Self-hosted Retool Edge release 4.74
Release notes for the Self-hosted Retool 4.74 edge release.
Releases on the Edge channel occur weekly. Each release occurs one week after the equivalent release for cloud-hosted Retool.
Edge releases are available for organizations that want the latest features or to use private beta functionality. Retool recommends most organizations use Stable releases unless you have a specific need for Edge releases and can keep your deployment up-to-date.
Retool supports only the most recent release on the Edge channel. As Edge releases are weekly, bug fixes and improvements are included in the next release. All previous releases are then considered deprecated.
Documentation for this release
Retool's main documentation site reflects the latest Edge release. Since Edge updates weekly and only the most recent release is supported, the docs you're already browsing apply to this release — there's no separate version to switch to.
Self-hosted Retool 4.74
Latest releaseCurrently supported
Edge release notes
Bug fixes, improvements, and changes in this release.
| Type ↑ | Description ↕ |
|---|---|
| 4.74.065 changes↑ | |
| added | Added paging and name filters to the Retool MCP list tools for workflows, groups, folders, and writable app folders, and added app_url to the retool_list_apps and retool_get_app tools. [#86241] |
| added | Added name_contains filtering to the Groups and Folders APIs, and paging and filtering to the Workflows API. [#86749] |
| added | Added a logout() function and a useRetoolAppsAndFolders hook to the new app builder, so apps can sign users out and list the apps and folders the current user can see. [#86694] |
| added | Added Claude Sonnet 5.5 and GPT-6.1 Sol as models for AI queries. [#86492] |
| added | Added a pending function approvals summary to the output of retool push in the Retool CLI. [#85982] |
| added | Added support for the new app builder agent to create MSSQL, Redshift, CockroachDB, AlloyDB, Denodo, and Snowflake Postgres resources. [#85660] |
| added | Added a warning in App Security settings when the frame-ancestors CSP directive allows any HTTPS site to embed apps. [#87229] |
| added | Added a debug console to the new app builder editor with Errors, Logs, and Timeline tabs, plus a status bar summary of errors and warnings with a Fix with AI action. [#86915] |
| added | Added PAGE_VIEW audit log events for published apps built with the new app builder. [#87164] |
| added | Added retool_disable_user and retool_enable_user tools to the Retool MCP server. [#87244] |
| added | Added the retool_add_group_members and retool_remove_group_members MCP tools to manage permission group membership and pending invites from an AI client. [#87238] |
| added | Added space filtering to the retool_list_audit_logs MCP tool and a retool_list_user_spaces tool to find space IDs. [#87292] |
| fixed | Fixed embedded apps in the new app builder blocking full-screen, clipboard, and geolocation access. [#87046] |
| fixed | Fixed the new app builder choosing a default AI model that no available resource could run. [#86945] |
| fixed | Fixed retool status in the Retool CLI failing with a 401 Unauthorized error. [#85997] |
| fixed | Fixed a 403 error when triggering a workflow from a module embedded in a classic app for users without workflow permissions. [#86950] |
| fixed | Fixed Azure AI queries in the new app builder failing when no deployment name was set. [#87212] |
| fixed | Fixed POST /api/resources to return 400 instead of 500 when the request body is invalid. [#86221] |
| fixed | Fixed GET /api/playground/:queryId/latestSave to return 400 instead of 500 for invalid query IDs. [#86978] |
| fixed | Fixed the Code tab in the new app builder not refreshing its file list after restoring a commit. [#87389] |
| fixed | Fixed the permissions V2 migration failure banner continuing to show for organizations that had already finished migrating. [#87175] |
| fixed | Fixed a backend memory leak where pooled Postgres connections kept finished requests in memory, causing heap usage to grow over time. [#87406] |
| fixed | Fixed the Retool CLI not pulling workflow type declarations, so local TypeScript checks could not resolve workflows. [#87341] |
| fixed | Fixed the merge commit created when merging the default branch into a feature branch not being signed on GitHub. [#87449] |
| fixed | Fixed users without the App Builder role landing on a Forbidden page after first sign-in to the new app builder. [#87465] |
| improved | Improved the Retool MCP server by defining an output schema for every tool, so AI clients can see each tool's result fields. [#85871] |
| improved | Improved Retool MCP app sharing: access lists show subject names and where each access level comes from, granting or revoking access explains when nothing changed, and app create and publish results summarize who can open the app. [#86290] |
| improved | Enabled MCP read and write grants to call the workflows API endpoints, which previously required mcp:admin. [#86569] |
| improved | Improved the Function Playground in the new app builder to show dropdowns for boolean and enum parameters. [#86495] |
| improved | Improved the Retool CLI to warn when a checkout is behind main and point to retool pull --from main. [#86688] |
| improved | Improved Google Sheets read and search queries by streaming results by default. [#86992] |
| improved | Improved load time of the new app builder editor by no longer loading the classic app editor code. [#87409] |
| improved | Improved retool status to detect stale workflow type declarations in the Retool CLI and report them on the Backend types line. [#87342] |
| changed | Changed Postgres queries to stream results by default. [#86955] |
| changed | Changed the new app builder to stop generating typed clients for legacy OpenAPI resources that use YAML specs, to prevent app serving out-of-memory errors. [#87045] |
| changed | Changed published apps in the new app builder to hide the edit footer when embedded in an iframe. [#86895] |
| changed | Changed the per-user limit for backend function executions in apps built with the new app builder to 50 concurrent executions. [#85968] |
| changed | Changed the MCP OAuth consent screen to show the name of the requesting client instead of Retool MCP. [#87488] |
| changed | Changed Retool AI queries to fail with the provider's error message when the AI response reports a failure, instead of returning it as query data. [#87189] |
| changed | Changed apps in the new app builder to support embedding in cross-site iframes by default. [#87466] |
| changed | Renamed the Databricks SQL resource to Databricks Lakehouse in the resource picker and form, and pointed Lakebase help to its own guide. [#87469] |
| security fix | Updated the esbuild version pinned in new app builder projects to 0.28.1. Resolves GHSA-g7r4-m6w7-qqqr. [#87073] |
| security fix | Hardened the new app builder editor against writes to protected files through non-canonical paths. [#87304] |
| security fix | Hardened Code Executor so job values can no longer alter its sandbox configuration. [#87316] |
| security fix | Patched jackson-core and jackson-databind in the Java database integration. Resolves CVE-2026-19032, CVE-2026-68497, CVE-2026-83557, CVE-2026-89407, CVE-2026-89425, CVE-2026-91776, and CVE-2026-91777. [#86511] |
| security fix | Patched @opentelemetry/instrumentation-pg so tracing spans no longer include the database username. Resolves GHSA-qqmp-wf37-98f9. [#87343] |
| security fix | Patched @fastify/busboy against multipart header parsing flaws. Resolves GHSA-gxm5-99cw-xjw9 and CVE-2026-19481. [#87337] |
| security fix | Patched geopy in the Python sandbox against a regular expression denial of service. Resolves CVE-2026-77387. [#87032] |
| security fix | Patched basic-ftp against a denial of service in directory listing parsing. Resolves CVE-2026-102990. [#86825] |
| security fix | Patched piscina against unsafe option inheritance that could enable remote code execution. Resolves CVE-2026-102992. [#86817] |
| security fix | Patched joi against a regular expression denial of service and a message prototype replacement flaw. Resolves GHSA-6h2x-m376-mqjq and CVE-2026-90771. [#86497] |
| security fix | Patched dompurify against two sanitization flaws. Resolves GHSA-p98j-92pf-mc4p and GHSA-6688-9rhm-gjv2. [#86820] |
| security fix | Patched markdown-it against quadratic-time parsing that could stall processing. Resolves GHSA-253c-mchw-3w2r. [#86504] |
| security fix | Patched ip-address against IPv6 classification and parsing flaws. Resolves CVE-2026-101910, CVE-2026-101911, CVE-2026-101912, and CVE-2026-101913. [#86501] |
| security fix | Patched probe-image-size against a denial of service in SVG parsing. Resolves CVE-2026-104861. [#87027] |
| security fix | Patched fsspec in the Python sandbox against remote code execution. Resolves GHSA-27vj-qcqg-25rc. [#87340] |
| security fix | Patched @grpc/grpc-js against TLS peer certificate and error message exposure flaws. Resolves CVE-2026-101915 and CVE-2026-101916. [#86818] |
| security fix | Removed unused GraphQL language service packages, eliminating vulnerable @graphql-tools dependencies. Resolves GHSA-6fw5-9hq8-w87g and GHSA-7mx3-vvmw-hjmv. [#87338] |
| security fix | Removed the unused tap dependency, eliminating a vulnerable pacote copy. Resolves CVE-2026-9496. [#84334] |
| security fix | Patched hono against an XSS vulnerability in server-rendered JSX. Resolves CVE-2026-93981. [#86819] |
| security fix | Patched fast-uri against URI port injection, host parsing, and host normalization flaws. Resolves CVE-2026-84292, CVE-2026-84394, and CVE-2026-86472. [#86499] |
| security fix | Updated axios to 1.20.0, including the default workflows library, patching prototype pollution, proxy and redirect bypass, denial-of-service, and header injection flaws. Resolves GHSA-x97p-jq2g-jp4f, GHSA-m8m8-qj5v-23w3, GHSA-vh66-26gq-q6x8, GHSA-9fr6-4gfg-395g, GHSA-r4gj-5m52-g5wh, GHSA-3pq3-5fj3-cg6v, GHSA-44g4-m2mj-wpvx, GHSA-c29m-xwm3-cm6r, GHSA-mghh-pgcx-3jjj, GHSA-542g-h47m-68v8, GHSA-4hqw-qxg8-jxx2, and GHSA-j8rh-479h-cp32. [#86823] |
| security fix | Patched moment to 2.31.0 against loading files outside the locale directory through moment.locale(). Resolves CVE-2026-17495. [#86824] |
| security fix | Patched brace-expansion against stack exhaustion and quadratic-time brace expansion. Resolves CVE-2026-102276, CVE-2026-102278, and CVE-2026-102277. [#86822] |
| security fix | Patched the OpenTelemetry database instrumentation packages used by Sentry so they no longer record database usernames in trace spans. Resolves GHSA-qqmp-wf37-98f9. [#87339] |
| 65 changes | |