3.40.1

devlikeapro/waha3.40.1Jul 22, 2026by calexiou

AI Summary

This release focuses on security hardening, dependency updates, and introduces support for MSSQL history tracking along with improvements to document management.

Key Highlights

Support MSSQL history on tables
Relax Vouch requirements for pull requests
Nest document list files
Security fix: Enforce same-origin check for REST datasource requests
Security fix: Stop forwarding MongoDB TLS file paths on Cloud

New Features

MSSQL history support
Document list nesting
Same-origin REST security enforcement
MongoDB TLS path security fix

Full Release Notes

## What's Changed
* chore(deps): bump js-yaml from 5.2.0 to 5.2.1 in the all-non-major-security group across 1 directory by @dependabot[bot] in https://github.com/Budibase/budibase/pull/19235
* chore(deps): bump protobufjs from 7.6.4 to 7.6.5 by @dependabot[bot] in https://github.com/Budibase/budibase/pull/19242
* Support MSSQL history on tables by @adrinr in https://github.com/Budibase/budibase/pull/19222
* guidelines on choosing a license by @mjashanks in https://github.com/Budibase/budibase/pull/19243
* Relax Vouch requirements for pull requests by @melohagan in https://github.com/Budibase/budibase/pull/19247
* feat: nest document list files by @Dakuan in https://github.com/Budibase/budibase/pull/19233
* [VULN-118] Stop forwarding MongoDB TLS file paths on Cloud by @jvcalderon in https://github.com/Budibase/budibase/pull/19244
* [GHSA-mqhr-6j6h-74p5] Enforce same-origin check for REST datasource requests by @jvcalderon in https://github.com/Budibase/budibase/pull/19239
* [VULN-119] Add regression test showing MySQL injection report does not reproduce by @jvcalderon in https://github.com/Budibase/budibase/pull/19250
* improve workspace home project data resources by @andz-bb in https://github.com/Budibase/budibase/pull/19153


**Full Changelog**: https://github.com/Budibase/budibase/compare/3.40.0...3.40.1