3.40.1

Budibase/budibase3.40.1Jul 22, 2026by calexiou

AI Summary

A maintenance release that includes security patches for MongoDB and REST requests, adds MSSQL support, and improves the workspace home data resources.

Key Highlights

  • Support MSSQL history on tables
  • Enforce same-origin check for REST datasource requests
  • Stop forwarding MongoDB TLS file paths on Cloud
  • Nest document list files
  • Update workspace home project data resources

New Features

  • MSSQL history support
  • Nest document list files
  • Security fixes for TLS and origin checks

Full Release Notes

## What's Changed
* chore(deps): bump js-yaml from 5.2.0 to 5.2.1 in the all-non-major-security group across 1 directory by @dependabot[bot] in https://github.com/Budibase/budibase/pull/19235
* chore(deps): bump protobufjs from 7.6.4 to 7.6.5 by @dependabot[bot] in https://github.com/Budibase/budibase/pull/19242
* Support MSSQL history on tables by @adrinr in https://github.com/Budibase/budibase/pull/19222
* guidelines on choosing a license by @mjashanks in https://github.com/Budibase/budibase/pull/19243
* Relax Vouch requirements for pull requests by @melohagan in https://github.com/Budibase/budibase/pull/19247
* feat: nest document list files by @Dakuan in https://github.com/Budibase/budibase/pull/19233
* [VULN-118] Stop forwarding MongoDB TLS file paths on Cloud by @jvcalderon in https://github.com/Budibase/budibase/pull/19244
* [GHSA-mqhr-6j6h-74p5] Enforce same-origin check for REST datasource requests by @jvcalderon in https://github.com/Budibase/budibase/pull/19239
* [VULN-119] Add regression test showing MySQL injection report does not reproduce by @jvcalderon in https://github.com/Budibase/budibase/pull/19250
* improve workspace home project data resources by @andz-bb in https://github.com/Budibase/budibase/pull/19153


**Full Changelog**: https://github.com/Budibase/budibase/compare/3.40.0...3.40.1