v3.18.0

baptisteArno/typebot.iov3.18.0Aug 21, 2026by github-actions[bot]

AI Summary

This release introduces camera capture options for file uploads and date range separator labels, alongside a significant number of bug fixes and security patches. It addresses issues across WhatsApp integration, S3 storage, database configurations, and various SSRF vulnerabilities.

Key Highlights

  • Add camera capture options to file uploads
  • Add a separator label for date range answers
  • Extensive security hardening (SSRF fixes, credential protection)
  • Fixes for WhatsApp integration and storage operations

New Features

  • Camera capture options for file uploads
  • Separator label for date range answers

Full Release Notes

### New features

- 👌 Add camera capture options to file uploads (#2560) [[512c988](https://github.com/baptisteArno/typebot.io/commit/512c9889515c19eb0e2c8bf9d68f877fc78786c4)]
- 👌 Add a separator label for date range answers (#2573) [[6e6b0b2](https://github.com/baptisteArno/typebot.io/commit/6e6b0b20b7bf6001ecd6707d9fa021e7ba4cc510)]

### Fixed

- 🐛 Fix stored WhatsApp phone lookup fallback (#2531) [[f00ccba](https://github.com/baptisteArno/typebot.io/commit/f00ccba8ed7593b154a7bba9677f46c5d7c79234)]
- 🐛 Fix embed video overlay in preview (#2532) [[9224f4f](https://github.com/baptisteArno/typebot.io/commit/9224f4f7701f140cfcfcd5031c56df8a31bdacbe)]
- 🐛 Fix S3 operations without full config (#2533) [[248f751](https://github.com/baptisteArno/typebot.io/commit/248f7515d8ee4cbd7c93318665f887858cbcaf05)]
- 🐛 Improve expired data cleanup reliability (#2536) [[b86864c](https://github.com/baptisteArno/typebot.io/commit/b86864ca60102bab60d495b0de2f34402ccb04b6)]
- 🐛 Fix WhatsApp audio file upload URLs (#2539) [[54e1fa1](https://github.com/baptisteArno/typebot.io/commit/54e1fa1a0fd71f5470fe8b8ccfbf1517f88ab320)]
- 🐛 Fix miscellaneous errors (#2540) [[c7ae1c1](https://github.com/baptisteArno/typebot.io/commit/c7ae1c162e0ae0e5d82a1096214b999bd3f17786)]
- 🐛 Restore automatic dev database sync (#2550) [[9900fc7](https://github.com/baptisteArno/typebot.io/commit/9900fc7149da89bdb3624d28ad0b9757140dd141)]
- 🐛 Fix Android camera for image extension uploads (#2558) [[e7be877](https://github.com/baptisteArno/typebot.io/commit/e7be877bc101929c8d4574104b4d5ec5d61cc6f5)]
- 🐛 Fix export workflow startup status [[5da37e4](https://github.com/baptisteArno/typebot.io/commit/5da37e47935135d33d1e41318eaab9f35a8d7ee0)]
- 🐛 Fix transcripts with removed input answers [[248433d](https://github.com/baptisteArno/typebot.io/commit/248433dd8dd460bd91870a8897ad5288aa131416)]
- 🐛 Honor the DATABASE_URL schema parameter in the Prisma PostgreSQL adapter (#2582) [[f9a57c4](https://github.com/baptisteArno/typebot.io/commit/f9a57c449d19b18f660a4c230e1c66eba7397165)]
- 🐛 Fix sidebar block drag on Android touch devices (#2569) [[6796f58](https://github.com/baptisteArno/typebot.io/commit/6796f583ed7b3ba3938d0bcb3c3be33e6e27151d)]
- 🐛 Support BSUID-only WhatsApp webhooks [[570d538](https://github.com/baptisteArno/typebot.io/commit/570d5385c2d8a7e2ddc5eb32b6908998d31de669)]
- 🐛 Fix production workspace suspension [[b14f756](https://github.com/baptisteArno/typebot.io/commit/b14f756d060827db6d5303a856432192bf9f2394)]

### Security

- 🐛 Fix custom domain deletion ownership checks (#2541) [[06575df](https://github.com/baptisteArno/typebot.io/commit/06575dfcd461ba76071012869d4b1f4046f9a6b8)]
- 🐛 Harden email login codes (#2542) [[03c8dd9](https://github.com/baptisteArno/typebot.io/commit/03c8dd967f21e48e128340e369901d595d89bfd9)]
- 🐛 Secure Send Email attachment handling (#2543) [[9c81300](https://github.com/baptisteArno/typebot.io/commit/9c81300e5abb28a68a5af2920b92043e3512899d)]
- 🐛 Secure deprecated file upload URLs (#2544) [[ab72956](https://github.com/baptisteArno/typebot.io/commit/ab729561d47b7e063446fc8c0d1deb6dee5fe0fb)]
- 🔒️ Upgrade vulnerable dependencies [[70b4d5d](https://github.com/baptisteArno/typebot.io/commit/70b4d5d77f5c2ab22e64744fd0322514214a8e5e)]
- 🔒️ Fix TAC scan header findings (#2549) [[d039794](https://github.com/baptisteArno/typebot.io/commit/d0397947977a74cc5bfbc09affee1ae320f46cf9)]
- 🐛 Stop guest invitation email abuse [[390dddd](https://github.com/baptisteArno/typebot.io/commit/390dddd4cc3d284b33aa1d9e9f690ea4ab8cec54)]
- 🐛 Fix preview workspace credential binding (#2551) [[33aa58d](https://github.com/baptisteArno/typebot.io/commit/33aa58d638ac68002bf01c7b87afc82a9907cb3e)]
- 🐛 Prevent cross-workspace invitation takeover [[7ad9ec1](https://github.com/baptisteArno/typebot.io/commit/7ad9ec1dba2d3f453c9f71a54236650eaed9a105)]
- 🐛 Prevent webhook credential leaks in logs [[53f6461](https://github.com/baptisteArno/typebot.io/commit/53f646142ec0b230a4875eeb3f3494aab17ab072)]
- 🐛 Protect Typebot collaborator identities [[9b9d52d](https://github.com/baptisteArno/typebot.io/commit/9b9d52d2f60aa464ad46135a28e1ac7f0bb535f9)]
- 🐛 Sanitize embed bubble URLs [[cc19553](https://github.com/baptisteArno/typebot.io/commit/cc195532aa2b2a2432ef196c869844577c1d41eb)]
- 🐛 Protect AI provider base URLs from SSRF [[4b63182](https://github.com/baptisteArno/typebot.io/commit/4b63182363e17a823d35ee80ee5f7edfee47c4f6)]
- 🐛 Secure server-side HTTP request execution [[5c7cd4c](https://github.com/baptisteArno/typebot.io/commit/5c7cd4c3ab3681ca98e6ac7c5ddc4d5513dd5fd8)]
- 🐛 Fix free workspace creation race [[a6bed8b](https://github.com/baptisteArno/typebot.io/commit/a6bed8b48cabf68351d9a1872040d1d783e3d989)]
- 🐛 Secure HTTP proxy destinations [[63b1e2f](https://github.com/baptisteArno/typebot.io/commit/63b1e2fe174f0bc3cfa14c3cdc88920ed1c9a345)]
- 🐛 Protect Dify endpoints against SSRF [[cfb2e7a](https://github.com/baptisteArno/typebot.io/commit/cfb2e7a8ec8f84967e8ce23fc0d6abb0e5e6306c)]
- 🐛 Prevent workspace seat limit races [[eec8ac4](https://github.com/baptisteArno/typebot.io/commit/eec8ac449cb40152d4bacd982d2d00bdb342e4ea)]
- 🐛 Protect NocoDB and PostHog requests against SSRF [[d87c171](https://github.com/baptisteArno/typebot.io/commit/d87c171d69bc4a1a079cb7c272dfcf87276f5615)]
- 🐛 Restrict guest access to collaborative Typebots [[0db8673](https://github.com/baptisteArno/typebot.io/commit/0db8673b502756cf754da6c1b0f1f24e43d1c11b)]

### Content

- 📝 Add June content batch [[b647b3e](https://github.com/baptisteArno/typebot.io/commit/b647b3e941da3536b0dac80f8c69902819d9df17)]
- 📝 Fix blog canonical URLs [[17fb696](https://github.com/baptisteArno/typebot.io/commit/17fb6960d0dec99ef0eb812c8a45e75cafddc855)]
- 📝 Add July content part 1 (#2559) [[a880e3a](https://github.com/baptisteArno/typebot.io/commit/a880e3a53cba33a1d10ff5e244018d6b1cb26e32)]
- 📝 Add July content part 2 [[183be54](https://github.com/baptisteArno/typebot.io/commit/183be5404a9b8d7c3a2d8fb5ed6dd3a37f12dfb0)]
- 📝 Fix chatbot guide links [[6e9ab23](https://github.com/baptisteArno/typebot.io/commit/6e9ab2343925fa4074252157d10d5dc6006815cb)]

### Internal

- 🔧 Restore OpenAPI docs generation pipeline (#2553) [[9d2d7ea](https://github.com/baptisteArno/typebot.io/commit/9d2d7ead8ebd2477b55787b4e7098fdf29e3dae2)]
- 🔧 Disable daily churn analysis cron [[fa2e2e9](https://github.com/baptisteArno/typebot.io/commit/fa2e2e92f4bf62d3342e3315309d9381f288fbb5)]
- 🔧 Prepare Ask Assistant migration campaign [[ef1b4c6](https://github.com/baptisteArno/typebot.io/commit/ef1b4c67c520ff00018db709620dc101f717e9ac)]
- 🔧 Sync commit skill conventions [[76df665](https://github.com/baptisteArno/typebot.io/commit/76df665e14bc2129cb930a704b7cd54eb01ab822)]
- 🔧 Add Typebot suspension tooling [[e791f1a](https://github.com/baptisteArno/typebot.io/commit/e791f1a17883a5ca69858cdbf237142e421d113e)]
- 🔧 Add guest invitation abuse telemetry [[6ab5211](https://github.com/baptisteArno/typebot.io/commit/6ab5211de380b8ccd842cbf060b278ae69614c25)]
- 🔧 Revert guest invitation abuse telemetry [[cf83dd3](https://github.com/baptisteArno/typebot.io/commit/cf83dd3c8ed42a42b27640d54678c0ef12cb988b)]
- 🔧 Run in-depth analytics aggregations concurrently (#2572) [[7fa9ab4](https://github.com/baptisteArno/typebot.io/commit/7fa9ab423a6ab56d304302edbf983225235dc62d)]
- 🔧 Run operational scripts with production MySQL [[5879d94](https://github.com/baptisteArno/typebot.io/commit/5879d94acb38458aad9e6f008e18b80951819c2d)]
- 🔧 Add T3 worktree setup [[f795644](https://github.com/baptisteArno/typebot.io/commit/f795644eec7ed46602e1350f8a889e222f05ec86)]
- ♻️ Format in-depth analytics handler [[aac5819](https://github.com/baptisteArno/typebot.io/commit/aac5819c2fc63df0184148a1d674365ece4ff1dc)]
- 🔧 Harden operational scripts for agents [[56c1dbd](https://github.com/baptisteArno/typebot.io/commit/56c1dbd01ca8aab88e5b3609f24b41fa2efacd95)]
- 🔧 Restore secret log regression test isolation [[6c88346](https://github.com/baptisteArno/typebot.io/commit/6c88346c9d9bd020ec418aab3d474955057b42c0)]