Self-hosted Retool Edge release 4.88
Release notes for the Self-hosted Retool 4.88 edge release.
Releases on the Edge channel occur weekly. Each release occurs one week after the equivalent release for cloud-hosted Retool.
Edge releases are available for organizations that want the latest features or to use private beta functionality. Retool recommends most organizations use Stable releases unless you have a specific need for Edge releases and can keep your deployment up-to-date.
Retool supports only the most recent release on the Edge channel. As Edge releases are weekly, bug fixes and improvements are included in the next release. All previous releases are then considered deprecated.
Documentation for this release
Retool's main documentation site reflects the latest Edge release. Since Edge updates weekly and only the most recent release is supported, the docs you're already browsing apply to this release — there's no separate version to switch to.
Self-hosted Retool 4.88
Latest releaseCurrently supported
Edge release notes
Bug fixes, improvements, and changes in this release.
| Type ↑ | Description ↕ |
|---|---|
| 4.88.044 changes↑ | |
| added | Added a Beta setting in advanced settings to enable Enterprise admins to configure private npm registries for app builder apps and Retool CLI installs. [#88918] |
| added | Added a Beta setting to enable presigned uploads for Retool Storage. [#88175] |
| added | Added optional secondary agent executor JWT public and encryption keys to enable key rotation without interrupting running sandboxes. [#89073] |
| added | Added naming of the retool clone directory after the app, and cloning by app name or slug in the Retool CLI. [#89043] |
| added | Enabled natural language resource connection in the app builder agent by default. [#88788] |
| added | Added support for the GPT 6.1 Terra model in OpenAI resources and AI queries. [#88924] |
| added | Enabled GPT 6.1 Terra as a model in the app builder. [#89005] |
| added | Enabled Gemini 3.8 Flash as a model in the app builder. [#89366] |
| added | Added the retool resource types command and enabled retool resource explore to run outside an app checkout in the Retool CLI. [#86405] |
| added | Added a RESOURCE_QUERY_ACCESS_DENIED audit log event when a query run from a workflow is refused access to a resource. [#88749] |
| fixed | Fixed frontend load failures during rolling deploys when a pod is missing assets from the previous release. [#88892] |
| fixed | Fixed the app builder switching from Temporal to pg-boss on deployments with Retool-managed Temporal. Added RR_POSTGRES_ORCHESTRATION_BACKEND to select pg-boss explicitly. [#88216] |
| fixed | Fixed an app builder editor crash when a chat thread contains a malformed implementation plan. [#88800] |
| fixed | Fixed terminal color codes appearing in app builder publish failure messages in the source control Deployment Details dialog. [#87749] |
| fixed | Fixed the app builder agent leaving merge conflict markers in an app after a paused git merge. [#88987] |
| fixed | Fixed MongoDB queries failing with connection errors when workflows ran async and standard queries together. [#89110] |
| fixed | Fixed the retool_get_workflow and retool_delete_workflow MCP tools to validate workflow IDs as UUIDs and accept upper-case IDs. [#88996] |
| fixed | Fixed MCP workflow run tools always returning null for completed_at and created_by. [#89000] |
| fixed | Fixed the retool_list_folders and retool_get_folder MCP tools failing on orgs with file, process, or universal folders. [#88995] |
| fixed | Fixed Version History in the app builder showing a branch as Published after new commits were pushed with the Retool CLI. [#88204] |
| fixed | Fixed retool push in the Retool CLI rejecting nested pnpm-lock.yaml files. [#89341] |
| fixed | Fixed the retool clone folder-taken hint in the Retool CLI so the suggested command works for app names with spaces. [#89167] |
| fixed | Fixed publishing an app builder app failing with a Cannot find module error when the app's main branch tracked part of node_modules. [#89367] |
| fixed | Fixed the Nonce provided is invalid or already redeemed error when pressing back in an embedded classic app. [#89298] |
| fixed | Fixed popup-based MCP clients, such as Gemini Enterprise, being unable to complete the MCP OAuth flow. [#89373] |
| fixed | Fixed protected Agents failing to open with a misleading permissions error after creating or switching to a source-control branch. [#89281] |
| improved | Lifted the maximum date range limit in AI visibility settings. [#89081] |
| improved | Reduced each user in retool_list_audit_logs MCP tool results to id and email. [#88994] |
| improved | Clarified that deleting a workflow through the API or MCP is permanent and skips Trash. [#88999] |
| changed | Dropped Beta badges from the app builder. [#89050] |
| changed | Enabled skipping release artifacts that already exist during full source control deploys by default. [#89131] |
| changed | Changed bare retool init in the Retool CLI to create a new directory when the current one has files. [#89119] |
| changed | Changed retool check in the Retool CLI to stop overwriting modified platform-owned files and added retool check --fix to repair them. [#84656] |
| changed | Changed on-prem startup to create the ADMIN_USER_EMAIL admin user only when the admin org is first created, so a deleted admin is no longer recreated on restart. [#89293] |
| removed | Removed Microsoft SQL Server connector versions 1 and 2. All SQL Server resources now use version 3. [#88278] |
| security fix | Disabled git hooks and fsmonitor for all git commands the backend runs, preventing code execution from repository hooks during source control sync. [#88915] |
| security fix | Patched setuptools in the code executor Python sandbox against a path traversal in legacy namespace-package installs. Resolves GHSA-xmj3-9gf7-h52w. [#88836] |
| security fix | Revoked existing sessions when an email and password account is first linked to Google sign-in. [#87080] |
| security fix | Hardened Azure Repos source control clones by refusing repositories that contain .git entries or symlinks. [#89054] |
| security fix | Patched sharp in the app builder sandbox runtime. Resolves CVE-2026-96889 and GHSA-wq5f-xc86-pv6w. [#88914] |
| security fix | Stopped logging password hashes in the compromised-password check and fixed DO_HIBP_CHECK=false flagging every login as weak. [#89141] |
| security fix | Patched json5 against prototype pollution through a __proto__ key in parsed input. Resolves CVE-2022-46175. [#88724] |
| security fix | Patched fast-uri. Resolves CVE-2026-110095, CVE-2026-110180, CVE-2026-110306, and CVE-2026-110725. [#88834] |
| security fix | Patched yaml in the workflows code executor environment. Resolves CVE-2026-33532. [#88817] |
| 44 changes | |