appsmith

Features

• Added extraVolumes and extraVolumeMounts config options to Helm chart (#41515)
• Security warning displayed when ps is disabled (#41486)
• User display names now shown on workspace members page (#8545)

Fixes

• Security: Anonymous users can no longer execute unpublished actions (#41517)
• Helm charts now default to Appsmith-built MongoDB image (#41506)
• Base image w...

Features

• Added a Redeploy button to allow users to sync the latest changes to App view mode. (#41459)
• Displayed workspace logos in the sidebar navigation. (#41377)

Fixes

• Fixed an issue where git pull created a sync commit, resulting in lost changes. (#41467)
• Updated Helm charts to support deployments with zero replicas. (#41444)
• Temporarily disabled the `p...

Features

• Static URL Support for Applications and Pages. (#41312)
• Added support for Custom GraphQL Actions for integrations using GraphQL. (#41404)
• Added formatting for GraphQL body in the query editor. (#41425)
• Added a setValue method for the Radio Group widget. (#41402)
• Enabled specifying deployments in the Helm chart without requiring autoscaling. (#41397)

**Fixes...

Feature

• Exposed application height and width in the appsmith.ui state object. (#41339)

Fixes

• Resolved an issue causing git pull to fail for packages. (#41389)
• Corrected currency formatting for decimals and thousand separators. (#41372)
• Disabled Docker cache during base image builds to prevent stale layers. (#41368)

Features

• Added functionality to regenerate Git deploy keys. (PR #41357)
• Enabled users to regenerate Git SSH keys directly. (PR #41352)

Fixes

• Fixed a null pointer exception (NPE) occurring in OPL calculation during branch creation. (PR #41331)

Fixes

• Ensured applications render correctly when AI agent flags are only partially enabled. (PR #41317)
• Fixed an issue in URL generation by handling potential null values in basePageId. (PR #41315)

Security Update

• Resolved CVE-2025-58754 by upgrading the axios dependency. (PR #41295)

Fixes

• Resolved an issue causing download failures for Hurl due to upstream changes. (PR #41288)
• Addressed security vulnerabilities (CVE-2025-9288 and CVE-2025-9287) in the sha.js and cipher-base libraries. (PR #41284)

Features

• Added support for listing function versions and aliases in the AWS Lambda Plugin. (PR #41263)
• Backend enhancement: Applications and workspaces are now sorted alphabetically. (PR #41253)
• Added an account suspension error message to improve clarity when rate limiting is triggered. (PR #41254)

Fixes

• Cleaned up logs for better maintenanc...

Full Changelog: https://github.com/appsmithorg/appsmith/compare/v1.86...v1.87

Fixes

• Resolved multiple security vulnerabilities:

  • CVE-2024-38821 (PRs #41221, #41188)
  • CVE-2025-48734 (PR #41223)

  Note: With this recent upgrade of the Spring Security library, the handling of Google authentication has been impacted. Since Google auth is integrated through Spring Security, configurations which allow multiple domains for the sign...