Starstruk Logo MarkStarstruk

v3.43.0

gristlabs/grist-corev3.43.0Aug 24, 2026by calexiou

AI Summary

This release focuses on security hardening, including fixes for table leaks and Mongo injection, alongside performance improvements like removing date-fns from the client bundle and upgrading core dependencies.

Key Highlights

  • Security fixes preventing table leaks and blocking Mongo operator injection.
  • Performance improvements via client-side optimizations (removing date-fns, batch cache lookups).
  • Dependency upgrades: Lerna v10, Axios 1.19.0, and shortid replaced with nanoid.
  • New API request preview panel and custom OpenAPI REST templates.
  • Fixes for automation branch state bindings and escalation status races.

New Features

  • API request preview panel
  • Custom OpenAPI REST templates
  • Allow relationship filters in non-trigger automation steps

Full Release Notes

## What's Changed
* fix: dont leak joined tables by @Dakuan in https://github.com/Budibase/budibase/pull/19453
* chore(deps): bump dompurify from 3.4.12 to 3.4.13 in the all-non-major-security group across 1 directory by @dependabot[bot] in https://github.com/Budibase/budibase/pull/19450
* API request preview panel by @deanhannigan in https://github.com/Budibase/budibase/pull/19443
* Upgrade axios resolution to 1.19.0 by @melohagan in https://github.com/Budibase/budibase/pull/19463
* chore: upgrade Lerna to v10 by @melohagan in https://github.com/Budibase/budibase/pull/19456
* Replace shortid with nanoid by @melohagan in https://github.com/Budibase/budibase/pull/19464
* [17951] Fix empty Is in filter semantics by @melohagan in https://github.com/Budibase/budibase/pull/19348
* Remove date-fns from client bundle by @melohagan in https://github.com/Budibase/budibase/pull/19457
* fix: remove maildev dependency from email tests by @melohagan in https://github.com/Budibase/budibase/pull/19467
* Add test release workflow to print release notes by @adrinr in https://github.com/Budibase/budibase/pull/19469
* fix: swap wget with inline python request in litellm docker-compose setup healthchecks by @calexiou in https://github.com/Budibase/budibase/pull/19468
* chore(deps): bump the all-non-major-security group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/Budibase/budibase/pull/19470
* Set security to agent tools by @adrinr in https://github.com/Budibase/budibase/pull/19462
* fix: authorize public API user role updates by workspace [134] by @Dakuan in https://github.com/Budibase/budibase/pull/19446
* chore(deps): upgrade test dependencies by @melohagan in https://github.com/Budibase/budibase/pull/19472
* chore(deps): bump @hono/node-server from 1.19.14 to 1.19.17 by @dependabot[bot] in https://github.com/Budibase/budibase/pull/19477
* Fix escalation resume status race by @melohagan in https://github.com/Budibase/budibase/pull/19481
* fix: block Mongo operator injection in multi-object query templates by @Dakuan in https://github.com/Budibase/budibase/pull/19448
* [19480] Allow relationship filters in non-trigger automation steps by @melohagan in https://github.com/Budibase/budibase/pull/19482
* 16979 clouseau not ready when couchdb connects by @calexiou in https://github.com/Budibase/budibase/pull/19476
* [19484] Fix REST query HTTP verb dropdown overlap by @melohagan in https://github.com/Budibase/budibase/pull/19488
* [19475] Fix automation branch state bindings by @melohagan in https://github.com/Budibase/budibase/pull/19486
* Fix/single image litellm postgres startup by @calexiou in https://github.com/Budibase/budibase/pull/19490
* use pg_catalog instead of information_schema by @calexiou in https://github.com/Budibase/budibase/pull/19423
* chore: show pending cloud releases in Slack by @melohagan in https://github.com/Budibase/budibase/pull/19489
* Batch user cache lookups in row output processing by @calexiou in https://github.com/Budibase/budibase/pull/19495
* Remove legacy agent tools by @adrinr in https://github.com/Budibase/budibase/pull/19474
* Escalation Discord notification mentions parsing by @deanhannigan in https://github.com/Budibase/budibase/pull/19405
* Add custom OpenAPI REST templates by @melohagan in https://github.com/Budibase/budibase/pull/19383
* Hotfix - #19515 by @adrinr in https://github.com/Budibase/budibase/pull/19519


**Full Changelog**: https://github.com/Budibase/budibase/compare/v3.42.0...v3.43.0