Skip to content

budibase

v3.39.19 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Developer Productivity
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai-app-builder ai-applications crud-app crud-application data-application data-apps
+12 more
internal-tools it-workflows low-code low-code-no-code low-code-platform no-code no-code-platform rest-api-framework sql-gui workflow-apps workflow-automation workflow-engine

Affected surfaces

deps

Summary

AI summary

Updates deps, deps-dev, and ci across a mixed release.

Full changelog

What's Changed

  • tighten user update check by @andz-bb in https://github.com/Budibase/budibase/pull/18990
  • Merge RAG logs with the request logs on LiteLLM by @adrinr in https://github.com/Budibase/budibase/pull/18988
  • build(deps): bump dompurify from 3.4.0 to 3.4.10 in the all-non-major-security group across 1 directory by @dependabot[bot] in https://github.com/Budibase/budibase/pull/18993
  • Feature/api connectors automations by @melohagan in https://github.com/Budibase/budibase/pull/18978
  • build(deps-dev): bump vite from 7.3.2 to 7.3.5 by @dependabot[bot] in https://github.com/Budibase/budibase/pull/18998
  • build(deps): bump the all-non-major-security group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/Budibase/budibase/pull/18995
  • build(deps-dev): bump @babel/core from 7.29.0 to 7.29.6 by @dependabot[bot] in https://github.com/Budibase/budibase/pull/18997
  • build(deps): bump protobufjs from 7.5.8 to 7.6.4 by @dependabot[bot] in https://github.com/Budibase/budibase/pull/18996
  • Raise single-image HEALTHCHECK start-period from 45s to 300s by @Stropdasman in https://github.com/Budibase/budibase/pull/18991
  • ci: pin third-party GitHub Actions to commit SHAs (supply-chain hardening) by @eliottreich in https://github.com/Budibase/budibase/pull/18960
  • translate app filter operator labels by @ConorWebb96 in https://github.com/Budibase/budibase/pull/19000
  • Reduce PostHog feature flag polling interval by @adrinr in https://github.com/Budibase/budibase/pull/19002
  • Improve Delay automation step by @melohagan in https://github.com/Budibase/budibase/pull/18981

New Contributors

  • @eliottreich made their first contribution in https://github.com/Budibase/budibase/pull/18960

Full Changelog: https://github.com/Budibase/budibase/compare/3.39.18...3.39.19

Security Fixes

  • ci: pin third-party GitHub Actions to commit SHAs (supply-chain hardening)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track budibase

Get notified when new releases ship.

Sign up free

About budibase

AI agents that run your operations. Model agnostic.

All releases →

Related context

Beta — feedback welcome: [email protected]