docs(mcp): clarify default-role admission and token confinement Work unit: PR_mcp-session-variables/RUN-17094123924215392531/WU-001 Review issue: 001 — .nhost-code/review/PR_mcp-session-variables_COMMENT_001.md — ADDRESSED, ACCEPT Resolution: - Require tokens limited to user_mcp before promising role confinement. - Clarify default-role admission, per-call allowed-role selection, and OAuth discover…
test(mcp): verify upstream storage cancellation Work unit: PR_mcp-storage/RUN-17051356745287014898/WU-006 Review issue: 006 — .nhost-code/review/PR_mcp-storage_COMMENT_006.md — ADDRESSED, ACCEPT Resolution: - TestStorageCancellation waits for a live storage-download request before canceling, then requires upstream context cancellation and an unsuccessful MCP call within bounded waits. - Failure cl…
Merge branch 'session-elevating-dashboard' into session-elevating-docs Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
[cli@1.52.2] - 2026-10-26 🐛 Bug Fixes (cli) Stop querying workspaces and refresh cloud schema (#5286) ⚙️ Miscellaneous Tasks (cli) Bump references to 1.52.1 (dashboard) Bump references to 3.8.1
[@nhost/dashboard@3.8.1] - 2026-10-26 🐛 Bug Fixes (dashboard) Remove the old navy from the data grid cells (#5214) (dashboard) Ghost button (#5196) (dashboard) Fix popover scroll in sheets and tooltip warning (#5228) (dashboard) Show completion message after logical backup restore (#5230) (dashboard) Design tokens round 2, base components (#5215) (dashboard) One alert look with an automatic icon p…
No content.
[cli@1.52.1] - 2026-10-23 🐛 Bug Fixes (cli) Filter psql guards from initial migration (#5181) ⚙️ Miscellaneous Tasks (cli) Bump references to 1.52.0 (dashboard) Bump references to 3.7.1 (dashboard) Bump references to 3.8.0 (cli) Update schema (#5234) (functions) Bump references to 2.3.3
[functions@2.3.3] - 2026-10-23 🐛 Bug Fixes (functions) Update node.js to latest versions (#5245) ⚙️ Miscellaneous Tasks (functions) Serve example greetings as plain text to prevent reflected XSS (#5160) Chore (deps) Update vulnerable dependencies (#5087) (deps) Update vulnerable dependencies (#5098) (deps) Update vulnerable dependencies (#5103) (deps) Update vulnerable dependencies (#5123) (deps)…
[@nhost/dashboard@3.8.0] - 2026-10-20 🚀 Features (dashboard) Add support for composite foreign keys (#4494) (dashboard) Render DialogProvider with v3 dialog, sheet and alert-dialog (#5170) 🐛 Bug Fixes (dashboard) Gate native queries when running old graphql engine version (#5121) (dashboard) Allow editing AI assistants without GraphQL or webhook tools (#5197) (dashboard) Keep query params when res…
[@nhost/dashboard@3.7.1] - 2026-10-14 🐛 Bug Fixes (dashboard) Added CA flag (#5175)
[cli@1.52.0] - 2026-10-14 🚀 Features (postgres) Expose WAL and extension configuration (#5080) (cli) Added support for ca-central-1 (#5171) 🐛 Bug Fixes (cli) Use spec-compliant annotations for MCP resources (#5138) ⚙️ Miscellaneous Tasks (cli) Bump references to 1.51.2 (cli) Use production to generate bindings instead of staging for stability (#5119) (cli) Update certs (#5174) (dashboard) Bump ref…
[@nhost/dashboard@3.7.0] - 2026-10-14 🚀 Features (dashboard) New dashboard design (#5137) 🐛 Bug Fixes (dashboard) Add recovery for stale metadata conflicts (#5078) (dashboard) Route relationship creation through the shared error toast (#5082) (dashboard) Preserve user-entered values when cloning rows (#5081) (dashboard) Fix PAT token contrast in dark mode and unstyled toasts (#5124) (dashboard) To…
[cli@1.51.2] - 2026-09-30 ⚙️ Miscellaneous Tasks (cli) Bump references to 1.51.1 (postgres) Generate extension reference (#5024) (functions) Bump references to 2.3.2 (dashboard) Bump references to 3.6.0 (cli) Update schema and versions (#5088) Chore (deps) Update vulnerable dependencies (#5087)
No content.
[@nhost/nhost-js@4.9.0] - 2026-09-30 🚀 Features (auth) Add SMS deanonymization and phone number changes (#4576) 🐛 Bug Fixes (codegen) Emit nullable schemas as T | null in the typescript plugin (#4916) (docs) Correct submodule import in docstring examples (#5002) ⚙️ Miscellaneous Tasks (nixops) Bump Go to 1.27 (#4887) Chore (deps) Update vulnerable dependencies (#4744) (deps) Update vulnerable depe…
[@nhost/stripe-graphql-js@1.4.0] - 2026-09-30 🚀 Features (landing) Wire into monorepo build & deploy pipeline (landing) Merge nhost/landing into monorepo (#4688) 🐛 Bug Fixes (nhost-js) Resolve minimatch jest coverage crash (#4626) (ci) Fix vercel build complaining about a missing functions directory and update deps for vulnerabilities (#4690) 💼 Other Merge remote-tracking branch 'origin/main' into…
[storage@0.15.1] - 2026-09-30 🐛 Bug Fixes (docs) Align specs with reality (#4632) ⚙️ Miscellaneous Tasks (nixops) Bump flake, bump nodejs and tooling (#4894) (nixops) Bump Go to 1.27 (#4887) (nixops) Harden validation of the exported Nhost overlay and minor deprecation fixes (#5069)
[constellation@0.7.1] - 2026-09-30 🐛 Bug Fixes (auth) Guard webauthn challenge storage with a mutex (#4884) (constellation) Pnpm build failure (#4969) (constellation) Resolve foreign_key_constraint_on against the exact constraint (#5028) ⚙️ Miscellaneous Tasks (nixops) Bump Go to 1.27 (#4887) (docs) Fix reversed markdown link and typos in docs (#4988) (nixops) Harden validation of the exported Nho…
[functions@2.3.2] - 2026-09-30 🐛 Bug Fixes (functions) Pin npm 11 in shared dependency installer (#5014) ⚙️ Miscellaneous Tasks (nixops) Update to nodejs 24.21.0 and pnpm 12 (#5009) Chore (deps) Update vulnerable dependencies (#4998)
[@nhost/dashboard@3.6.0] - 2026-09-30 🚀 Features (dashboard) Add last sign-in method badge (#4984) (dashboard) Manage logical models and native queries (#4792) (dashboard) Manage logical model and native queries permissions (#4793) (dashboard) Manage native queries relationships (#4777) 🐛 Bug Fixes (dashboard) Isolate project config errors (#4818) (dashboard) Improve multiline text tooltip accessi…
rename AUTH_SMS_PASSWORDLESS_ENABLED to AUTH_OTP_SMS_ENABLED for gene… …ral use
[mcp@0.3.0] - 2026-09-18 🚀 Features (mcp) Add unauthenticated /healthz for probes (#4948) ⚙️ Miscellaneous Tasks (nixops) Bump Go to 1.27 (#4887) (mcp) Publish the MCP service to the official MCP Registry (#5039)
[cli@1.51.1] - 2026-09-16 ⚙️ Miscellaneous Tasks (cli) Bump references to 1.51.0 (cli) Change cli_wf_release runner so provenance check doesn't … (#4994) (functions) Bump references to 2.3.0 (functions) Bump references to 2.3.1
What's Changed fix(functions): add glibc dynamic loader to dev runtime image by @skoveit in #5006 Full Changelog: https://github.com/nhost/nhost/compare/auth@0.52.0...functions@2.3.1
[auth@0.52.0] - 2026-09-15 🚀 Features (auth) Added support for generic SMS replacing adhoc implementations (#4314) (auth) Add SMS deanonymization and phone number changes (#4576) 🐛 Bug Fixes (auth) Prevent mails from threading in gmail (#4622) (auth) Block IPv6 transition addresses in the CIMD SSRF guard (#4784) (auth) Guard webauthn challenge storage with a mutex (#4884) (docs) Align specs with r…
What's Changed fix(functions): pin Yarn Classic in shared dependency installer by @skoveit in #4975 fix(functions): normalize dependency installation by @skoveit in #4904 fix(functions): use chokidar polling for hot-reload over Docker bind-mounts by @dbarrosop in #4231
[cli@1.51.0] - 2026-09-12 🚀 Features (cli) Added support for ap-southeast-2 and eu-north-1 (#4832) 🐛 Bug Fixes (docs) Update cli install instructions (#4879) (cli) Fix broken rootless docker/podman because uid:gid is set (#4778) ⚙️ Miscellaneous Tasks (cli) Bump references to 1.50.2 (dashboard) Bump references to 3.4.0 (dashboard) Bump references to 3.4.1 (dashboard) Bump references to 3.5.0 (dash…
The branch-scoped tag workflow could no longer release anything. It calls the reusable engine release workflow without the two bot secrets, and that workflow began declaring them required when bump-refs was added, so the call is invalid and the next tag cut from this branch would fail before building. Earlier tags succeeded because a tag push runs the definition present at the tagged commit, and t…
[@nhost/dashboard@3.5.3] - 2026-09-08 🐛 Bug Fixes (dashboard) Require typed confirmation to delete projects and orgs (#4949) ⚙️ Miscellaneous Tasks (dashboard) Update schema in biome.json (#4939)
[@nhost/dashboard@3.5.2] - 2026-09-03 🐛 Bug Fixes (dashboard) Exclude generated columns from validation (#4919) (dashboard) Migrate toasts to v3 (#4921) (dashboard) Do not retry mutations in the Apollo retry link (#4927) ⚙️ Miscellaneous Tasks (nixops) Bump flake, bump nodejs and tooling (#4894) (dashboard) Remove ControlledSwitch (#4923) Chore (deps) Update vulnerable dependencies (#4863) (deps)…