75286] |
| security fix | Upgraded Java backend dependencies to address multiple security vulnerabilities. [#74790] |
| security fix | Upgraded Tomcat in the Java database connector to 10.1.54 to fix security vulnerabilities. [#75346] |
| 36 changes | |