This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryRemoved unnecessary buttons from the auth UI profile page when users are authenticated via OAuth.
Full changelog
- Fix: custom password reset email verification - thanks @zyrakq 🙏.
- Fix: update auth token cookie on auth status requests - thanks @zyrakq 🙏.
- Remove unnecessary buttons (e.g. change password, register TOTP) from auth UI's profile page when user is authenticated via OAuth - thanks @zyrakq 🙏.
- Update Dependencies.
What's Changed
- Fix: JS client deleteUser() sends GET instead of DELETE by @zyrakq in https://github.com/trailbaseio/trailbase/pull/248
Full Changelog: https://github.com/trailbaseio/trailbase/compare/v0.28.5...v0.28.6
Breaking Changes
- Removed change password, register TOTP buttons from auth UI profile page when user authenticated via OAuth
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About TrailBase
Open, sub-millisecond, single-executable FireBase alternative with type-safe REST & realtime APIs, built-in JS/TS runtime, auth & admin UI.
Related context
Related tools
Earlier breaking changes
- v0.31.0 Batch/transaction RecordApi now returns a result for each operation, changing the API contract.
- v0.31.0 Change batch/transaction RecordApi to return per-operation result, breaking existing clients.
- v0.28.0 Switches from SQLite-specific ConflictResolutionStrategy to ISO upsert clauses.
- v0.28.0 Removes ROLLBACK and FAIL conflict resolution strategies during record insertions.
- v0.27.8 RecordApis, schema manipulations, and many tests are broken.
Beta — feedback welcome: [email protected]