Skip to content

Releases: chartbrew/chartbrew

v5.0.0

14 Apr 09:56

Choose a tag to compare

Changelog

No manual migration needed. V4 users can update to v5 like any other version, although we do recommend you update to Node v22+ if you haven't done so yet

✨ New features

  • Complete UI overhaul for Chartbrew v5
    Migrated the app from HeroUI v2 to HeroUI v3, including the new theming system and component APIs across modals, cards, tables, dropdowns, popovers, drawers, chips, tooltips, alerts, forms, navigation, settings screens, chart editor, connections UI, and dashboard areas.

  • Monaco-powered code editor
    Replaced the Ace editor with Monaco across SQL, API, Mongo, ClickHouse, Firestore, Google Analytics, Realtime DB, connection forms, public dashboard custom code, reports, and data transforms.

  • Professional email templates
    Added React Email templates for chart alerts, dashboard snapshots, email updates, and password resets, with a shared Chartbrew email layout and updated email rendering through nodemail.

  • New dashboard “What’s New” panel
    Added a dashboard panel for highlighting new features, tutorials, and tips.

  • Clearer dataset picker when creating charts
    Added a clearer dataset selection flow when starting a new chart.

home

🚀 Feature improvements

  • Better dashboard insights
    Dashboard and dataset cards now show more useful information about data updates.

  • Project timezone alignment
    Unified project timezone behavior with dashboard updates and snapshot scheduling, including backfill logic and test coverage.

  • Improved dataset-to-chart flow
    Added a clearer path from dataset creation to adding a chart in a dashboard.

  • Improved tagged dataset access
    Project admins can now access tagged datasets in query builders where their role allows it.

  • Improved AI orchestrator
    Added extra guards for the orchestrator to use team-scoped tools and moved from chat completions to responses OpenAI API

  • Smoother text widget creation
    Added smooth scrolling after creating a text widget so the new widget does not get lost on the dashboard.

💄 UI/UX updates

  • Simpler dataset setup
    Separated query/join UI from data request UI to reduce mental load.

  • Improved chart editor experience
    Refined chart editor UX and adjusted chart settings to better match the new series settings flow.

  • App-wide UX polish
    Updated sidebar, top navigation, AI modal, chart description, dataset list, dashboard list, settings, connections, tables, and forms as part of the v5 UI migration.

  • Login and signup UI refresh
    Adjusted login/signup page design and headers in the migration work, though those commits were marked as :construction:.

  • Slack integration copy update
    Updated the Slack integration highlight copy.

🔐 Security and access

  • Invite token validation
    Added invite token checks for the /invited route and related invite/signup flow.

  • Access-control refinement
    Adjusted roles and query-builder access so project admins can work with tagged datasets correctly.

  • Tagged-dataset edit restrictions
    Prevented project-access users with tagged datasets from editing datasets outside their allowed scope.

  • Report access hardening
    Blocked same-team users from accessing reports from projects they don't have access to by guessing report names.

  • Share-policy refresh protection
    Ensured allowReportRefresh does not bypass share-policy tokens or report passwords.

  • Share-policy permissions
    Prevented team members from editing share policies for projects they don't have access to.

  • Hidden-chart protection
    Fixed an issue where hidden charts in public reports could still be accessed if the chart ID was known.

🐛 Bug fixes

  • Fixed legacy team-based routing in the dashboard list view.
  • Fixed navigation issues when completing datasets.

🛠 Developer and dependency updates

  • ⬆️ Updated to React 19.
  • ⬆️ Updated to Vite 8.
  • ⬆️ Updated react-table and other client dependencies.
  • Replaced react-color with @uiw/react-color.
  • Migrated linting from ESLint to Oxlint.
  • Added simple dev commands for client and server.
  • Fixed CI after tooling updates.

v4.9.0

11 Mar 19:29

Choose a tag to compare

Changelog

Warning

This version fixes important security vulnerabilities! Please update to this version as soon as possible.
More information will be shared in due time (to allow users to update) in the public advisories.

🚀 New changes

  • Improved the queue locks for all jobs
  • added audit logging for data requests and workers + new API routes

🐛 Bug fixes

  • Fixed user deletion blocked by references
  • Fixed API pagination issues
  • Making sure all the sequelize connections are closed after operations finished
  • Fixed issue with legacy passwords in Node 22+ versions
  • Fixed navigation issues in community templates
  • Fixed typo in charset

Other fixes

  • 🔒 fixed cross-tenant operations for the template api route (thx @Kakeru-Ishii for reporting)
  • ⚡ Removed sqlite fallback for tests to increase CI performance
  • ⚡ Increased the granularity of job processes to allow control of chart updates in dashboard update jobs

v4.8.5

05 Mar 15:29

Choose a tag to compare

Changelog

🐛 Bug fixes

  • Fixed regression with the snapshot and logo URLs returning a 404
  • Fixed #351 issue with the wrong URL redirect after signup

🔒 Security fixes

  • Added protection against unintended private network requests using the API connector. Set CB_ALLOW_PRIVATE_NETWORK_CALLS=true to enable private network API calls. By default, existing connections can still connect through the private networks. (thanks @cwanglab for reporting)

v4.8.4

21 Feb 11:13

Choose a tag to compare

Warning

This version fixes important security vulnerabilities! Please update to this version as soon as possible.
More information will be shared in due time (to allow users to update) in the public advisories.

Changelog

  • 🔒 Improved the security of several API routes within the app (thanks @lighthousekeeper1212 for reporting)
  • 🔒 The files type for are checked on every upload to ensure they are not disguised as something else (thanks @ytlamal for reporting)

v4.8.3

17 Feb 10:33

Choose a tag to compare

Changelog

  • 🔒 Added extra sanitation for variables values (thanks @q1uf3ng for reporting!)
  • 🐛 Fixed issue with the Chart dataset configs failing to update because of permissions

v4.8.2

11 Feb 05:29

Choose a tag to compare

Changelog

A light update, but fixing a major bug that makes the query screen unresponsive.

🐛 Bug fixes

  • Fixed issue with the controlled tab in the Dataset Query screen making the page unresponsive

v4.8.1

10 Feb 03:01

Choose a tag to compare

Warning

This version fixes important security vulnerabilities! Please update to this version as soon as possible.

@ytlamal helped to identify and privately disclose security vulnerabilities in Chartbrew that are now fixed in v4.8.1. More information will be shared in due time (to allow users to update) in the newsletter and public advisories.

Changelog

🔒 Security fixes

  • Added AST validation for MongoDB queries
  • Fixed permission check in the Chart routes

🐛 Bug fixes

  • Fixed UI crash when removing a dataset from a chart
  • Fixed chart update issue when the subtype is not set

Other changes

  • Added a shortcut to adding team members in the sidebar
  • Added New badge to the slack integration

v4.8.0

28 Jan 06:18

Choose a tag to compare

Changelog

✨ New features

  • Slack integration (beta)
    Chartbrew now ships with a native Slack app powered by the AI Orchestrator.
    • Ask Chartbrew questions directly from Slack using mentions and threads
    • Generate charts, datasets, and snapshots from Slack conversations
    • Supports DMs and channel conversations, with clear setup feedback if the app isn’t configured
    • Channel-level controls to define which Slack channels can interact with Chartbrew
    • AI conversations started from Slack are tracked with source context
    • Includes improved instructions, a manifest example, and a new guide to get started with the Slack app in a self-hosted instance

Telegram 2026-01-28 13 12 36

🚀 Feature improvements

  • Improved the report sharing UI and flow for better clarity and usability.
  • Updated snapshot generation to include background and unique IDs for consistent screenshots.
  • Restricted quick actions UI to team admins and higher roles.
  • Improved integration discovery by explaining what each integration does in the UI.
  • Orchestrator improvements:
    • Better handling of bar chart fill colors
    • Added xLabelTicks support
    • Dataset auto-tagging when charts are placed in dashboards
    • Support for tool milestones and snapshots during chart creation

🐛 Bug fixes

  • Fixed issues where AI conversations could break due to missing tool responses or inconsistent conversation history.
  • Fixed dashboard link when creating a new dashboard.
  • Fixed potential crashes in edge-case error branches.

⬆️ Other changes

  • Minor dependency updates for both client and server.
  • Removed temporary local HTTPS configuration from snapshots.
  • Added and updated internal specs and agent documentation.
  • Added loading animation to the dashboard screen.
  • Expanded test coverage for auth, 2FA, email actions, invites, and password reset.

v4.7.0

11 Dec 07:43

Choose a tag to compare

Changelog

✨ New features

  • New navigation and dashboard experience
    The entire app has been redesigned with a cleaner layout, improved navigation, and new screens.
    • Faster access to projects, dashboards, and datasets
    • Simplified modals and action controls
    • Modernized dashboard cards and layout handling
    • New dataset filters and improved connection list design
  • Quick-create APIs for developers -
    • Added API routes for creating datasets and charts in one request
    • Introduced quick-create functions used by Chartbrew AI and automations

Google Chrome 2025-12-11 14 28 30

🚀 Feature improvements

  • The AI Assistant is now more proactive — it takes more initiative and asks fewer clarification questions when generating charts or datasets.
  • Embedded charts and gauges now render properly with accurate range handling.
  • Updated client and server dependencies for better performance.

🐛 Bug fixes

  • Fixed potential chart route crash in specific conditions.
  • Fixed AI conversation progress indicator not showing after the first message.

v4.6.0

12 Nov 04:27

Choose a tag to compare

Changelog

✨ New features

  • Chartbrew AI Assistant (beta)
    Introducing the new Chartbrew AI system powered by the internal AI Orchestrator.
    • Generate charts, datasets, and dashboards directly through chat
    • Automatically understand project, connection, and dataset context
    • Preview charts and get instant visual feedback in the conversation
    • Supports quick actions, markdown responses, and context switching mid-conversation
    • Works with the new Redis-based Socket Manager for real-time interactions
    • Built with persistent conversations, rate limiting, role-based access control, and error handling
      This feature is now live for early testing and will continue improving in upcoming releases.

Google Chrome 2025-11-12 09 40 12

🚀 Feature improvements

  • New table display formats
    Added support for displaying images and buttons for URLs in tables for richer dashboards.
  • Added the option to set a default page size for tables in chart settings.
  • Added controls in Team Settings for allowing or restricting public exports and refreshes.
  • Datasets are now auto-tagged when saved to projects for easier organization.

💄 UI/UX updates

  • Added contextual CTAs to guide users after creating new connections.
  • General design and layout polish across the app.

🐛 Bug fixes

  • Fixed issue with team settings button on the dashboard.
  • Fixed HeroUI button group styling issues.

⬆️ Updated client and server dependencies