TrailBase

v0.28.3 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo NoSQL & Document

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

authentication database rest rust

Summary

AI summary

Warns when uploading files larger than 5 MB; the practical server/browser limit is about 10 MB.

Type	Severity	Summary	CVE
Feature	Low	Adds admin dash file-upload UI for streaming file encoding. Adds admin dash file-upload UI for streaming file encoding. Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency	Low	Updates Rust and JavaScript dependencies to latest versions. Updates Rust and JavaScript dependencies to latest versions. Source: llm_adapter@2026-06-04 Confidence: high	—
Bugfix	Medium	Warns when uploading files larger than 5 MB; effective limit is ~10 MB. Warns when uploading files larger than 5 MB; effective limit is ~10 MB. Source: llm_adapter@2026-06-04 Confidence: high	—
Bugfix	Low	Validates SMTP host as part of configuration validation. Validates SMTP host as part of configuration validation. Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

Stream-encode file contents with new admin dash file-upload UI.
Since we're not using multipart forms, there are hard limits on upload size - both on the server and browser. Warn for larger (> 5MB) files. The effective limit is around 10MB right now.
Minor: validate SMTP host as part of config validation.
Update Rust and JavaScript dependencies.

Full Changelog: https://github.com/trailbaseio/trailbase/compare/v0.28.2...v0.28.3

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track TrailBase

Get notified when new releases ship.

About TrailBase

Open, sub-millisecond, single-executable FireBase alternative with type-safe REST & realtime APIs, built-in JS/TS runtime, auth & admin UI.

v0.31.0 Batch/transaction RecordApi now returns a result for each operation, changing the API contract.
v0.31.0 Change batch/transaction RecordApi to return per-operation result, breaking existing clients.
v0.28.0 Switches from SQLite-specific ConflictResolutionStrategy to ISO upsert clauses.
v0.28.0 Removes ROLLBACK and FAIL conflict resolution strategies during record insertions.
v0.27.8 RecordApis, schema manipulations, and many tests are broken.