Self-hosted Retool stable release 3.284
Release notes for the Self-hosted Retool 3.284 stable release.
Retool releases a version on the stable channel each quarter. A stable release is generally four versions behind the cloud-hosted version at the time.
Preparation and testing of a stable version occurs approximately four weeks prior to its release. Stable releases are rigorously tested before they are published. As the release cycle is less frequent, administrators can more easily maintain and upgrade deployments.
Retool supports each stable release for six months. During this time, Retool will release patch updates that contain bug fixes or security updates. Patch updates do not contain functionality changes and can be applied more quickly than performing a full version upgrade.
After six months, a stable release is considered deprecated. You can continue using a deprecated release but it will no longer receive updates. At this time, you should upgrade to the latest stable release.
Self-hosted Retool 3.284
No longer supported
| Release | Released | Digest | |
|---|---|---|---|
| First | 3.284.0 | Oct 21, 2025 | sha256:57c2b18ef790aca8ea4eaf16cf41e0e049cf1aa6e87ecd02781938883389508d |
| Latest | 3.284.30 | Apr 24, 2026 | sha256:6fb2a01501c40fa8e30208d509b86bdbc49e7c4a89034ae48867a1b83f7718f0 |
Best practice
Subscribe to the Atom feed for 3.284 to get notified when new patch releases are available.
Major changes in this release
New features, significant changes, and any actions required when upgrading.
| Type ↕ | Change ↑ |
|---|---|
| improved | Custom component support library update Retool updated the custom component support library to version 1.9.0, which adds a new verbose option with `deploy` and `sync` commands. |
| new | Databricks Lakebase integration Databricks Lakehouse integration is now available. |
| new | General availability of Fullstory integration Capture user app behavior for use with Fullstory. |
| new | General availability of internationalization Internationalization is now generally available |
| new | Multi-instance releases for Source Control Source Control multi-instance releases are now supported. |
| new | OAuth 2.0 available for MCP tools on Agents OAuth support for MCP agents is now available. |
| new | Performance monitoring available in public beta Use Retool's performance monitoring integration to send page load and query traces to Datadog or Sentry. |
| new | Public beta: Assist Use Assist to generate and edit apps with AI. |
| new | README improvements for apps The README is now included in the **Pages** list of the app IDE and can be generated automatically with AI. |
| removed | Removal of unsupported JDBC connectors Retool removed some JDBC connectors that were inadvertently included in certain self-hosted release versions. |
| improved | Restrict users from creating draft apps You can now restrict users from creating draft apps. |
| new | Result sync in Invoke Agent block Automate human work with AI. |
| new | Role-based permissions Granular admin permissions using role-based access control is now in beta. |
| new | Source Control available for Agents Protect agents with Source Control. |
| new | Support for branch merging with Source Control You can now integrate changes from your default branch from within the App IDE. |
| improved | Update to default user permissions on Business and Enterprise plans For new organizations, the **All Users** group has no permissions by default. |
| 16 changes | |
Patch release notes
Bug fixes, improvements, and other incremental updates across all patch releases in this release.
| Type | Description |
|---|---|
| 3.284.301 change↑ | |
| security fix | Fixed DOM-based XSS vulnerability in legacy custom component iframe endpoints. [#75885] |
| 3.284.291 change↑ | |
| security fix | Updated protobufjs to 7.5.5, jsPDF to 4.0.0, DOMPurify to 3.4.0, and canvg to 3.0.11 in the Code Executor sandbox environment, and protobufjs in the gRPC connector. Fixes CVE-2026-41242 and CVE-2023-36665 (protobufjs), CVE-2025-68428, CVE-2025-29907, and CVE-2025-57810 (jsPDF), CVE-2025-25977 (canvg), and CVE-2025-26791, CVE-2025-15599, CVE-2026-0540, CVE-2026-41240, CVE-2026-41239, and additional XSS bypass vulnerabilities (DOMPurify). [#75595] |
| 3.284.241 change↑ | |
| improved | Improved workflow block result storage configuration with WORKFLOW_BLOCK_STORAGE_LOCATION environment variable for switching between PostgreSQL and S3 storage. [#70932] |
| 3.284.231 change↑ | |
| changed | Removed deprecated Claude Sonnet 3.7 and Claude Haiku 3.5 models from Assist and updated fallback configurations to use Claude Sonnet 4.5. [#70143] |
| 3.284.222 changes↑ | |
| changed | Changed required permission level for folder delete, rename, and move to trash operations from edit to own access. [#71530] |
| security fix | Fixed authorization bypass vulnerability in folder deletion that allowed users without proper permissions to delete folders. [#71481] |
| 3.284.212 changes↑ | |
| fixed | Fixed an issue with source control manifest UI not correctly navigating to directory contents. [#71478] |
| security fix | Fixed a security vulnerability in the Mailgun email webhook endpoint that could allow an unauthenticated attacker to exfiltrate the Mailgun API key. [#71482] |
| 3.284.203 changes↑ | |
| fixed | Fixed an issue where global error handlers for workflows would trigger even when errors were already handled by block-level On Error handlers. [#70592] |
| fixed | Fixed an issue where Azure Repos source control diffs included directory entries as files, which caused deployment errors during partial deploys. [#71155] |
| fixed | Fixed an issue where admins were unable to delete or move workflows when VERSION_CONTROL_LOCKED is enabled. [#71231] |
| 3.284.162 changes↑ | |
| security fix | Fixed XSS vulnerability in REST API custom authentication by adding validation for custom auth URLs. [#70006] |
| fixed | Fixed an issue in Secrets Manager where HashiCorp Vault secret lookups may fail when the lookup occurs very near to the access token expiration time. [#70613] |
| 3.284.152 changes↑ | |
| added | Added focus() method to HTML component to programmatically set focus to the first focusable element. [#70274] |
| added | Added a search option to the Groups page. [#68732] |
| 3.284.141 change↑ | |
| security fix | Patched XSS vulnerability in the Rich Text Editor component. [#69973] |
| 3.284.131 change↑ | |
| security fix | Upgraded jsPDF library to version 4.0.0 to address CVE-2025-68428. [#69875] |
| 3.284.121 change↑ | |
| fixed | Fixed an issue that caused an error when connecting to Snowflake via OAuth. Retool no longer sends the parameter prompt. This extension to the OAuth protocol is not supported by Snowflake, and was ignored in the past, but now Snowflake treats it as an error. [#69651] |
| 3.284.102 changes↑ | |
| security fix | Changed behavior so that the HTTP path field in the Databricks resource now sanitizes semicolons to prevent JDBC parameter injection. If you were previously including connection parameters in the HTTP path (e.g., /sql/1.0/warehouses/abc;parameter=value), these will now be stripped. Use the dedicated connection parameters field instead. [#69287] |
| fixed | Fixed an issue where the Re-auth button did not show for resource query tools in the agents tool creation canvas. [#69533] |
| 3.284.93 changes↑ | |
| improved | Improved accessibility when setting up two-factor authentication. [#69043] |
| removed | Removed sensitive user tokens from audit logs with OAuth2 SSO. [#69278] |
| fixed | Fixed an issue where reset password confirmation emails would still be sent to users even when reset password emails are disabled in an organization. [#69300] |
| 3.284.78 changes↑ | |
| fixed | Fixed the aria-labelledby attribute for the Checkbox Group component. [#67357] |
| fixed | Fixed an issue with multi-spec OpenAPI resources. [#67428] |
| Removed | Unprotected releases will no longer be protected upon app protection. [#68430] |
| added | Added permission guards for resource access via Assist. [#68475] |
| fixed | Fixed an issue with Retool header flashing on redirect to a workspace. [#68490] |
| added | Added support for isEditorMode to QUERY_RUN audit trail log events. [#68577] |
| added | Added the ariaLabel property to Link components. [#68678] |
| fixed | Fixed an issue with multi-instance releases so users can protect an element, create a release artifact, and update the manifest in the same PR. [#68776] |
| 3.284.62 changes↑ | |
| added | Added the RESOURCE_TYPES_DENY_LIST environment variable to prevent users from creating and running against the provided resource types. [#68524] |
| added | Added Google Slides tools to Retool Agents. [#65697] |
| 3.284.54 changes↑ | |
| changed | Changed a rule so that non-admins (with proper role) can provide tokens to create custom components. [#67893] |
| fixed | Fixed a bug that caused a ReferenceError Firebase` raw-mode queries. [#67921] |
| added | Added a .focus() method for Container components. [#67969] |
| fixed | Fixed an issue that prevented the default credential provider from being utilized by SQS and SNS resources. [#68165] |
| 3.284.43 changes↑ | |
| improved | Improved app accessibility by disabling keyboard focus for tooltips. [#67431] |
| fixed | Fixed an issue so that there is proper validation for model provider API keys coupled with model provider settings. [#67882] |
| changed | Changed Assist behavior to allow Retool-managed AI connection features to work with the HTTP_PROXY environment variable. [#67942] |
| 3.284.21 change↑ | |
| fixed | Fixed an issue where an error from an MCP server could cause a Retool backend service to crash. [#67688] |
| 3.284.11 change↑ | |
| added | Added the RTEL_SEND_TO_RETOOL_INPUT_ALLOWLIST environment variable to specify which data to send to Retool's telemetry server. [#67405] |
| 3.284.0115 changes↑ | |
| fixed | Fixed typos in the Create Agent template descriptions. [#62696] |
| improved | Improved the appearance of workflow outlines. [#64293] |
| added | Added support for using secrets in headers when using a custom AI provider. [#64310] |
| added | Adds the draftAppsAccess scope to groups to grant access to draft apps. [#64316] |
| fixed | Fixed an issue with the Notion resource where it may fail to perform requests relating to pages. [#64457] |
| added | Added the ability to persist SAML assertion attributes to user metadata during login (beta feature). [#64479] |
| changed | Changed the default permissions for All users when creating a new organization on the Business or Enterprise plans. This group now has no permissions by default and can be updated as needed. This does not affect existing organizations. [#64480] |
| added | Added support for filtering OpenAPI resources in Assist to provide more relevant schema information based on user requirements. [#64509] |
| added | Added organization-level setting to restrict users to only view their own files in Retool Storage. [#64513] |
| added | Added a new organization setting to restrict Retool Storage file access for users with Use permissions to only files they uploaded. [#64514] |
| added | Added a -v verbose option to the Custom Component Library. [#64543] |
| added | Added a requirement that cloud-hosted organization users must verify their email address prior to making an app public. [#64546] |
| improved | Improved the user experience of the Assist chat thread. [#64560] |
| added | Added endpoint /api/checkReadiness to check if Retool is ready to serve requests. [#64570] |
| fixed | Fixed an issue where the temperature setting was incorrectly shown for GPT-5 model selection in AI queries. [#64589] |
| improved | Improved the user interface for agents when providing additional context. [#64637] |
| improved | Improved the theme details in the Assist response, which is now rendered with color preview. [#64638] |
| fixed | Fixed an issue where an email verification error was incorrectly displayed when sharing a public app. [#64642] |
| fixed | Fixed an issue with the Workflow Outline component display and overflow handling. [#64650] |
| improved | Improved startup performance of workflows. [#64652] |
| improved | Improved the authentication prompt to include any query parameters that might be included. [#64730] |
| improved | Improved the experience of creating eval test cases from Agent chats threads. [#64773] |
| fixed | Fixed an issue where the App inspector may not display labels or values for Pie Chart components added by Assist. [#64775] |
| fixed | Fixed an issue where New thread and View history icons may not appear in the Assist header when using Safari. [#64803] |
| fixed | Fixed an issue where module inputs failed to load. [#64809] |
| added | Added a welcome banner for Assist that introduces users to AI-powered app building capabilities. [#64861] |
| improved | Improved the max iterations error message in Agents to direct users to advanced settings. [#64894] |
| fixed | Fixed an issue where current_user.groups may not be evaluated in resource queries. [#64910] |
| improved | Improved the behavior of Source Control to prevent files or other elements having the same name as a Toolscript folder. [#64912] |
| fixed | Fixed a bug in Google Cloud Storage connector that could make downloads fail. [#64935] |
| changed | Parent window communication in embedded apps is now generally available, and configuring a setting is no longer required. [#65028] |
| added | Added tooltip to workflow name on the index page to increase visibility of long names. [#65054] |
| fixed | Fixed flashing navigation bar when redirecting to landing page. [#65262] |
| fixed | Fixed a bug that prevented configuring a foreign key that references an autoincrement integer column. [#65266] |
| fixed | Fixed an issue with Retool Storage Next Page and Previous Page links that caused them to open content in a new tab. [#65268] |
| fixed | Fixed an issue where Source Control may not function correctly with Azure Repos if Use Basic Auth is enabled. [#65283] |
| fixed | Fixed an issue where an open query could be overwritten by Assist. [#65306] |
| fixed | Fixed an issue causing login loops when signing in with two-factor authentication on Safari. [#65321] |
| improved | Improved the experience of selecting multiple apps. [#65345] |
| fixed | Fixed an issue when reverting changes with Assist where queries did not reflect the reverted values. [#65364] |
| added | Added options to convert empty strings and NULL values to actual null values when importing CSV or Google Sheets data into nullable Retool Database columns. [#65389] |
| improved | Improved workflows code block testing latency. [#65441] |
| fixed | Fixed an issue where CSV and Google Sheets imports incorrectly pre-selected timestamp type for integer columns containing values 1-12. [#65478] |
| improved | Improved error handling for large imports from Google Sheets into Retool Database. [#65508] |
| improved | Improved the target of the SkipLink accessibility feature to focus on main content instead of the header. [#65516] |
| added | Added current_user access in function blocks for custom tools in Agents. [#65520] |
| fixed | Fixed an issue where instrumentation events would have scope errors if they were on the page. [#65525] |
| improved | Improved error logging in jobs runner by including additional license check errors. [#65538] |
| improved | Improved user interface standardization in Retool Database forms by updating toggle components. [#65585] |
| fixed | Fixed accessibility issue with toast notification icons by adding aria roles. [#65589] |
| added | Added a new AI Provider resource type that allows users to configure and manage AI providers (OpenAI, Anthropic, Google AI, etc.) as unified resources. [#65600] |
| added | Added informational banner for organizations with admin granularity enabled on user, groups, and roles pages. [#65607] |
| improved | Improved user interface standardization in Retool Database forms by updating icons and buttons. [#65616] |
| improved | Improved accessibility by adding aria-labels to modal containers. [#65624] |
| improved | Improved keyboard focus management when opening and closing Modal and Drawer components. [#65646] |
| fixed | Fixed inconsistencies in user interface standardization in Retool Database. [#65683] |
| fixed | Fixed aria-labels for Select and Radio components to improve accessibility. [#65689] |
| changed | Changed the internationalization feature to general availability. [#65708] |
| added | Added commit signing option for source control with GitHub. [#65738] |
| added | Added OAuth 2.0 support when adding an MCP server as a tool for an agent. [#65740] |
| fixed | Fixed an issue where Source Control deployments may fail in rare circumstances. [#65769] |
| improved | Improved accessibility of the Drawer frame by adding the ARIA dialog role. [#65774] |
| fixed | Fixed an issue where toggles in the Retool Database UI were not working in the field visibility popup. [#65780] |
| improved | Improved the Retool Database form UI experience. [#65796] |
| fixed | Fixed an issue with the Resource dependencies permissions flyout bar. [#65849] |
| improved | Improved screen reader accessibility of localized content when the locale updates. [#65866] |
| added | Added the ability to copy the secret key during OTP setup instead of only relying on the QR code. [#65894] |
| added | Added support for Hashicorp Vault database engine in Secrets Manager. Vault database role names are treated as secret names, and credential properties (such as username and password) can be accessed using syntax like {{ secrets.pg.username }}. [#65949] |
| fixed | Fixed an issue where landing pages may not work correctly for some groups. [#65952] |
| added | Added .focus() method for Button components. [#65964] |
| improved | Improved accessibility of the Retool app structure tree. [#65969] |
| fixed | Fixed a bug that caused inconsistent behavior of Etags in the public API for Source Control configuration. [#66013] |
| fixed | Fixed an issue where autocomplete popup for resource configuration forms showed JavaScript keywords in places where only constants are allowed. [#66132] |
| fixed | Fixed an issue where published releases weren't being updated properly in the UI without a refresh. [#66150] |
| added | Added organization information to the "Login from new IP address" email to reduce user confusion. [#66154] |
| fixed | Fixed an issue where modal dialogs would not display properly due to stale component state. [#66203] |
| improved | Improved test interface by disabling the Run all tests button when no tests exist. [#66205] |
| added | Added capability for admin users to be able to edit and delete Source Control branches created by other users. [#66234] |
| added | Added a description for embedded apps. [#66253] |
| improved | Improved alert styling to enhance icon contrast in light mode. [#66291] |
| improved | Improved the layout of the Verify Email page. [#66294] |
| improved | Improved test suite management by automatically removing empty test suites when closing without a name. [#66303] |
| improved | Improved the agent-worker configuration to be simplified, and eliminate the need for WORKER_TEMPORAL_TASKQUEUE. [#66340] |
| changed | Changed permission configuration so that users who do not have permission for an agent, regardless of whether or not they have permission for a workflow, will be unable to see the Agents tab in the navigation bar. [#66421] |
| fixed | Fixed an issue with Anthropic API key handling when using a custom proxy. [#66441] |
| improved | Improved the Verify your email message in the Share modal for better user clarity. [#66456] |
| fixed | Fixed an issue that caused idle-in-transaction errors for releases in Source Control deploys. [#66474] |
| improved | Improved latency. [#66525] |
| changed | Changed the default app width to be 1200px wide. [#66569] |
| deprecated | Deprecated Gemini 1.5 models. Gemini 2.0 Flash will be used instead. [#66571] |
| fixed | Fixed an issue where a Loop block input showed the block ID when positioned after a Branch block. Also fixed an issue that caused a missing dependencies warning not showing in the Loop block. [#66598] |
| fixed | Fixed an issue that prevented AskAI from being used when OpenAI provider BYOK or managed key was not configured. [#66676] |
| added | Added release_version to apps-related public API endpoints. [#66688] |
| fixed | Fixed a backend error message related to white-labeled mobile apps to be more clear. [#66690] |
| added | Added a Select all button in the access token creation UI. [#66697] |
| added | Added support for the Jira v3 API in the Jira resource type. [#66707] |
| fixed | Fixed an issue that prevented workflow owners without access to the trash folder from deleting their workflows. [#66739] |
| fixed | Fixed an issue with the Select component's aria-activedescendant property [#66758] |
| improved | Improved the accuracy of the step counter shown in Assist threads. [#66763] |
| removed | Remove Last Actions from Assist Tool Call header. [#66767] |
| improved | Improved the consistency with which Assist is able to correctly populate the options of a Select input. [#66773] |
| improved | Improved the display of status text in Assist. [#66782] |
| improved | Fixed an issue where Assist would unnecessarily disable row selection on Table components. [#66789] |
| fixed | Fixed incorrect error messages regarding page scope in the editor for Retool Storage queries. [#66843] |
| fixed | Fixed an issue where Assist sometimes did not provide a title on Modal frames. [#66861] |
| added | Added a new dialog for users to provide feedback for Assist. [#66864] |
| fixed | Fixed an issue with Assist tool call checkmark alignment. [#66942] |
| changed | Changed apps to use a default width of 100%. This reverts a previous change that made apps 1200px wide by default. [#67146] |
| fixed | Added the Retool AI Vector: Retool AI query writers (edit access) can manage vectors to the Beta settings which allows users with Retool AI edit permission to use create and manage vector documents. [#67220] |
| fixed | Fixed an issue with resources that use OAuth authentication that prevented them being used being used in workflows. [#67233] |
| fixed | Fixed an issue with skipped releases getting unpublished for users with multi-instance releases and spaces. [#67265] |
| improved | Improved accessibility experience for two-factor authetnication setup. [#67285] |
| fixed | Fixed an issue causing workflows using OAuth resources to break inside of nested workflows. [#67305] |
| added | Added source control protection to Agents. [#67385] |
| fixed | Fixed an issue where the module editor may crash when refreshing. [#67447] |
| 157 changes | |