Releases: chartbrew/chartbrew
v5.0.0
Changelog
No manual migration needed. V4 users can update to v5 like any other version, although we do recommend you update to Node v22+ if you haven't done so yet
✨ New features
-
Complete UI overhaul for Chartbrew v5
Migrated the app from HeroUI v2 to HeroUI v3, including the new theming system and component APIs across modals, cards, tables, dropdowns, popovers, drawers, chips, tooltips, alerts, forms, navigation, settings screens, chart editor, connections UI, and dashboard areas. -
Monaco-powered code editor
Replaced the Ace editor with Monaco across SQL, API, Mongo, ClickHouse, Firestore, Google Analytics, Realtime DB, connection forms, public dashboard custom code, reports, and data transforms. -
Professional email templates
Added React Email templates for chart alerts, dashboard snapshots, email updates, and password resets, with a shared Chartbrew email layout and updated email rendering throughnodemail. -
New dashboard “What’s New” panel
Added a dashboard panel for highlighting new features, tutorials, and tips. -
Clearer dataset picker when creating charts
Added a clearer dataset selection flow when starting a new chart.
🚀 Feature improvements
-
Better dashboard insights
Dashboard and dataset cards now show more useful information about data updates. -
Project timezone alignment
Unified project timezone behavior with dashboard updates and snapshot scheduling, including backfill logic and test coverage. -
Improved dataset-to-chart flow
Added a clearer path from dataset creation to adding a chart in a dashboard. -
Improved tagged dataset access
Project admins can now access tagged datasets in query builders where their role allows it. -
Improved AI orchestrator
Added extra guards for the orchestrator to use team-scoped tools and moved from chat completions to responses OpenAI API -
Smoother text widget creation
Added smooth scrolling after creating a text widget so the new widget does not get lost on the dashboard.
💄 UI/UX updates
-
Simpler dataset setup
Separated query/join UI from data request UI to reduce mental load. -
Improved chart editor experience
Refined chart editor UX and adjusted chart settings to better match the new series settings flow. -
App-wide UX polish
Updated sidebar, top navigation, AI modal, chart description, dataset list, dashboard list, settings, connections, tables, and forms as part of the v5 UI migration. -
Login and signup UI refresh
Adjusted login/signup page design and headers in the migration work, though those commits were marked as:construction:. -
Slack integration copy update
Updated the Slack integration highlight copy.
🔐 Security and access
-
Invite token validation
Added invite token checks for the/invitedroute and related invite/signup flow. -
Access-control refinement
Adjusted roles and query-builder access so project admins can work with tagged datasets correctly. -
Tagged-dataset edit restrictions
Prevented project-access users with tagged datasets from editing datasets outside their allowed scope. -
Report access hardening
Blocked same-team users from accessing reports from projects they don't have access to by guessing report names. -
Share-policy refresh protection
EnsuredallowReportRefreshdoes not bypass share-policy tokens or report passwords. -
Share-policy permissions
Prevented team members from editing share policies for projects they don't have access to. -
Hidden-chart protection
Fixed an issue where hidden charts in public reports could still be accessed if the chart ID was known.
🐛 Bug fixes
- Fixed legacy team-based routing in the dashboard list view.
- Fixed navigation issues when completing datasets.
🛠 Developer and dependency updates
- ⬆️ Updated to React 19.
- ⬆️ Updated to Vite 8.
- ⬆️ Updated
react-tableand other client dependencies. - Replaced
react-colorwith@uiw/react-color. - Migrated linting from ESLint to Oxlint.
- Added simple dev commands for client and server.
- Fixed CI after tooling updates.
v4.9.0
Changelog
Warning
This version fixes important security vulnerabilities! Please update to this version as soon as possible.
More information will be shared in due time (to allow users to update) in the public advisories.
🚀 New changes
- Improved the queue locks for all jobs
- added audit logging for data requests and workers + new API routes
🐛 Bug fixes
- Fixed user deletion blocked by references
- Fixed API pagination issues
- Making sure all the sequelize connections are closed after operations finished
- Fixed issue with legacy passwords in Node 22+ versions
- Fixed navigation issues in community templates
- Fixed typo in charset
Other fixes
- 🔒 fixed cross-tenant operations for the template api route (thx @Kakeru-Ishii for reporting)
- ⚡ Removed sqlite fallback for tests to increase CI performance
- ⚡ Increased the granularity of job processes to allow control of chart updates in dashboard update jobs
v4.8.5
Changelog
🐛 Bug fixes
- Fixed regression with the snapshot and logo URLs returning a 404
- Fixed #351 issue with the wrong URL redirect after signup
🔒 Security fixes
- Added protection against unintended private network requests using the API connector. Set
CB_ALLOW_PRIVATE_NETWORK_CALLS=trueto enable private network API calls. By default, existing connections can still connect through the private networks. (thanks @cwanglab for reporting)
v4.8.4
Warning
This version fixes important security vulnerabilities! Please update to this version as soon as possible.
More information will be shared in due time (to allow users to update) in the public advisories.
Changelog
- 🔒 Improved the security of several API routes within the app (thanks @lighthousekeeper1212 for reporting)
- 🔒 The files type for are checked on every upload to ensure they are not disguised as something else (thanks @ytlamal for reporting)
v4.8.3
v4.8.2
Changelog
A light update, but fixing a major bug that makes the query screen unresponsive.
🐛 Bug fixes
- Fixed issue with the controlled tab in the Dataset Query screen making the page unresponsive
v4.8.1
Warning
This version fixes important security vulnerabilities! Please update to this version as soon as possible.
@ytlamal helped to identify and privately disclose security vulnerabilities in Chartbrew that are now fixed in v4.8.1. More information will be shared in due time (to allow users to update) in the newsletter and public advisories.
Changelog
🔒 Security fixes
- Added AST validation for MongoDB queries
- Fixed permission check in the Chart routes
🐛 Bug fixes
- Fixed UI crash when removing a dataset from a chart
- Fixed chart update issue when the subtype is not set
Other changes
- Added a shortcut to adding team members in the sidebar
- Added New badge to the slack integration
v4.8.0
Changelog
✨ New features
- Slack integration (beta)
Chartbrew now ships with a native Slack app powered by the AI Orchestrator.- Ask Chartbrew questions directly from Slack using mentions and threads
- Generate charts, datasets, and snapshots from Slack conversations
- Supports DMs and channel conversations, with clear setup feedback if the app isn’t configured
- Channel-level controls to define which Slack channels can interact with Chartbrew
- AI conversations started from Slack are tracked with source context
- Includes improved instructions, a manifest example, and a new guide to get started with the Slack app in a self-hosted instance
🚀 Feature improvements
- Improved the report sharing UI and flow for better clarity and usability.
- Updated snapshot generation to include background and unique IDs for consistent screenshots.
- Restricted quick actions UI to team admins and higher roles.
- Improved integration discovery by explaining what each integration does in the UI.
- Orchestrator improvements:
- Better handling of bar chart fill colors
- Added
xLabelTickssupport - Dataset auto-tagging when charts are placed in dashboards
- Support for tool milestones and snapshots during chart creation
🐛 Bug fixes
- Fixed issues where AI conversations could break due to missing tool responses or inconsistent conversation history.
- Fixed dashboard link when creating a new dashboard.
- Fixed potential crashes in edge-case error branches.
⬆️ Other changes
- Minor dependency updates for both client and server.
- Removed temporary local HTTPS configuration from snapshots.
- Added and updated internal specs and agent documentation.
- Added loading animation to the dashboard screen.
- Expanded test coverage for auth, 2FA, email actions, invites, and password reset.
v4.7.0
Changelog
✨ New features
- New navigation and dashboard experience
The entire app has been redesigned with a cleaner layout, improved navigation, and new screens.- Faster access to projects, dashboards, and datasets
- Simplified modals and action controls
- Modernized dashboard cards and layout handling
- New dataset filters and improved connection list design
- Quick-create APIs for developers -
- Added API routes for creating datasets and charts in one request
- Introduced quick-create functions used by Chartbrew AI and automations
🚀 Feature improvements
- The AI Assistant is now more proactive — it takes more initiative and asks fewer clarification questions when generating charts or datasets.
- Embedded charts and gauges now render properly with accurate range handling.
- Updated client and server dependencies for better performance.
🐛 Bug fixes
- Fixed potential chart route crash in specific conditions.
- Fixed AI conversation progress indicator not showing after the first message.
v4.6.0
Changelog
✨ New features
- Chartbrew AI Assistant (beta)
Introducing the new Chartbrew AI system powered by the internal AI Orchestrator.- Generate charts, datasets, and dashboards directly through chat
- Automatically understand project, connection, and dataset context
- Preview charts and get instant visual feedback in the conversation
- Supports quick actions, markdown responses, and context switching mid-conversation
- Works with the new Redis-based Socket Manager for real-time interactions
- Built with persistent conversations, rate limiting, role-based access control, and error handling
This feature is now live for early testing and will continue improving in upcoming releases.
🚀 Feature improvements
- New table display formats
Added support for displaying images and buttons for URLs in tables for richer dashboards. - Added the option to set a default page size for tables in chart settings.
- Added controls in Team Settings for allowing or restricting public exports and refreshes.
- Datasets are now auto-tagged when saved to projects for easier organization.
💄 UI/UX updates
- Added contextual CTAs to guide users after creating new connections.
- General design and layout polish across the app.
🐛 Bug fixes
- Fixed issue with team settings button on the dashboard.
- Fixed HeroUI button group styling issues.
⬆️ Updated client and server dependencies



