This release includes 3 security fixes for security teams reviewing exposed deployments.
Topics
+5 more
Affected surfaces
Summary
AI summaryFixed calendar view color panel display issues and unified color experience across select types.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Strengthens Base access permission checks to prevent accessing resources via incorrect Base paths. Strengthens Base access permission checks to prevent accessing resources via incorrect Base paths. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Security | Medium |
Restricts permanent table deletion to authorized users within their Base. Restricts permanent table deletion to authorized users within their Base. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Medium |
Improves cross-database migration reliability, preserving data, schemas, fields, relations, and permissions when moving a Base. Improves cross-database migration reliability, preserving data, schemas, fields, relations, and permissions when moving a Base. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Improves Agent task progress display by showing independent progress for each new task. Improves Agent task progress display by showing independent progress for each new task. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Improves shared access experience by showing node descriptions to anonymous visitors on first open of shared content. Improves shared access experience by showing node descriptions to anonymous visitors on first open of shared content. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Unifies calendar view colors to match single-select and multi-select field colors. Unifies calendar view colors to match single-select and multi-select field colors. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Handles existing Lookup configurations more reliably when switching target fields. Handles existing Lookup configurations more reliably when switching target fields. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Performance | Medium |
Improves AI field batch generation performance by reducing database load from linked updates. Improves AI field batch generation performance by reducing database load from linked updates. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Performance | Medium |
Improves long-running Agent task status sync for consistent updates across page recovery, snapshots, and real-time views. Improves long-running Agent task status sync for consistent updates across page recovery, snapshots, and real-time views. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Performance | Low |
Accelerates grouped audit log browsing for self‑hosted instances. Accelerates grouped audit log browsing for self‑hosted instances. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Performance | Low |
Optimizes complex field dependency calculations for stable large Base recalculations. Optimizes complex field dependency calculations for stable large Base recalculations. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes Lookup field configuration errors when switching target fields after selecting a date field. Fixes Lookup field configuration errors when switching target fields after selecting a date field. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixes calendar view color panel display issues. Fixes calendar view color panel display issues. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixes Lookup field display issues where UI shows empty while APIs return data. Fixes Lookup field display issues where UI shows empty while APIs return data. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Improves view filter stability to prevent crashes when filtering by affected Lookup fields with missing options. Improves view filter stability to prevent crashes when filtering by affected Lookup fields with missing options. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Improves Lookup field option sync after source field option changes. Improves Lookup field option sync after source field option changes. Source: llm_adapter@2026-07-16 Confidence: low |
— |
| Bugfix | Low |
Fixes workflow permission issues for viewing, running, testing, copying, enabling, disabling, and deleting workflows. Fixes workflow permission issues for viewing, running, testing, copying, enabling, disabling, and deleting workflows. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
Full changelog
Fixes & Improvements
- Improved shared access experience: Anonymous visitors now see node descriptions when first opening shared content.
-
Improved cross-database migration reliability: Moving a Base now better preserves data, schemas, fields, relations, and permissions.
-
Improved Agent task progress display: Each new task shows independent progress, avoiding interference from previous task status.
-
Fixed Lookup field configuration errors: Switching target fields after selecting a date field no longer causes page errors.
-
Improved Lookup field configuration updates: Existing Lookup configurations are handled more reliably when switching target fields.
-
Improved AI field batch generation performance: Reduced database load from linked updates during large-scale AI content generation.
-
Improved complex field dependency calculations: Dependency handling is more efficient, making large Base recalculations more stable.
-
Fixed calendar view color panel display: Color options now display correctly.
-
Unified calendar view color experience: Calendar colors now match single-select and multi-select field colors.
-
Strengthened Base access permission checks: Prevents accessing other Base resources through incorrect Base paths.
-
Fixed workflow permission issues: Strengthened checks for viewing, running, testing, copying, enabling, disabling, and deleting workflows.
-
Fixed table permanent deletion permissions: Tables can only be permanently deleted by authorized users in their Base.
-
Improved Self-hosted audit log loading speed: Grouped audit log browsing is faster and smoother.
-
Improved long-running Agent task status sync: Task status is more consistent across page recovery, snapshots, and real-time updates.
-
Fixed Lookup field display issues: Lookup fields based on select fields no longer show empty UI while APIs return data.
-
Improved view filter stability: Views no longer crash when filtering by affected Lookup fields with missing options.
-
Improved Lookup field option sync: Lookup fields better preserve and display options after source field option changes.
Security Fixes
- Strengthened Base access permission checks to prevent unauthorized resource access via incorrect paths
- Fixed workflow permission issues for viewing, running, testing, copying, enabling, disabling, and deleting workflows
- Fixed table permanent deletion permissions so only authorized users can permanently delete tables
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]