Hasura Auth

This patch release for v2.50 introduces opt-in logging redaction for various triggers and handlers, and improves the behavior of the @cached directive when the Redis store is unavailable. It also fixes a critical SSO login issue in the Console and addresses security vulnerabilities in the data connector.

This patch release for v2.50 includes critical security fixes for the mssql backend and CLI dependencies, alongside improvements to async actions and event trigger validation. It also addresses compatibility issues with FIPS-enabled hosts and restores previous naming conventions as the default.

This patch release addresses critical security vulnerabilities in the super-connector and frontend dependencies, alongside important bug fixes for the MSSQL backend and Postgres SSL connections on FIPS-enabled hosts.

This patch release for v2.49 includes server-side improvements like the addition of `x-request-id` header in error responses and new jsonb path filter operators. It also addresses bug fixes in the console and CLI, and updates dependencies to remediate security vulnerabilities.

This is a patch release for v2.45. It includes a bug fix by upgrading openssl in the ubuntu base image to address CVE-2026-45447.

This patch release introduces idempotency for server migrations, adds queue size limiting and monitoring for WebSockets, and introduces stricter JWT validation options. It also removes support for the deprecated X-Hasura-Access-Key header.

This patch release for v2.49 introduces a new configuration option to selectively disable event processing pollers and includes security updates across the Server, Data Connector, and Build components.

This is a patch release for v2.45, primarily addressing a high-severity security vulnerability and fixing several bugs related to data connectors, event triggers, and JSON parsing robustness.

This patch release addresses a high-severity security vulnerability and introduces granular transaction control for SQL migrations via the CLI. It also adjusts how malformed JSON containing control characters is handled to maintain compatibility for some legacy clients.

This is a patch release for v2.49, focusing on server stability by fixing event trigger shutdown issues and mitigating DoS vectors.

This patch release stabilizes the Relay API to /v1/relay and introduces granular control over enabling Relay and disabling the entire eventing subsystem via new configuration flags.

This patch release (v2.45) introduces several bug fixes across server components, data connectors, and the Console, alongside minor performance improvements and configuration options for Redis pooling. Notably, it now errors on previously silent remote schema/action type conflicts.

This is a patch release for v2.48, primarily addressing a bug in server metric reporting.

This is a patch release for v2.48, primarily addressing a bug in MariaDB data connector mutations.

This is a patch release for v2.48, primarily addressing a performance issue in Oracle introspection.

This is a patch release for v2.48, primarily addressing server-side consistency in OpenTelemetry reporting and fixing a bug related to EKG gauge behavior for active subscriptions.

This is a patch release focused on fixing performance issues in the server and resolving several critical bugs related to event triggers and data connector operations, particularly concerning self-referencing tables and nullable updates.

This is a patch release for v2.48, primarily focusing on server-side bug fixes and container base image/tool upgrades.

This patch release for v2.48 includes performance improvements for BigQuery schema introspection and fixes a bug in the Console's table schema editor. New configuration options for Redis connection pooling were also added for Enterprise users.

This patch release for v2.48 includes several bug fixes across the Server and Console components, notably improving connection handling and resolving permission saving issues.

This patch release for v2.48 includes support for Postgres 17, fixes schema mixing issues in remote joins, and improves streaming subscription reliability on non-unique columns for supported databases.

This is a patch release (v2.48) focused on improving security by sanitizing logs and enhancing JWK compatibility.

This is a patch release (v2.48) focusing on fixing issues related to OpenAPI specification generation, subscription handling, and JWK parsing, with an enterprise-specific configuration update for JDBC authentication.

This is a patch release for v2.48, primarily containing bug fixes and improvements related to server-side data handling and BigQuery integration.

This is a patch release (v2.48) focusing on bug fixes and improvements across the Server and Console components, particularly around schema description handling and remote schema modification.