Nhost

v@nhost/[email protected] Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1d API Development

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

authentication backend backend-as-a-service database firebase flutter

+12 more

graphql hasura javascript nextjs nhost postgresql react serverless serverless-functions storage typescript vue

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 1d

The @nhost/dashboard v2.64.0 release adds several UI enhancements and bug fixes while updating all runtime dependencies to patched versions.

Why it matters: All runtime dependencies are updated to patched versions (severity 90), eliminating known vulnerabilities across the dashboard stack.

Summary

AI summary

Updates dashboard, 🐛 Bug Fixes, and 🚀 Features across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Update vulnerable dependencies to patched versions Update vulnerable dependencies to patched versions Source: llm_adapter@2026-06-02 Confidence: high	—
Feature
Feature	Low	Add button to refresh materialized views Add button to refresh materialized views Source: llm_adapter@2026-06-02 Confidence: high	—
Feature	Low	Show computed fields in schema diagram Show computed fields in schema diagram Source: llm_adapter@2026-06-02 Confidence: high	—
Feature	Low	Resolve sizing, color, and delay API gaps in v3/spinner Resolve sizing, color, and delay API gaps in v3/spinner Source: llm_adapter@2026-06-02 Confidence: high	—
Feature	Low	Allow empty string as default value Allow empty string as default value Source: llm_adapter@2026-06-02 Confidence: high	—
Feature	Low	Add pagination to SQL editor results Add pagination to SQL editor results Source: llm_adapter@2026-06-02 Confidence: high	—
Bugfix
Bugfix	Medium	Migrate remaining v2 icons (account, layout, pages) Migrate remaining v2 icons (account, layout, pages) Source: llm_adapter@2026-06-02 Confidence: high	—
Bugfix	Medium	Label view tracking toasts for clarity Label view tracking toasts for clarity Source: llm_adapter@2026-06-02 Confidence: high	—
Bugfix	Medium	Improve serverless function overview and link commits to its deployment Improve serverless function overview and link commits to its deployment Source: llm_adapter@2026-06-02 Confidence: high	—
Bugfix	Medium	Remove useAdminApolloClient integration Remove useAdminApolloClient integration Source: llm_adapter@2026-06-02 Confidence: high	—
Bugfix	Low	Block generated columns from insert/update permissions and presets in database page Block generated columns from insert/update permissions and presets in database page Source: granite4.1:30b@2026-06-02-audit Confidence: low	—
Bugfix	Low	Differentiate table‑like object types in schema diagram Differentiate table‑like object types in schema diagram Source: granite4.1:30b@2026-06-02-audit Confidence: low	—
Bugfix	Low	Surface materialized views in the schema diagram Surface materialized views in the schema diagram Source: granite4.1:30b@2026-06-02-audit Confidence: low	—
Bugfix	Low	Avoid flaky lychee check in cron trigger tests Avoid flaky lychee check in cron trigger tests Source: granite4.1:30b@2026-06-02-audit Confidence: low	—
Bugfix	Low	Update Playwright dependency Update Playwright dependency Source: granite4.1:30b@2026-06-02-audit Confidence: low	—
Bugfix	Low	Enable hover tooltip for storage data cells Enable hover tooltip for storage data cells Source: granite4.1:30b@2026-06-02-audit Confidence: low	—
Bugfix	Low	Remove IconLink component Remove IconLink component Source: granite4.1:30b@2026-06-02-audit Confidence: low	—
Bugfix	Low	List all GitHub repositories when connecting a repo List all GitHub repositories when connecting a repo Source: granite4.1:30b@2026-06-02-audit Confidence: low	—
Bugfix	Low	Add validation for creating table and column names Add validation for creating table and column names Source: granite4.1:30b@2026-06-02-audit Confidence: low	—

Full changelog

[@nhost/[email protected]] - 2026-06-02

🚀 Features

(dashboard) Add button to refresh materialized views (#4358)
(dashboard) Show computed fields in schema diagram (#4312)
(dashboard) Resolve sizing, color, and delay API gaps in v3/spinner (#4333)
(dashboard) Allow empty string as default (#4210)
(dashboard) Add pagination to SQL editor results (#4343)

🐛 Bug Fixes

(dashboard) Migrate remaining v2 icons (account, layout, pages) (#4293)
(dashboard) Label view tracking toasts (#4356)
(dashboard) Improve serverless function overview and link commits to its deployment (#4330)
(dashboard) Remove useAdminApolloClient (#4367)
(dashboard) Block generated columns from insert/update permissions and presets in database page (#4323)
(dashboard) Differentiate table-like object types in schema diagram (#4319)
(dashboard) Surface materialized views in the schema diagram (#4321)
(dashboard) Avoid flaky lychee check in cron trigger tests (#4381)
(dashboard) Update playwright (#4411)
(dashboard) Enable hover tooltip for storage data cells (#4297)
(dashboard) Remove IconLink component (#4376)
(dashboard) List all GitHub repositories when connecting a repo (#4408)
(dashboard) Add validation for creating table & column name (#4326)

⚙️ Miscellaneous Tasks

(nixops) Drop nix-filter input in favor of pkgs.lib.fileset (#4377)
(nixops) Migrate cache to r2 (#4393)

Chore

(deps) Update vulnerable dependencies (#4359)

Security Fixes

Update vulnerable dependencies (#4359)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Nhost

Get notified when new releases ship.

About Nhost

The Open Source Firebase Alternative with GraphQL.

All releases →