Self-hosted Retool Edge release 4.83
Release notes for the Self-hosted Retool 4.83 edge release.
Releases on the Edge channel occur weekly. Each release occurs one week after the equivalent release for cloud-hosted Retool.
Edge releases are available for organizations that want the latest features or to use private beta functionality. Retool recommends most organizations use Stable releases unless you have a specific need for Edge releases and can keep your deployment up-to-date.
Retool supports only the most recent release on the Edge channel. As Edge releases are weekly, bug fixes and improvements are included in the next release. All previous releases are then considered deprecated.
Documentation for this release
Retool's main documentation site reflects the latest Edge release. Since Edge updates weekly and only the most recent release is supported, the docs you're already browsing apply to this release — there's no separate version to switch to.
Self-hosted Retool 4.83
Latest releaseCurrently supported
Edge release notes
Bug fixes, improvements, and changes in this release.
| Type ↑ | Description ↕ |
|---|---|
| 4.83.056 changes↑ | |
| added | Added support for using Google Cloud Datastore resources in the app builder. [#84716] |
| added | Added an informational note on legacy Loop blocks in workflows that explains how to switch to the updated Loop block. [#88460] |
| added | Added the retool_login_status MCP tool to enable clients to view the current OAuth user, organization, client, and scopes. [#88496] |
| added | Added a Resources page warning for resources whose custom authentication steps load preinstalled libraries. [#88319] |
| added | Added a warning banner on the Resources page for Microsoft SQL resources that use Windows Authentication, which is deprecated. [#88317] |
| added | Added support for sending a message history, not only a single instruction, to AI providers in the app builder. [#87581] |
| fixed | Fixed per-user OAuth resource sign-in failing with a CSRF error in published apps on self-hosted instances with hostname mode turned on. [#88685] |
| fixed | Fixed the app builder function playground History tab showing a previous-version banner for runs that used the current code. [#88572] |
| fixed | Fixed the app builder file search bar being hidden when returning to the Code tab with an active search. [#88392] |
| fixed | Fixed source control deploys reporting Git provider rate limits as bad commits and emailing admins. [#87254] |
| fixed | Fixed Download as ZIP exporting the starter template for unpublished apps built in the app builder. The option is now disabled until the app is published, and the download endpoint returns 409. [#88780] |
| fixed | Fixed a prompt to the app builder AI being lost when the sandbox restarted before saving it. [#88410] |
| fixed | Fixed Cmd/Ctrl+F in the app builder code editor to focus and select the find query when the find bar is open. [#88395] |
| fixed | Fixed encrypted reasoning from OpenAI models being dropped when it arrives late in a streamed response. [#88595] |
| fixed | Fixed leftover app builder jobs not draining after switching between pg-boss and Temporal. [#88610] |
| fixed | Fixed app builder chat ending a turn scrolled up and dropping conversation entries when a save finishes late. [#88560] |
| fixed | Fixed the source control status page retry message to match the one hour maximum retry interval. [#88777] |
| fixed | Fixed creating a workflow from a template on Workflows Home hanging when no folder is selected. [#88885] |
| improved | Improved app builder reliability by downsampling large images sent to the AI model, avoiding request size limit errors. [#88438] |
| improved | Improved the app builder prompt on the home page with a larger input and updated styling. [#88515] |
| improved | Improved the app builder selection prompt to open next to the selected element and lock preview scrolling while it is open. [#88679] |
| improved | Improved the Edit app footer on published apps so it can be minimized, and the choice persists across refreshes. [#88184] |
| changed | Changed app builder publishing to check function approvals and validate backend code in the publish sandbox for editor and MCP publishes. [#88801] |
| changed | Changed Retool Storage to always clean up abandoned and stray uploads. Removed the RETOOL_STORAGE_FILE_SWEEPER_ENABLED and RETOOL_STORAGE_STRAY_FILE_SWEEPER_ENABLED environment variables. [#88174] |
| changed | Changed Smart blocks in workflows to run on the organization's default AI model and removed the model picker. [#88453] |
| changed | Changed app builder background jobs to run in a dedicated pgboss_r2 schema. Jobs left in the previous pgboss2 schema are not migrated. [#88533] |
| changed | Changed the data access enforcement beta setting title and description to match Data Access Enforcement naming. [#88765] |
| security fix | Patched handlebars to address JavaScript injection vulnerabilities. Resolves CVE-2026-106444, CVE-2026-106445, and CVE-2026-106446. [#88111] |
| security fix | Patched libthrift in the Java database connector to stop infinite loops and unbounded recursion on malformed input. Resolves CVE-2026-43871. [#88121] |
| security fix | Patched @modelcontextprotocol/sdk (credential leakage to untrusted authorization servers, session and denial-of-service issues). Resolves CVE-2026-104850, CVE-2026-111767, CVE-2026-111768, CVE-2026-111769, CVE-2026-111771, and GHSA-f897-62hf-6gxq. [#88117] |
| security fix | Patched ip-address to fix quadratic-time IPv6 zone parsing that could block the event loop. Resolves CVE-2026-111997. [#88691] |
| security fix | Patched nodemailer (address parser denial-of-service, file and URL access option bypasses, recipient-domain validation bypasses). Resolves CVE-2026-82659, CVE-2026-110871, GHSA-2x7j-588g-ccc2, GHSA-8m3c-c648-2xjj, GHSA-cc9r-2j5m-2m83, GHSA-wmmp-3585-3rmp, GHSA-6vj9-mwq6-2f5v, GHSA-8vvx-rff5-p5rq, GHSA-v53p-9fqp-m79j, GHSA-8c8m-p3m8-cjg8, GHSA-m943-m63m-w62w, GHSA-85x2-q946-cp5h, GHSA-4ffr-jq9g-5ffx, GHSA-g73g-hqqh-jr95, GHSA-4g23-2xm8-66gc, and GHSA-vvjj-xcjg-gr5g. [#88695] |
| security fix | Patched follow-redirects to stop credential headers leaking to another origin on redirects. Resolves CVE-2026-111755 and CVE-2026-111756. [#88350] |
| security fix | Patched aiohttp in the code executor Python sandbox. Resolves CVE-2026-111063, CVE-2026-111064, CVE-2026-111065, CVE-2026-111066, CVE-2026-111748, CVE-2026-111749, CVE-2026-111750, and GHSA-2g87-pp6c-29x5. [#88349] |
| security fix | Patched the Datadog Java tracing agent (dd-java-agent) in the database connector and standard images. Resolves CVE-2026-50270. [#88084] |
| security fix | Patched nanoid to prevent an infinite loop when generating zero-length IDs. Resolves CVE-2026-67213. [#88109] |
| security fix | Patched @hono/node-server to prevent path traversal in static file serving on Windows. Resolves GHSA-frvp-7c67-39w9. [#88114] |
| security fix | Patched body-parser to enforce size limits when an invalid limit option is set. Resolves CVE-2026-12590. [#88119] |
| security fix | Updated the bundled lodash library in the app JavaScript sandbox to 4.18.1. Resolves CVE-2026-4800. [#88095] |
| security fix | Patched immutable to prevent denial of service from oversized lists and hash collisions. Resolves CVE-2026-59879 and CVE-2026-59880. [#88692] |
| security fix | Patched nodemailer to fix address parsing that could add or change email recipients. Resolves GHSA-8c8m-p3m8-cjg8, GHSA-m943-m63m-w62w, and GHSA-85x2-q946-cp5h. [#88831] |
| security fix | Updated the telemetry sidecar base image to Alpine 3.24 to remove the compromised eMudhra emSign intermediate CAs. Resolves CVE-2026-91403 and CVE-2026-111943. [#88682] |
| security fix | Patched markdown-it to fix denial-of-service issues. Resolves CVE-2026-111759, CVE-2026-111758, and CVE-2026-111766. [#88351] |
| security fix | Patched hono to fix a request path decoding issue in serveStatic. Resolves CVE-2026-111757. [#88352] |
| security fix | Patched compression to fix a memory leak when clients disconnect early. Self-hosted instances now serve brotli to clients that accept it. Resolves CVE-2026-87776. [#88113] |
| security fix | Patched undici to fix denial-of-service and Subresource Integrity bypass issues. Resolves CVE-2026-109869, CVE-2026-109924, and CVE-2026-109841. [#88832] |
| security fix | Patched body-parser to fix a denial of service from trailing bytes after a JSON body. Resolves CVE-2026-111181. [#88833] |
| security fix | Patched ajv to fix a regular expression denial of service with the $data option. Resolves CVE-2025-69873. [#88814] |
| security fix | Replaced xlsx with @e965/xlsx in the alasql dependency. Resolves CVE-2023-30533, CVE-2024-22363, CVE-2021-32012, CVE-2021-32013, and CVE-2021-32014. [#88693] |
| security fix | Patched csv-parse to fix prototype replacement when the columns option is enabled. Resolves CVE-2026-85063. [#88694] |
| security fix | Updated dompurify to 3.4.17. Resolves GHSA-cg2g-xh64-v4q7, GHSA-mrv2-3pqr-j5jr, and GHSA-c6gr-qvv4-5v3f. [#88623] |
| security fix | Updated proxy-addr to 2.0.8 to patch IP spoofing through IPv4-mapped IPv6 addresses in trusted proxy matching. Resolves CVE-2026-90711. [#88105] |
| security fix | Blocked npm registry API requests (/-/ paths) from sandboxes through the agent executor proxy. [#88408] |
| security fix | Patched fast-xml-builder against attribute value quote bypass and comment value regex bypass. Resolves CVE-2026-44665 and CVE-2026-44664. [#88813] |
| security fix | Patched source-map-js against event-loop denial of service through indexed source-map section offsets. Resolves CVE-2026-93749. [#88106] |
| security fix | Updated Vite in the app builder sandbox to 8.2.4 to patch multiple vulnerabilities. Resolves CVE-2026-112942, CVE-2026-112943, CVE-2026-112944, CVE-2026-112945, CVE-2026-112946, and CVE-2026-112947. [#88774] |
| 56 changes | |