Baserow - Package Updates

[Package Updates]

[1.36.0]

• Update uv to 0.11.0
• Full Changelog
• rustls-platform-verifier is used instead of rustls-native-certs and webpki for certificate verification
• This change should have no effect unless you are using the native-tls option to enable reading system certificates.
• rustls-platform-verifier delegates to the system for certificate validation (e.g., Security.framework on macOS) instead of eagerly loading certificates from the system and verifying them via webpki. The effects of this change will vary based on the operating system. In general, uv's certificate validation should now be more consistent with browsers and other native applications. However, this is the most likely cause of breaking changes in this release. Some previously failing certificate chains may succeed, and some previously accepted certificate chains may fail. In either case, we expect the validation to be more correct and welcome reports of regressions.
• In particular, because more responsibility for validating the certificate is transferred to your system's security library, some features like CA constraints or revocation of certificates via OCSP and CRLs may now be used.
• This change should improve performance when using system certificate on macOS, as uv no longer needs to load all certificates from the keychain at startup.
• Treat 'Dynamic' values as case-insensitive (#​18669)
• Use a dedicated error for invalid cache control headers (#​18657)
• Enable checksum verification in the generated installer script (#​18625)
• Add --service-format and --service-url to uv audit (#​18571)
• Find the dynamic linker on the file system when sniffing binaries fails (#​18457)
• Fix export of conflicting workspace members with dependencies (#​18666)
• Respect installed settings in uv tool list --outdated (#​18586)

[Package Updates]

[1.36.1]

• Update uv to 0.11.1
• Full Changelog
• Add missing hash verification for riscv64gc-unknown-linux-musl (#​18686)
• Fallback to direct download when direct URL streaming is unsupported (#​18688)
• Revert treating 'Dynamic' values as case-insensitive (#​18692)
• Remove torchdata from list of packages to source from the PyTorch index (#​18703)
• Special-case == Python version request ranges (#​9697)

[Package Updates]

[1.36.2]

• Update uv to 0.11.2

[Package Updates]

[1.36.3]

• Update uv to 0.11.3
• Full Changelog
• Add progress bar for hashing phase in uv publish (#​18752)
• Add support for ROCm 7.2 (#​18730)
• Emit abi3t tags for every abi3 version (#​18777)
• Expand uv workspace metadata with dependency information from the lock (#​18356)
• Implement support for PEP 803 (#​18767)
• Pretty-print platform in built wheel errors (#​18738)
• Publish installers to /installers/uv/latest on the mirror (#​18725)
• Show free-threaded Python in built-wheel errors (#​18740)
• Add --ignore and --ignore-until-fixed to uv audit (#​18737)
• Bump simple API cache (#​18797)

[Package Updates]

[1.36.6]

• Update uv to 0.11.6
• Full Changelog
• Do not remove files outside the venv on uninstall (#​18942)
• Validate and heal wheel RECORD during installation (#​18943)
• Avoid uv cache clean errors due to Win32 path normalization (#​18856)

[Package Updates]

[1.37.0]

• Update baserow to 2.2.0
• Full Changelog
• [Database] Add the array_unique formula function to deduplicate lookup arrays. #​2326
• [Builder] Allow to drag and drop element on the page #​3634
• [Database] Introduced restricted view ownership type for view-level permissions. #​3673
• [Automation] Support automation templates #​3871
• [Core] Improved Baserow formula function argument validation. #​4532
• [Database] Add the array_slice formula function to extract sub-arrays from lookup arrays. #​5053
• [Database] Add instance wide data scanner.
• [Database] Introduced field type that can edit a row via a form view. #​2287
• [Database] Allow freezing (pinning) up to 4 columns on the left side of the grid view. #​2047
• [Database] Generalize the index formula to work with any array type (not just file fields) and add first and last convenience functions. #​5065

[Package Updates]

[1.37.1]

• Update uv to 0.11.7
• Full Changelog
• Upgrade CPython build to 2026041 including an OpenSSL security upgrade (#19004)
• Elevate configuration errors to required-version mismatches (#18977)
• Further improve TLS certificate validation messages (#18933)
• Improve --exclude-newer hints (#18952)
• Fix --script handling in uv audit (#18970)
• Fix traversal of extras in uv audit (#18970)
• De-quote workspace metadata in linehaul data (#18966)
• Avoid installing tool workspace member dependencies as editable (#18891)
• Emit JSON report for uv sync --check failures (#18976)
• Filter and warn on invalid TLS certificates (#18951)

[Package Updates]

[1.37.2]

• Update baserow to 2.2.1
• Full Changelog
• [Builder] Add 'clear' button to the date input element. #5202
• [Database] Add file attachment support for Anthropic, Mistral and other AI field providers #5154
• [Database] Fix negative sign in formula output disappearing when a cell is selected #4323
• [Core] Fix import workspace crashes on retry after failed backend import #5140
• [Database] Fix notification panel crash when a periodic_data_sync_deactivated notification is rendered #5171
• [Database] Fix link-row group-by crash in grid view with more than 20 linked items #5184
• [Core] Fix RichTextEditor display in row comment notifications #5230
• [Core] Fix password reset tokens not being invalidated after use, allowing persistent account takeover. Tokens are now single-use, token expiry reduced to 1 hour, and a confirmation email is sent on every password change. #5165
• [Builder] Fixes if() formulas in the Application Builder silently rendering nothing when the condition references an empty field
• [Core] Workspace invitations no longer support custom messages, and the BASEROW_MAX_PENDING_WORKSPACE_INVITES env var has been removed.

[Package Updates]

[1.37.3]

• Update uv to 0.11.8
• Full Changelog
• Add --python-downloads-json-url to python pin (#19092)
• Fetch uv from Astral mirror during self-update (#18682)
• Support pip uninstall -y (#19082)
• Add UV_PYTHON_NO_REGISTRY (#19035)
• Add an environment variable for UV_NO_PROJECT (#19052)
• Expose UV_PYTHON_SEARCH_PATH for Python discovery PATH overrides (#19034)
• Ensure uv invocations of git do not inherit repository location environment variables (#19088)
• Redact pre-signed upload URLs in verbose output (#19146)
• Handle transitive URL dependencies in PEP 517 build requirements (#19076, #19086)
• Disable transparent Python upgrades in projects when a patch version is requested via .python-version (#19102)

[Package Updates]

[1.37.4]

• Update baserow to 2.2.2
• Full Changelog
• [Automation] Send notification when a workflow is disabled #5186
• [Core] Allow self-hosted operators to inject custom client-side scripts via environment variables.
• [Builder] Resolved a bug which prevented users from creating data sources from the data source dropdown's footer. #5118
• [Core] Give Kuma the current license tier in its context and steer uncertain feature or plan questions to docs search. #5210
• [Core] Hardened user uploaded media serving and neutralized active-content file uploads by default.
• [Builder] stop infinite /dispatch-data-sources/ refetch loop in page editor