baserow

New features

• [Database] Show anonymous public view visitors in editor's presence bar #5702
• [Database] Add links and rich formatting to form and field descriptions #1851
• [Database] Data syncs that fetch from a user configured URL (such as a self-hosted GitLab or Jira instance, or an iCal feed) can now be blocked from reaching private network addresses by setting the BASEROW_DATA_SYNC_ALLOW_PRIVATE_ADDRESS env var to false.
• [Core] Monitor celery beat periodic tasks with Sentry cron monitors when Sentry is enabled
• [Core] OAuth2 and OpenID Connect SSO providers with admin configurable URLs can now be blocked from reaching private network addresses by setting the BASEROW_SSO_ALLOW_PRIVATE_ADDRESS env var to false.

Bug fixes

• [Database] Fix link row field modal unselecting newly created rows due to a race condition with real-time updates #5735
• [Builder] Fixed workflow actions inside collection elements failing to resolve the current_record.
• [Core] Prevent impersonating deactivated users via the admin impersonate endpoint
• [Automation] Prevents the webhook address of an HTTP trigger from being changed after it is created
• [Core] Reduce backend memory usage by releasing each API response's memory right after it is sent
• [Database] Show an error on AI fields with a broken prompt and block generating until fixed #3088
• [Core] Workspace import now strictly validates the manifest schema version, and an unsupported version returns a clear invalid file error.

Refactors

• [Core] Simplify 2FA verify endpoint to resolve user identity from the authentication token instead of the request body. #5743
• [Builder] Updated 'formula' references in builder, automation & integrations module so that they now refer to 'expressions'.

New features

• [Database] Group rows by a field directly from its column menu

Bug fixes

• [Database] Fixed data sync crash when syncing a single select field with a default value after source options are modified. #5147
• [Database] Fixed group by settings not being persisted on personal views for viewer role users #5709
• [Builder] Fixed a Repeat element bug that caused overflow when a record contains long unbroken text.
• [Database] Fixes hourly and daily periodic data syncs silently skipping scheduled runs
• [Builder] Improved element internal page navigation by requiring page parameter values. #3110
• [Database] Fixes several N+1 query problems that slowed down some list endpoints
• [Database] Periodic field updates no longer overlap, preventing the same workspace from being processed twice at once.
• [Database] Prevents periodic field updates from timing out on large instances
• [Integration] Resolved a bug which prevented advanced license customers from being able to access the Code and XLS actions.

New features

• [Database] Remembers whether you last opened the comments or history tab when editing a row #2532
• [Builder] Added fixed positioning options to Application Builder header and footer containers. #3559
• [Database] Adds a configurable maximum length for text based field values #5688

Bug fixes

• [Integration] Fix the Send email action using instance SMTP sending from webmaster@localhost instead of the configured FROM_EMAIL. #5640
• [Database] In a restricted view, a row edited so it no longer matches the filters is now removed immediately for the editing user instead of lingering until a refresh. #5660
• [Database] Fixed single select dropdown and presence badge overlap issues on group-by grid view #5684
• [Core] Improve delete audit log entries performance.
• [Builder] Improved anonymous builder dispatch.
• [Database] Resolve the issue with two separate N+1 queries when creating rows.

New features

• [Database] Improve websocket management when the connection is lost #1924
• [Database] Drag and drop ordering of sortings and group bys. #2355
• [Database] Add clear button to the view search #2753
• [Builder] Add burger variant to menu element #3579
• [Builder] clear single-select record selector #3719
• [Database] Show cell editing in real-time in the grid view #3794
• [Core] Add to_json() and from_json() expressions. #3879
• [Database] Add support for importing Excel files into database tables
• [Database] Adds options to leave out the row ID and primary field columns when exporting data #4680
• [Database] Show matching restricted view filters and allow setting default values #4926
• [Core] Added new runtime formulas: number_format(), abs(), null(), to_duration(), and to_datetime(). #4974
• [Builder] Improve drag and drop UX #5143
• [Database] Import into an existing table is now available from the table context menu in the sidebar. #5284
• [Database] Adds option to keep synced rows when they are deleted or hidden in the source table. #5327
• [Core] Added the duration_format() advanced formula, arithmetic support for durations, and an optional duration format argument for the to_duration() function. #5420
• [Integration] Add code service to execute arbitrary JavaScript code in workflow/builder #5424
• [Core] Show the 2FA status in the admin user list and allow instance admins to remove a user's two-factor authentication. #5492
• [Integration] Add batch operations for create/update/delete rows #5543
• [Core] Added the range() runtime formula. #5559
• [Integration] Add a Start workflow action to builder and automations #5561
• [Integration] Add manual trigger to automations #5561
• [Database] Changes to linked tables, formulas and lookups now appear without refreshing #595
• [Database] Add sort to kanban view #764
• [Database] Accept object with ID property as valid value for single/multiple select and link row fields
• [Integration] Add CSV reader service for builder and automations
• [Core] Add members management to builder applications, automations and dashboards
• [Core] Add WebSocket connection and disconnect metrics
• [Integration] Add XLS[X] reader service for builder and automation
• [Automation] Added a new workflow trigger which only executes when specific fields' values change in a table.
• [Database] Adds a "starts with" filter for text fields #1943
• [Builder] Adds Column element layout presets
• [Builder] Allow to click on checkbox label to check them for more browsers
• [Builder] Allow to test actions in preview mode to capture the output
• [Database] Collapse and expand groups in the grid view when grouping by one or more fields. #2257
• [Core] Enables caching by default for improved performance
• [Core] Hardened workspace invitation emails and user name validation to prevent phishing abuse
• [Database] Introduced drop_tsv_columns management command that can drop the tsv_field_* columns that are not used anymore.
• [Builder] Introduced undo/redo and trashing in Application Builder for pages and elements.
• [Automation] Added methods, hooks, and model to track automation usage. #5263

Bug fixes

• [Database] Replace placeholder example data in the JSON and XML import dialogs with clearer contact records so users can see a typical table import format #2953
• [Builder] Show a loading overlay on application builder table elements while ad hoc filters, sorting, or search results are loading. #3510
• [Database] Shows the circular field dependency error in the lookup field form. #3637
• [Core] Fixed a bug where backslash chars couldn't be entered into the formula field. #3720
• [Integration] Set a timeout for the SMTP email service. #3867
• [Integration] Ensure control characters are allowed in the JSON payload of an HTTP request. #3879
• [Database] Fixed flaky formula tests caused by randomly generated field names containing apostrophes #4217
• [Database] Formulas and lookups through a link to the same table now update when the linked row changes #4541
• [Builder] Ignore hidden form field when validation form container submit #5203
• [Core] Prevent expected websocket keepalive timeout logs from being reported to Sentry. #5224
• [Builder] Ensure user roles use locale-aware sorting. #5268
• [Database] Fixed count() returning an array instead of a number for link row fields whose linked primary field is an array formula or lookup. #5276
• [Core] Use the real client IP address in OpenTelemetry request traces when proxy headers are present. #5277
• [Database] Fixed a bug where changing the primary field to a hidden field could keep it hidden in the grid view. #5288
• [Database] Skip invalid formula fields in the periodic field update task. #5298
• [Database] Detect Jira deployment type #5306
• [Builder] Fix custom code editors when deleting the first line #5310
• [Database] Fixed index(), first() and last() formulas crashing on partial arguments. #5320
• [Database] Fixes inserting rows above or below in restricted views #5344
• [Database] Fixed periodic recalculation of formulas that depend on now() across linked tables. #5370
• [Database] Fix periodic field update crash after deleting a field referenced by a formula chain #5371
• [Core] Fixes a server error when submitting an invalid email verification token #5374
• [Core] Hide workspace import/export options for Builder and lower roles. #5440
• [Database] Fix duplicated rows scaling comma-decimal formatted number values #5445
• [Database] Fix airtable import when CDN omits Content-Length #5472
• [Core] Fixed the application icon when duplication an application. #5483
• [Database] Fix MCP create_rows failing when table has rich text fields with @mentions #5493
• [Database] Fix undo/redo failing with PermissionDenied for editors on restricted views #5506
• [Database] Allow invited editors to drag and drop cards in a restricted Kanban view #5568
• [Core] Fixed formula function help tooltips appearing below the data explorer. #5593
• [Core] Accepting a workspace invitation no longer changes the role of an existing member
• [Builder] Add proper error when an InvalidFormulaError is raised
• [Database] Added permission check to unique field values endpoint.
• [Builder] Check permission on the element provided during a collection element data source dispatch
• [Builder] Custom CSS and JS in published applications no longer require !important to override styles
• [Core] Fix backend memory leak by updating Python to 3.14.6
• [Automation] Fix broken workflow after node replacement
• [Dashboard] Fix error when summarizing any array shaped field
• [Automation] Fix export workflow with periodic triggers
• [Integration] Fix importing applications with an SMTP integration that has blank credentials
• [Database] Close the BZPOPMIN client when an MCP server connection is closed.
• [Builder] Fix missing data during dispatch because of previous page visibility
• [Builder] Fix missing data source content in collection element in page headers or footers
• [Database] Fix multiple select field no value in row edit modal.
• [Core] Fix spurious internal error logged when an MCP connection closes
• [Core] Fixes a 403 error that could appear when impersonating a user from the admin area
• [Integration] Fixes a crash when opening user source settings in the application builder
• [Core] Fixes a crash when typing into inputs that unmount during an event
• [Builder] Fixes a file upload error when updating a row that keeps an existing file
• [Core] Fixes a guided tour crash when the highlighted element is not on the page #5377
• [Database] Fixes a server error when adding a sort or grouping to certain views
• [Database] Fixes a server error when creating or importing a table with malformed data #3950
• [Database] Fixes an empty option showing at the top of link-to-table dropdowns in forms #5549
• [Automation] Fixes automation runs not recording the real error when a node hits a database problem
• [Core] Fixes background tasks being stopped early by the default time limit
• [Database] Fixes link row Add new modal showing premature errors and crashing on URL formula fields #3940
• [Database] Fixes multiple select filter options not showing as selected
• [Database] Fixes periodic field updates being stopped before they finish
• [Database] Fixes search index updates failing for tables with date-only formula fields #5363
• [Database] Fixes the link to table field not showing the view it is limited to when editing
• [Builder] Improve column element and data picker style for small screens
• [Database] Improve permissions endpoint query performance by using union instead of OR.
• [Database] Improves escaping of URLs and user input in database views
• [Database] Lets you type negative numbers when filtering by rollup field #3925
• [Database] Moving a row no longer modifies the updated_on value #3054
• [Core] Only delete a workspace on account deletion when a deleted user was its last admin
• [Core] Prevents a malicious display name from running scripts in rich text mentions
• [Database] Prevents spreadsheet formula injection in CSV and Excel table exports
• [Core] Real-time updates now recover when the window is refocused and keep retrying after repeated failures, instead of getting stuck asking to refresh
• [Builder] Resolved a bug in application builder where deleting a row would display an error message.
• [Builder] Resolved a bug which caused invalid expressions to not be styled as invalid.
• [Builder] Resolved a bug which prevented custom favicons from appearing in previewed and published applications.
• [Integration] Resolved a bug which prevented workspace exports from Baserow cloud to be imported into self-hosted environments if a specific generative AI model was chosen.
• [Core] Resolved a sporadic 'querySelector' error which appeared after a dependency was upgraded.
• [Core] Restores real-time updates when returning to an idle tab instead of asking to refresh
• [Database] Search updates now retry automatically after a temporary database connection error
• [Database] Shared and restricted views now update formula, lookup and link cells when related rows change #5657
• [Database] Show the required-field error for an untouched, empty duration field when submitting a form #5422
• [Database] Show unnamed row label for empty linked rows in form dropdowns #5422
• [Database] Show unnamed row label in row history instead of empty boxes #3674
• [Core] Stops invalid MCP requests from being logged as server errors
• [Core] Upgrades backend dependencies to fix known security vulnerabilities

Refactors

• [Database] Speed up loading rows for tables with many single or multiple select fields.
• [Core] Bump to Nuxt4 #5162
• [Automation] Remove Node ID in dispatch errors since the error is scoped to the node history. #4800
• [Core] Refactored the Core HTTP Request service type to return a status code for timeouts. #4973
• [Builder] Removed the unique constraint on Builder page names. #5042
• [Automation] Make AutomationWorkflowHistory.original_workflow non-nullable. #5236
• [Automation] Improved the performance of the Automation Workflow and Node history. #5239
• [Automation] Introduce min retention days for history to keep more entries for recent workflow runs. #5249
• [Automation] Allow to customize history entries from plugins #5616
• [Automation] Added the Slack icon to Node History entries.
• [Database] Field type column conversion in Postgres function instead of pg_temp.
• [Core] Improve error handling in frontend
• [Database] Improve list views endpoint performance when there are many views and fields.
• [Core] Improved the frontend error message to be more specific.
• [Database] Optimize pending search update scheduling for large imports and syncs.
• [Core] Replace custom moveToBody mixin with Vue 3 built-in Teleport component.

Breaking API changes

• [Database] Moving a row no longer updates the row's updated_on field. Last modified fields tied to updated_on (and formulas depending on them) are no longer recomputed when reordering rows. #3054

New features

• [Automation] Send notification when a workflow is disabled #5186
• [Core] Allow self-hosted operators to inject custom client-side scripts via environment variables.

Bug fixes

• [Builder] Resolved a bug which prevented users from creating data sources from the data source dropdown's footer. #5118
• [Core] Give Kuma the current license tier in its context and steer uncertain feature or plan questions to docs search. #5210
• [Core] Hardened user uploaded media serving and neutralized active-content file uploads by default.
• [Builder] stop infinite /dispatch-data-sources/ refetch loop in page editor

Refactors

• [Automation] Optimize Automation History clean-up by moving it to a separate periodic task.

New features

• [Builder] Add 'clear' button to the date input element. #5202
• [Database] Add file attachment support for Anthropic, Mistral and other AI field providers #5154

Bug fixes

• [Database] AI file field is now validated during import #3090
• [Database] Exclude autonumber sequences from schema dump to prevent restore failure #3855
• [Database] Fix negative sign in formula output disappearing when a cell is selected #4323
• [Database] Fix AI field not correctly handling small text files #5082
• [Core] Fix import workspace crashes on retry after failed backend import #5140
• [Database] Fix import of unknown ai generative types #5163
• [Database] Fix notification panel crash when a periodic_data_sync_deactivated notification is rendered #5171
• [Database] Fix link-row group-by crash in grid view with more than 20 linked items #5184
• [Builder] prevent OIDC/SAML form crashes when editing a user source in the application builder #5226
• [Core] Fix RichTextEditor display in row comment notifications #5230
• [Core] Add database connection health check.
• [Database] Create row history entries in batches to avoid memory spikes
• [Integration] Ensure Local Baserow Upsert integration handles field constraint errors.
• [Database] Fix the database API docs page crashing when opening the database list from the header. #5212
• [Database] Fix database filters crashing when select option cells are temporarily null during row evaluation. #5217
• [Core] Custom enterprise logo can be set again
• [Database] Fix field drag-and-drop placeholder being offset by the group-by column width when a group by is active.
• [Database] Fix grid field quick edit crashing when the field update context is unavailable because the user lacks field update permission. #5216
• [Database] fix import preview
• [Core] Fix password reset tokens not being invalidated after use, allowing persistent account takeover. Tokens are now single-use, token expiry reduced to 1 hour, and a confirmation email is sent on every password change. #5165
• [Database] Fix rollup and count fields crashing when a stale in-memory relation points to a deleted field during formula recalculation. #5214
• [Core] Make concurrent index migrations idempotent so they can be re-run after a partial failure.
• [Database] Fix template sync failing when importing enterprise field rules without a license.
• [Automation] Fixed a bug that caused a crash due to a race condition that could happen if a node is deleted while it is being dispatched.
• [Builder] Fixes if() formulas in the Application Builder silently rendering nothing when the condition references an empty field
• [Integration] Improved error handling for the AI Form.

Refactors

• [Automation] Improve rate limiting to support multiple time frames
• [Core] Optimize rate limiting: cache user and settings lookups and reorganize throttling code.

Breaking API changes

• [Core] Workspace invitations no longer support custom messages, and the BASEROW_MAX_PENDING_WORKSPACE_INVITES env var has been removed.

New features

• [Database] Add the array_unique formula function to deduplicate lookup arrays. #2326
• [Builder] Allow to drag and drop element on the page #3634
• [Database] Introduced restricted view ownership type for view-level permissions. #3673
• [Automation] Support automation templates #3871
• [Core] Improved Baserow formula function argument validation. #4532
• [Database] Add the array_slice formula function to extract sub-arrays from lookup arrays. #5053
• [Database] Add instance wide data scanner.
• [Database] Introduced field type that can edit a row via a form view. #2287
• [Database] Allow freezing (pinning) up to 4 columns on the left side of the grid view. #2047
• [Database] Generalize the index formula to work with any array type (not just file fields) and add first and last convenience functions. #5065
• [Core] Introduced optional Cloudflare Turnstile captcha during signup.

Bug fixes

• [Database] Fix index max size error for view sort indexes #2040
• [Database] Fix public view with hidden group by field #4858
• [Core] Switch to insecure alternative for UUID generation when on insecure context like HTTP #4905
• [Database] Rating field now doesn't accept 0 as a valid value in form views when the field is required #4985
• [Database] Fix DatatypeMismatch on bulk insert for tables with formula fields #4992
• [Database] Fix AIField generation for mistral API provider #4994
• [Automation] Fixed a bug that prevented reordering workflows in an automation. #4995
• [Automation] Removed a constraint that forced unique workflow names. #4995
• [Integration] Allow advanced formula for JSON body content of HTTP request node #5002
• [Database] Fix error when changing filter type on link row fields #5014
• [Database] Fix group by counts for link row field #5047
• [Core] Fix [nuxt] instance unavailable errors #5063
• [Database] Ensure primary field always exists on sync table #5088
• [Database] Fix autonumber sequence #5115
• [Core] Filter tokens by workspace membership #5144
• [Database] Fixed slow cleanup of row history table by adding a database index.
• [Builder] Data source context was not reset after a data source creation
• [Automation] Ensure known service errors are logged as warnings to reduce error monitoring noise.
• [Builder] Ensure that the correct error is shown when exceeding the max publish job count.
• [Builder] Ensure the correct error is shown when a page is not found.
• [Automation] Ensure the max publish job count error is shown when exceeding the limit for publishing an Automation Workflow.
• [Automation] Fix bad previous node result inside an iteration
• [Core] Fix date localization not working with non english languages
• [Database] Fix linked row modal checkbox
• [Automation] Fix race condition in loop handling
• [Database] Fix bug where it was not possible to open the row edit modal if the user did not have access to the related table.
• [Database] Fixed survey form navigation with required fields #3188
• [Integration] Fix the wrong from address changed by the email backend
• [Automation] Fixed a bug that caused a crash when trying to view an Automation's settings in development mode.
• [Builder] Fixed a bug where a broken List Rows data source could cause a crash.
• [Builder] Fixed a bug where an unknown timezone could cause a data source dispatch to fail.
• [Automation] Fixed a bug where automation workflow history entries were being deleted for running workflows.
• [Automation] Fixed a bug where node simulation errors weren't immediately shown.
• [Builder] Fixed a bug where reopening the Publish modal while the builder is still publishing can cause an error.
• [Builder] Fixed a crash when fetching custom code for a non-existent builder ID.
• [Builder] Fixed an unhandled error when a user source user logs out and their refresh token is already expired.
• [Integration] Fixed the Slack Bot Form's translations to use the correct placeholders.
• [Database] Forbid wildcard addresses in Postgres data sync
• [Automation] Resolved a bug which prevented certain Baserow field types from being used after a row-change trigger.
• [Database] Resolved an issue which caused AI field formulas to appear twice in the UI.

Refactors

• [Database] Filter out unactionable AxiosErrors from sentry #5008
• [Core] Silence defined error codes in Sentry #5011
• [Core] Add affected users count to frontend sentry reports #5028
• [Core] Harden workspace import ZIP extraction against malformed archives #5111
• [Core] Replace udspy with pydantic-ai
• [Database] Optimized table deletion (trash) by batching field operations.
• [Core] refactor MCP tools; share AI Assistant capabilities
• [Database] Removed the use of advocate for the Jira data sync so that a connection can be made to the local network.
• [Database] Replace LangChain with pydantic-ai for the AI field and the AI prompt node
• [Core] Use Postgres EXPLAIN-based approximate count for audit log pagination to avoid expensive COUNT(*) on large tables.

Breaking API changes

• [Integration] Instance SMTP configuration is used by default to send e-mails with the Send email action. Set BASEROW_INTEGRATION_ALLOW_SMTP_SERVICE_TO_USE_INSTANCE_SETTINGS=false env var to disable this behaviour. #4999

Bug fixes

• [Integration] Resolved a bug in the periodic trigger which prevented it from being scheduled correctly.

Bug fixes

• [Database] Remove ollama dependency #4962
• [Core] Fix a bug that caused an error when running the backend and frontend images as different users.
• [Core] Fix error page on token expiration to redirect to login
• [Builder] Fixed a bug that could cause a stale page ID to be set even after deleting the page.
• [Core] Improved the scheduling system in the periodic service.
• [Builder] Resolved a bug where a container-type element with a visibility condition would be unable to use form data in its formula.
• [Automation] Resolved a bug which caused the periodic trigger to reset its minute value if the interval was set to minute.
• [Automation] Resolved an issue which prevented hour and minute values from persisting in the periodic trigger form.

Refactors

• [Automation] Add support for dispatching automation nodes asynchronously. #3838
• [Database] Update langchain to 0.3.28 #4965

Bug fixes

• [Database] Migrate jira sync table endpoint #4888
• [Database] Fix number formatting for row history entries #4898
• [Core] Re-add docker entrypoint in the web-frontend image for backward compatibility with custom docker-compose or Helm charts that override the container command.
• [Automation] Resolved an issue which prevented router nodes from being renamed once they had branches.
• [Automation] Resolved an issue which prevented summarize rows nodes in automation workflows from working correctly.
• [Builder] Resolved an issue which prevented the application builder table element's boolean fields from being checked correctly.

Refactors

• [Core] Upgrade sentry to resolve a CVE in minimatch