Release Notes

🐛 Bug Fixes

• [client-v2] Fixed the issue where variables nested deeper than three levels cannot be used in workflow query node conditions (#10494) by @mytharcher

• [Workflow] Fix workflow list loading parameters under MySQL 8.3+ (#10486) by @mytharcher

• [Office File Previewer] Fixed the issue with incorrect URLs being used for Office file previews (#10496) by @mytharcher

🚀 Improvements

• [WeCom] Support configurable WeCom sync email types and consistent email mapping for full and incremental synchronization. by @chenzhizdt

🐛 Bug Fixes

• [server] Prevent secret environment variable exposure in custom request URLs (#10503) by @2013xile

• [Collection field: Sequence] Fix sequence field validation for random character patterns configured with multiple character sets. (#10504) by @mytharcher

• [File manager] Move the delete button on v2 attachment and Attachment (URL) cards to the top-right corner to reduce accidental deletion during preview. (#10508) by @katherinehhh

• [AI employees] Fixed AI employee data query tools returning no records when the collection’s role permission uses a data scope based on the current user (#10501) by @cgyrock

• [Workflow: Approval] Hide approval action buttons for queued sequential approvers and show a waiting hint. by @mytharcher

🚀 Improvements

• [utils] Added an option to block server-side requests and redirects to literal IP addresses (#10490) by @2013xile

• [client-v2] Improve V2 form QR scanning reliability on iOS. (#10456) by @katherinehhh

🐛 Bug Fixes

• [server]

  • Prevent secret environment variable exposure in custom request URLs (#10503) by @2013xile

  • Fixed misleading preparing status when a subapp deployment environment is unavailable (#10485) by @2013xile

• [client-v2]

  • Fixed the issue where variables nested deeper than three levels cannot be used in workflow query node conditions (#10494) by @mytharcher

  • Fix filter forms not collapsing on mobile (#10479) by @zhangzhonghe

  • Fix interrupted option value input for custom radio and checkbox fields in filter forms (#10480) by @zhangzhonghe

  • Fixed the v2 Update record field settings failing after an assigned field was deleted. (#10483) by @katherinehhh

  • Fix full-page reloads when opening settings pages (#10474) by @zhangzhonghe

  • Hide unsupported built-in date variables from workflow create and update field assignments. (#10442) by @mytharcher

  • Show the standard deleted-field warning for historical V2 field assignments. (#10484) by @katherinehhh

• [AI employees] Fixed AI employee data query tools returning no records when the collection’s role permission uses a data scope based on the current user (#10501) by @cgyrock

• [Office File Previewer] Fixed the issue with incorrect URLs being used for Office file previews (#10496) by @mytharcher

• [Workflow: Delay node] Fixed delay duration variable validation and report invalid resolved values instead of waiting unexpectedly. (#10469) by @mytharcher

• [Workflow] Fix workflow list loading parameters under MySQL 8.3+ (#10486) by @mytharcher

• [Access control] Fix role permissions so selecting a deeply nested menu also selects all parent menus (#10473) by @zhangzhonghe

• [Data source manager] Fixed the inverse-field option not remaining selected when editing a v2 relation field. (#10482) by @katherinehhh

• [Flow engine] Fixed non-admin variable resolution in form linkage rules, referenced templates, and scripts. (#10467) by @gchust

• [Workflow: Approval] Fix approval cards showing outdated content after saving an edited draft by @zhangzhonghe

• [App supervisor] Fixed subapp access failures after rolling updates or deployment environment changes by @2013xile

🐛 Bug Fixes

• [Office File Previewer] Fixed the issue with incorrect URLs being used for Office file previews (#10496) by @mytharcher

🐛 Bug Fixes

• [client-v2] Fixed the issue where variables nested deeper than three levels cannot be used in workflow query node conditions (#10494) by @mytharcher

• [Workflow] Fix workflow list loading parameters under MySQL 8.3+ (#10486) by @mytharcher

🚀 Improvements

• [utils] Added an option to block server-side requests and redirects to literal IP addresses (#10490) by @2013xile

• [client-v2] Improve V2 form QR scanning reliability on iOS. (#10456) by @katherinehhh

🐛 Bug Fixes

• [client-v2] Hide unsupported built-in date variables from workflow create and update field assignments. (#10442) by @mytharcher

• [server] Fixed misleading preparing status when a subapp deployment environment is unavailable (#10485) by @2013xile

• [Workflow: Delay node] Fixed delay duration variable validation and report invalid resolved values instead of waiting unexpectedly. (#10469) by @mytharcher

• [App supervisor] Fixed subapp access failures after rolling updates or deployment environment changes by @2013xile

🚀 Improvements

• [utils] Added an option to block server-side requests and redirects to literal IP addresses (#10490) by @2013xile

• [client-v2] Improve V2 form QR scanning reliability on iOS. (#10456) by @katherinehhh

• [WeCom] Improved type safety and unified the notification recipient selector in the WeCom plugin. by @chenzhizdt

🐛 Bug Fixes

• [client-v2]

  • Hide unsupported built-in date variables from workflow create and update field assignments. (#10442) by @mytharcher

  • Fix full-page reloads when opening settings pages (#10474) by @zhangzhonghe

  • Fixed the v2 Update record field settings failing after an assigned field was deleted. (#10483) by @katherinehhh

  • Show the standard deleted-field warning for historical V2 field assignments. (#10484) by @katherinehhh

  • Fix interrupted option value input for custom radio and checkbox fields in filter forms (#10480) by @zhangzhonghe

  • Support displaying to-many association fields as read-only subtables in client v2 forms. (#10478) by @katherinehhh

  • Fix nested association fields rendering blank in V2 forms when the parent relation uses dropdown selection. (#10477) by @katherinehhh

  • Fixed the inverse relationship type being editable in v2 field configuration. (#10476) by @katherinehhh

  • Fix filter forms not collapsing on mobile (#10479) by @zhangzhonghe

• [server] Fixed misleading preparing status when a subapp deployment environment is unavailable (#10485) by @2013xile

• [cli] Restrict legacy local upload URLs to signed-in users by default, with an opt-in compatibility switch for public access. (#10471) by @mytharcher

• [Workflow: Delay node] Fixed delay duration variable validation and report invalid resolved values instead of waiting unexpectedly. (#10469) by @mytharcher

• [Data source manager]

  • Fixed the inverse-field option not remaining selected when editing a v2 relation field. (#10482) by @katherinehhh

  • Added current user and current role variable selection to v2 permission data scopes (#10472) by @jiannx

• [Notification: In-app message] Allow all workflow variable types in in-app notification titles and detail links. (#10470) by @mytharcher

• [Access control] Fix role permissions so selecting a deeply nested menu also selects all parent menus (#10473) by @zhangzhonghe

• [Block: Kanban] Fixed an issue where newly created records were not immediately visible in the Kanban block. (#10463) by @gaurangagar

• [File manager] Prevent file redirects from reusing expired signed storage URLs. (#10475) by @mytharcher

• [Flow engine] Fixed non-admin variable resolution in form linkage rules, referenced templates, and scripts. (#10467) by @gchust

• [Workflow: Approval] Fix approval cards showing outdated content after saving an edited draft by @zhangzhonghe

• [App supervisor] Fixed subapp access failures after rolling updates or deployment environment changes by @2013xile

🚀 Improvements

• [WeCom] Improved type safety and unified the notification recipient selector in the WeCom plugin. by @chenzhizdt

🐛 Bug Fixes

• [server] Fixed applications unexpectedly starting in environments where they were not deployed (#10464) by @2013xile

• [Notification: In-app message] Allow all workflow variable types in in-app notification titles and detail links. (#10470) by @mytharcher

• [File manager] Prevent file redirects from reusing expired signed storage URLs. (#10475) by @mytharcher

• [Data source manager] Added current user and current role variable selection to v2 permission data scopes (#10472) by @jiannx

• [Workflow: JavaScript] Fixed an issue where a timed-out JavaScript workflow node could incorrectly abort the workflow instead of respecting “Continue when exception thrown”. (#10461) by @mytharcher

• [AI employees] Fixed AI employees repeatedly querying knowledge bases when the Knowledge Base Prompt omitted the retrieved-content placeholder, and added clear validation guidance when saving the configuration. (#10413) by @cgyrock

• [AI: Knowledge base] Fixed PGVector connection testing, ZIP import result display, document segment-setting inheritance, and validation for chunk overlap values in AI knowledge bases. by @cgyrock

• [App supervisor] Fixed exposure of sub-application authentication secrets in application management responses by @2013xile

• [DingTalk] Unified the DingTalk notification recipient selector. by @chenzhizdt

🐛 Bug Fixes

• [client-v2]

  • Fixed the v2 Update record field settings failing after an assigned field was deleted. (#10483) by @katherinehhh

  • Show the standard deleted-field warning for historical V2 field assignments. (#10484) by @katherinehhh

  • Fix filter forms not collapsing on mobile (#10479) by @zhangzhonghe

  • Support displaying to-many association fields as read-only subtables in client v2 forms. (#10478) by @katherinehhh

  • Fix nested association fields rendering blank in V2 forms when the parent relation uses dropdown selection. (#10477) by @katherinehhh

  • Fixed the inverse relationship type being editable in v2 field configuration. (#10476) by @katherinehhh

  • Fix interrupted option value input for custom radio and checkbox fields in filter forms (#10480) by @zhangzhonghe

  • Fix full-page reloads when opening settings pages (#10474) by @zhangzhonghe

• [cli] Restrict legacy local upload URLs to signed-in users by default, with an opt-in compatibility switch for public access. (#10471) by @mytharcher

• [Data source manager] Fixed the inverse-field option not remaining selected when editing a v2 relation field. (#10482) by @katherinehhh

• [Flow engine] Fixed non-admin variable resolution in form linkage rules, referenced templates, and scripts. (#10467) by @gchust

• [Access control] Fix role permissions so selecting a deeply nested menu also selects all parent menus (#10473) by @zhangzhonghe

• [Block: Kanban] Fixed an issue where newly created records were not immediately visible in the Kanban block. (#10463) by @gaurangagar

• [Workflow: Approval] Fix approval cards showing outdated content after saving an edited draft by @zhangzhonghe

🚀 Improvements

• [WeCom] Improved type safety and unified the notification recipient selector in the WeCom plugin. by @chenzhizdt

🐛 Bug Fixes

• [client-v2]

  • Support displaying to-many association fields as read-only subtables in client v2 forms. (#10478) by @katherinehhh

  • Fixed the inverse relationship type being editable in v2 field configuration. (#10476) by @katherinehhh

  • Fix nested association fields rendering blank in V2 forms when the parent relation uses dropdown selection. (#10477) by @katherinehhh

• [cli] Restrict legacy local upload URLs to signed-in users by default, with an opt-in compatibility switch for public access. (#10471) by @mytharcher

• [Workflow: JavaScript] Fixed an issue where a timed-out JavaScript workflow node could incorrectly abort the workflow instead of respecting “Continue when exception thrown”. (#10461) by @mytharcher

• [File manager] Prevent file redirects from reusing expired signed storage URLs. (#10475) by @mytharcher

• [Notification: In-app message] Allow all workflow variable types in in-app notification titles and detail links. (#10470) by @mytharcher

• [Data source manager] Added current user and current role variable selection to v2 permission data scopes (#10472) by @jiannx

• [Block: Kanban] Fixed an issue where newly created records were not immediately visible in the Kanban block. (#10463) by @gaurangagar

• [DingTalk] Unified the DingTalk notification recipient selector. by @chenzhizdt

🐛 Bug Fixes

• [client-v2] Fix a render error when switching a v2 association field to popup record selection. (#10419) by @katherinehhh

• [AI LLM: GigaChat] Fixed an application startup error on iOS 15.6 and earlier when the GigaChat AI provider is enabled (#10418) by @cgyrock

• [Public forms] Fix duplicate Submit actions in V2 regular form configuration when Public Forms is enabled. (#10417) by @katherinehhh

• [Access control] Fixed an ACL bypass that allowed firstOrCreate or updateOrCreate to read or modify existing records without the required view or update permission. (#10403) by @mytharcher

• [Workflow]

  • Fix option fields being unable to select configured values in v2 workflow Create record and Update record nodes. (#10414) by @katherinehhh

  • Fix the extra trigger at startsOn for schedule workflows repeating on a cron expression (#10410) by @Tespera

  • Fixed collection event as sub-workflows failing when called with a record ID and no preload associations configured (#10407) by @mytharcher

• [UI templates] Fix the error when closing an approval task containing a referenced block (#10415) by @zhangzhonghe

• [Multi-space] File and preview links from space-scoped file collections now retain the active space context, preventing incorrect 404 responses when users open them. by @jiannx

• [AI: Knowledge base] Fixed AI employees incorrectly reporting no knowledge-base access for root users by @hongboji

• [Workflow: Approval] Fixed the approval trigger-variable form not rendering for subflow nodes on v1 workflow pages. by @mytharcher

• [WeCom] Fixed WeCom automatic login lifecycle and notification form compatibility in client-v2. by @chenzhizdt

🎉 New Features

• [AI: Knowledge base] Added an authenticated knowledge base retrieval API and a built-in provider for connecting remote NocoBase knowledge bases. by @cgyrock

🚀 Improvements

• [Notification: In-app message] Fixed frontend freezing after selecting an in-app message or email channel in workflow v2 notification nodes (#10445) by @jiannx

🐛 Bug Fixes

• [server] Fixed applications unexpectedly starting in environments where they were not deployed (#10464) by @2013xile

• [AI employees]

  • Fixed AI employees repeatedly querying knowledge bases when the Knowledge Base Prompt omitted the retrieved-content placeholder, and added clear validation guidance when saving the configuration. (#10413) by @cgyrock

  • Prevented Bedrock errors caused by aborted AI responses leaving tool calls without matching tool results. (#10447) by @cgyrock

• [Collection field: Markdown(Vditor)] Fix Vditor detail fields to use HTML preview by default so Markdown images can be displayed. (#10459) by @mytharcher

• [Collection: SQL] Restricted SQL collections from querying PostgreSQL system objects or executing multiple statements (#10455) by @2013xile

• [Block: Comment] Fixed the record comments block to display the commenter’s nickname when using the Last modified by field (#10446) by @jiannx

• [Workflow] Fixed workflow user selection when a user-related collection uses its primary key as the user foreign key (#10354) by @mytharcher

• [Data source manager] Fix the missing record unique key setting in the v2 collection editor. (#10453) by @katherinehhh

• [Workflow: JavaScript] Fixed an issue where a timed-out JavaScript workflow node could incorrectly abort the workflow instead of respecting “Continue when exception thrown”. (#10461) by @mytharcher

• [AI: Knowledge base]

  • Knowledge base uploads now allow all document formats supported by the backend by @cgyrock

  • Fixed PGVector connection testing, ZIP import result display, document segment-setting inheritance, and validation for chunk overlap values in AI knowledge bases. by @cgyrock

• [Template print] Fix dynamic image rendering for stable file URLs in template printing. by @hongboji

• [App supervisor] Fixed exposure of sub-application authentication secrets in application management responses by @2013xile

• [DingTalk] Unified the DingTalk notification recipient selector. by @chenzhizdt

🎉 New Features

• [AI: Knowledge base] Added an authenticated knowledge base retrieval API and a built-in provider for connecting remote NocoBase knowledge bases. by @cgyrock

🚀 Improvements

• [Notification: In-app message] Fixed frontend freezing after selecting an in-app message or email channel in workflow v2 notification nodes (#10445) by @jiannx

🐛 Bug Fixes

• [server] Fixed applications unexpectedly starting in environments where they were not deployed (#10464) by @2013xile

• [Collection field: Markdown(Vditor)] Fix Vditor detail fields to use HTML preview by default so Markdown images can be displayed. (#10459) by @mytharcher

• [AI employees]

  • Fixed AI employees repeatedly querying knowledge bases when the Knowledge Base Prompt omitted the retrieved-content placeholder, and added clear validation guidance when saving the configuration. (#10413) by @cgyrock

  • Prevented Bedrock errors caused by aborted AI responses leaving tool calls without matching tool results. (#10447) by @cgyrock

• [Block: Comment] Fixed the record comments block to display the commenter’s nickname when using the Last modified by field (#10446) by @jiannx

• [Data source manager] Fix the missing record unique key setting in the v2 collection editor. (#10453) by @katherinehhh

• [Workflow] Fixed workflow user selection when a user-related collection uses its primary key as the user foreign key (#10354) by @mytharcher

• [Collection: SQL] Restricted SQL collections from querying PostgreSQL system objects or executing multiple statements (#10455) by @2013xile

• [AI: Knowledge base]

  • Fixed PGVector connection testing, ZIP import result display, document segment-setting inheritance, and validation for chunk overlap values in AI knowledge bases. by @cgyrock

  • Knowledge base uploads now allow all document formats supported by the backend by @cgyrock

• [Template print] Fix dynamic image rendering for stable file URLs in template printing. by @hongboji

• [App supervisor] Fixed exposure of sub-application authentication secrets in application management responses by @2013xile

🎉 New Features

• [AI: Knowledge base] Added an authenticated knowledge base retrieval API and a built-in provider for connecting remote NocoBase knowledge bases. by @cgyrock

🚀 Improvements

• [undefined] Corrected the root package license metadata to Apache-2.0 and raised the Node.js requirement to version 22 (#10448) by @hongboji

• [Notification: In-app message] Fixed frontend freezing after selecting an in-app message or email channel in workflow v2 notification nodes (#10445) by @jiannx

• [DingTalk] DingTalk ActionCard button links can now be configured to open in an external browser. by @chenzhizdt

🐛 Bug Fixes

• [Collection: SQL] Restricted SQL collections from querying PostgreSQL system objects or executing multiple statements (#10455) by @2013xile

• [Block: Comment] Fixed the record comments block to display the commenter’s nickname when using the Last modified by field (#10446) by @jiannx

• [AI employees]

  • Prevented Bedrock errors caused by aborted AI responses leaving tool calls without matching tool results. (#10447) by @cgyrock

  • Fixed an error that prevented business analysis reports containing charts from opening. (#10440) by @cgyrock

• [Collection field: Markdown(Vditor)] Fix Vditor detail fields to use HTML preview by default so Markdown images can be displayed. (#10459) by @mytharcher

• [Data source manager] Fix the missing record unique key setting in the v2 collection editor. (#10453) by @katherinehhh

• [Workflow] Fixed workflow user selection when a user-related collection uses its primary key as the user foreign key (#10354) by @mytharcher

• [File manager] Fixed AI employee workflow nodes failing to access NocoBase permanent file URLs and unnecessarily copying internal files to AI storage. (#10408) by @cgyrock

• [AI: Knowledge base] Knowledge base uploads now allow all document formats supported by the backend by @cgyrock

• [Template print] Fix dynamic image rendering for stable file URLs in template printing. by @hongboji

🚀 Improvements

• [undefined] Corrected the root package license metadata to Apache-2.0 and raised the Node.js requirement to version 22 (#10448) by @hongboji

• [Migration manager] Displayed migration file sizes with readable binary units instead of raw byte counts by @hongboji

• [DingTalk] DingTalk ActionCard button links can now be configured to open in an external browser. by @chenzhizdt

🐛 Bug Fixes

• [utils] Prevent stored XSS in rich-text fields written through APIs and rendered in display or edit mode. (#10425) by @katherinehhh

• [database] Fixed SQL Server string filters failing to match literal square brackets and other LIKE wildcard characters (#10436) by @hongboji

• [File manager]

  • Fixed the missing file storage selector in v2 file collection create and edit forms. (#10439) by @katherinehhh

  • Fixed AI employee workflow nodes failing to access NocoBase permanent file URLs and unnecessarily copying internal files to AI storage. (#10408) by @cgyrock

• [Collection field: Markdown(Vditor)] Restore table actions in V2 Markdown Vditor fields. (#10438) by @katherinehhh

• [AI employees] Fixed an error that prevented business analysis reports containing charts from opening. (#10440) by @cgyrock

• [File storage: S3(Pro)] Fix S3 Pro multipart upload failures for backup files larger than 5 MB. by @mytharcher

🚀 Improvements

• [Migration manager] Displayed migration file sizes with readable binary units instead of raw byte counts by @hongboji

🐛 Bug Fixes

• [utils] Prevent stored XSS in rich-text fields written through APIs and rendered in display or edit mode. (#10425) by @katherinehhh

• [database] Fixed SQL Server string filters failing to match literal square brackets and other LIKE wildcard characters (#10436) by @hongboji

• [Collection field: Markdown(Vditor)] Restore table actions in V2 Markdown Vditor fields. (#10438) by @katherinehhh

• [File manager] Fixed the missing file storage selector in v2 file collection create and edit forms. (#10439) by @katherinehhh

• [File storage: S3(Pro)] Fix S3 Pro multipart upload failures for backup files larger than 5 MB. by @mytharcher

🚀 Improvements

• [Migration manager] Displayed migration file sizes with readable binary units instead of raw byte counts by @hongboji

🐛 Bug Fixes

• [database] Fixed SQL Server string filters failing to match literal square brackets and other LIKE wildcard characters (#10436) by @hongboji

• [utils] Prevent stored XSS in rich-text fields written through APIs and rendered in display or edit mode. (#10425) by @katherinehhh

• [Collection field: Markdown(Vditor)] Restore table actions in V2 Markdown Vditor fields. (#10438) by @katherinehhh

• [File manager] Fixed the missing file storage selector in v2 file collection create and edit forms. (#10439) by @katherinehhh

• [File storage: S3(Pro)] Fix S3 Pro multipart upload failures for backup files larger than 5 MB. by @mytharcher

🚀 Improvements

• [undefined] Corrected the root package license metadata to Apache-2.0 and raised the Node.js requirement to version 22 (#10448) by @hongboji

• [DingTalk] DingTalk ActionCard button links can now be configured to open in an external browser. by @chenzhizdt

🐛 Bug Fixes

• [File manager] Fixed AI employee workflow nodes failing to access NocoBase permanent file URLs and unnecessarily copying internal files to AI storage. (#10408) by @cgyrock

• [AI employees] Fixed an error that prevented business analysis reports containing charts from opening. (#10440) by @cgyrock

🚀 Improvements

• [AI employees] Removed the persisted AI context data source settings and selector while keeping direct data source query capabilities. (#10450) by @cgyrock

🐛 Bug Fixes

• [Workflow]

  • Improve workflow task detail handling on mobile by using a full-width Drawer and responsive task-center presentation. (#10428) by @mytharcher

  • Optimized pending workflow job recovery by adding a composite index on job status and ID. (#10427) by @mytharcher

  • Fix schedule workflows in static mode running one more time after endsOn (#10411) by @Tespera

• [Notification manager] Fix workflow user recipient variables displaying Variable parsing failed and unify user selectors across workflow nodes. (#10432) by @mytharcher

• [Workflow: Approval]

  • Adapted approval task details and remote forms to narrow mobile viewports. by @mytharcher

  • Fix approval assignee variables displaying Variable parsing failed and reuse the shared workflow user selector. by @mytharcher