Skip to content

bytebase

v3.18.1 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 2d GitOps
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ci-cd data-masking data-security database-access dbeaver security
+13 more
flyway gitops liquibase mongodb mysql oracle pam postgresql schema-migrations snowflake sql-client sqlserver tidb

Affected surfaces

auth breaking_upgrade

ReleasePort's take

Moderate signal
editorial:auto 2d

PostgreSQL now supports pgbouncer transaction pooling (with statement caching disabled) and adds uuidv7() for SQL analysis.

Why it matters: Enables efficient connection management via pgbouncer transaction pooling; introduces uuidv7() built‑in to simplify UUID generation in queries.

Summary

AI summary

Updates 🎄 Enhancements, 🐞 Bug Fixes, and 🏗️ Terraform Update across a mixed release.

Changes in this release

Breaking High

The `--demo` server flag has been removed.

The `--demo` server flag has been removed.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Feature Low

PostgreSQL now supports pgbouncer transaction pooling (statement cache disabled).

PostgreSQL now supports pgbouncer transaction pooling (statement cache disabled).

Source: llm_adapter@2026-06-01

Confidence: high

 —
Feature Low

PostgreSQL recognizes new built‑ins like uuidv7() for SQL analysis and schema diff.

PostgreSQL recognizes new built‑ins like uuidv7() for SQL analysis and schema diff.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Feature Low

TiDB DML rollback and prior‑backup preview functionality is now available.

TiDB DML rollback and prior‑backup preview functionality is now available.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Feature Low

gh‑ost migrations honor the configured data‑source SSH tunnel for both MySQL connection and binlog reader.

gh‑ost migrations honor the configured data‑source SSH tunnel for both MySQL connection and binlog reader.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Feature Low

Non‑read‑only automatic SQL Editor queries now use the admin data source when allowed by policy.

Non‑read‑only automatic SQL Editor queries now use the admin data source when allowed by policy.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Feature Low

Plan detail page layout refreshed for at-a-glance status across specs.

Plan detail page layout refreshed for at-a-glance status across specs.

Source: granite4.1:30b@2026-06-01-audit

Confidence: low

 —
Feature Low

Release-backed (GitOps) plans now show only CHANGES and DEPLOY phases with UI refinements.

Release-backed (GitOps) plans now show only CHANGES and DEPLOY phases with UI refinements.

Source: granite4.1:30b@2026-06-01-audit

Confidence: low

 —
Feature Low

MCP clients can complete OAuth against Bytebase Cloud without manual configuration.

MCP clients can complete OAuth against Bytebase Cloud without manual configuration.

Source: granite4.1:30b@2026-06-01-audit

Confidence: low

 —
Dependency High

Terraform provider version 3.18.1 is now required; webhook URL marked write‑only and `APP_IM` support added to bytebase_setting.

Terraform provider version 3.18.1 is now required; webhook URL marked write‑only and `APP_IM` support added to bytebase_setting.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Bugfix Medium

Multi‑host PostgreSQL failover now honors configured TLS material on every host.

Multi‑host PostgreSQL failover now honors configured TLS material on every host.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Bugfix Medium

Sync Database success toast now renders the actual database name instead of `{{name}}` placeholder.

Sync Database success toast now renders the actual database name instead of `{{name}}` placeholder.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Bugfix Medium

Plan list creator filter now correctly returns users and review badge displays consistently.

Plan list creator filter now correctly returns users and review badge displays consistently.

Source: llm_adapter@2026-06-01

Confidence: high

 —
Bugfix Low

Workload identities distinguished from service accounts in members table; CEL editor restored for role grants.

Workload identities distinguished from service accounts in members table; CEL editor restored for role grants.

Source: granite4.1:30b@2026-06-01-audit

Confidence: low

 —
Bugfix Low

Large target sets in issue/plan overflow view no longer freeze or mis‑render.

Large target sets in issue/plan overflow view no longer freeze or mis‑render.

Source: granite4.1:30b@2026-06-01-audit

Confidence: low

 —
Full changelog

🎄 Enhancements

  • Plan detail page improvements.

    • Refreshed layout. Cleaner layout with at-a-glance plan-check status across all specs and consistent database-target display through every phase.
    • Release-backed plan flow simplified. Release-backed (GitOps) plans now show only two phases — CHANGES and DEPLOY — with minor UI refinements throughout.

  • SaaS: MCP discovery works against Bytebase Cloud. MCP clients (Claude Code, Cursor, etc.) can now complete the OAuth flow against cloud.bytebase.com without manual configuration.

  • PostgreSQL — Compatible with pgbouncer transaction pooling (statement cache disabled) and PostgreSQL 18 (built-ins like uuidv7() and 80+ others are recognized by SQL analysis and schema diff).

  • TiDB — DML rollback / prior-backup preview now works. Queries against columns added out-of-band trigger the standard metadata-resync-and-retry path (matching MySQL / PostgreSQL).

  • gh-ost migrations honor the configured data-source SSH tunnel for both the MySQL connection and the binlog reader.

  • Query data source — Non-read-only automatic SQL Editor queries now use the admin data source when the query data policy allows it. Read-only queries are unaffected.

  • Demo mode removed. The --demo server flag has been removed. This mode was for internal demos (it loads a baked-in SQL dump and a sample admin) and was never intended for production use — if you have --demo in your startup script, drop it and configure instances and users normally.

🐞 Bug Fixes

  • Workload identities are distinguished from service accounts in the members table, and the graphical CEL expression editor is restored for project member role grants.

  • Large target sets in the issue / plan target overflow view no longer freeze or mis-render.

  • The plan list creator filter actually returns users now, and the review badge ("Bypassed" / "Under Review") reads consistently with plan detail.

  • PostgreSQL — Multi-host failover honors Bytebase's configured TLS material on every host, not just the primary.

  • The Sync Database success toast renders the actual database name instead of the literal {{name}} placeholder.

🏗️ Terraform Update

  • Terraform provider 3.18.1 required — Marks the webhook URL as write-only and adds APP_IM support to bytebase_setting. See Migration Guide.

https://github.com/bytebase/bytebase/compare/3.18.0...3.18.1

Before upgrading: 1) Back up the metadata — in-place downgrade is not supported. 2) Do not run multiple containers on the same data directory. 3) Terraform users: upgrade Bytebase server first, then apply the new Terraform config.

Breaking Changes

  • Removed the `--demo` server flag; demo mode is no longer available.
  • Minimum required Terraform provider version bumped to 3.18.1.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track bytebase

Get notified when new releases ship.

Sign up free

About bytebase

World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams. The GitHub/GitLab for database DevSecOps.

All releases →

Related context

Earlier breaking changes

  • v3.18.0 API: Issue.ApprovalStatus moved to top-level ApprovalStatus enum
  • v3.18.0 API: require_2fa renamed to require_mfa in WorkspaceProfileSetting
  • v3.18.0 Terraform provider 3.18.0 required; adds sensitive fields and header blocks
  • v3.18.0 API: plan_spec_update renamed to plan_update with restructured payload

Beta — feedback welcome: [email protected]