v4.1.3

Security

• Engine: trim Docker runtime image payloads to reduce CVE surface (!1144, #709)
• CE UI: bump uuid and marked to fix dependency CVEs (!1142)

Full diff

Diff between versions 4.1.2 and 4.1.3

v4.1.2

Security

• CE UI: refresh Alpine packages in run stage to clear OS CVEs (!1141)

Full diff

Diff between versions 4.1.1 and 4.1.2

v4.1.1

New Features

• Auto-detect parallelism for pg_dump and pg_restore based on RDS/Aurora instance type in the logical refresh component (!1133)
• Expose logicalRestore configs in config projection and UI (!1130, #701)
• CLI --protected flag accepts duration suffixes (m/h/d) for time-limited protection leases (!1132, #702)

Improvements and Fixes

• Retrieval: pull container image when Docker inspect returns a wrapped not-found error (!1129, #700)
• UI: fix CreateClone form layout and deletion protection label (!1134, #703)
• Documented Prometheus metrics endpoint and aligned OpenAPI spec with API version 4.1.0 (!1131)

Security

• Bumped pgx, pinned Go to 1.26.2, updated Docker base image to docker:29.4.1 (!1139, #706)
• Bumped backend and UI dependencies and base image to address further CVEs (!1138, #705)

Internal

• Added CVE audit skill and scheduled GitLab CI jobs for recurring dependency and image scans (!1137, #704)

Full diff

Diff between versions 4.1.0 and 4.1.1

DBLab Engine v4.1.0

New Features

• Teleport integration (available in Standard and Enterprise Editions only): new dblab teleport serve CLI command and hostssl cert in default pg_hba (!1105)
• RDS/Aurora logical refresh component (!1070)
• Built-in databaseRename option for snapshot jobs (!1096)
• Protection lease concept for time-limited clone protection (!1088, #669)
• Prometheus exporter for DBLab metrics (!1087, #668)
• Sync WAL lag Prometheus metric for physical mode (!1093, #673)
• ARM64/Colima support and UI API proxying fixes (!1077)
• Redesigned Disks section in UI to group datasets under a shared pool header (!1103, #682)
• RDS IAM instance identifier added to config projection (!1106)

Improvements and Fixes

• Fixed UI config page crash on undefined databases and customOptions in formatConfig (!1126, #697)
• Fixed UI 404 on page refresh at /instance (!1120, #693)
• Fixed pool name in the snapshot API (!1117)
• Fixed projection.Store overwriting existing YAML slices and maps (!1111, #687)
• Added timeout to retrieval activity endpoint to prevent hanging (!1109, #686)
• Stabilized branch metadata verification and protected branch heads during cleanup (!1097)
• Fixed tab-delimited ZFS output parsing in branch functions (!1102)
• Fixed misleading disk space indicator for shared ZFS pools (!1095, #674)
• Use --snapshot-id instead of branch in CLI clone command snippet (!1094, #657)
• Set default branch to main for clone creation (!1075, #662)
• Fixed test errors after PostgreSQL 9.6 removal (!1116, #683)

Security

• Removed unused crypto/stream polyfills - CVE-2025-14505 (!1124, #270)
• Resolved CVE-2026-1615 (jsonpath/bfj) and CVE-2024-11831 (serialize-javascript) (!1100, #680)
• Addressed 3 additional security vulnerabilities in UI npm dependencies (!1099, #680)
• Fixed CVE-2024-41110: updated Docker base image to 27.5.1 (!1098, #679)
• Dropped PostgreSQL 9.6 support (EOL since November 2021) (!1115, #683)

Internal

• Migrated UI to Vite and ESLint 9, fixed npm CVEs (!1122, #320, #315, #288, #287, #236, #235, #229)
• Bumped backend dependencies, added upgrades and CVE fixes implementation plan (!1121)
• Bumped Node from 22-alpine to 24-alpine and closed remaining Dependabot PRs (!1123)
• Batch patch-level Go and UI dependency bumps (!1128)
• Bumped all dependencies (Dependabot consolidation) (!1118, #691)
• Limited Dependabot to security-only updates (!1127)
• Ignored major version bumps in Dependabot config (!1125)
• Updated Dependabot configuration for weekly updates (!1072)
• Improved unit test coverage from 19% to 26% (!1113)
• DCF-5: added CI peer review gate (SOC2) (!1108)
• Enabled GitLab SAST scanning - DCF-712 (!1104)
• Fixed semgrep-sast job broken by global CI settings - DCF-712
• Added gitleaks pre-commit hook (!1112)
• CI: added interruptible jobs, auto-cancel, and reduced MR test matrix (!1091, #670, #671)
• Added missing artifacts to build-binary-client-master (!1092, #670)
• Added pre-push testing requirement to CLAUDE.md (!1101)

Full diff

Diff between versions 4.0.4 and 4.1.0

DBLab Engine v4.0.4

Security

• Updated pgtype to v1.14.4 to address CVE-2024-27304 (!1086)

Bug Fixes

• Fixed config page losing shared_preload_libraries value on reload when using SE images (!1085)
• Fixed logical snapshot cleanup on full-refresh (!1068)
• Fixed duplicate "ago" suffix in snapshots list timestamps (!1089)
• Fixed PostgreSQL icon rendering artifact caused by improper SVG path closure (!1082)
• Fixed dataset names not showing in branch dropdown (!1080)
• Removed hardcoded placeholder IP address (34.56.78.90) from default configuration (!1046)

Full diff

Diff between versions 4.0.3 and 4.0.4

DBLab Engine v4.0.3

Improvements and Fixes

• Fixed snapshot creation using the CLI 'snapshot create' command (!1061)
• Fixed duplicate mount entries in /proc/mounts (!1063)
• Added timeout to psql activity command and improved connection handling (!1062)
• Fixed branch list sorting to use dataStateAt field (!1064)
• Fixed duplicate branches appearing in the CLI list command (!1065)

Internal

• Updated dependencies to address critical CVE vulnerabilities (!1066)
• Updated Docker base image and Docker Go SDK to v27.1.1 (!1066)
• Fixed deprecation linter warnings (!1067)

Full diff

Diff between versions 4.0.2 and 4.0.3

DBLab Engine v4.0.2

Improvements and Fixes

• Added support for PostgreSQL 18 !1056
• Fixed CLI install script to support aarch64 architecture !1057
• Improved performance of the dblab clone list command !1054
• Display all branches including ambiguous ones and filter snapshots by dataset !1059
• Clean up the entire clone dataset if there are no other revisions !1054

Internal

• Fixed CI by installing google-cloud-sdk for GCP integration !1060
• Updated Go to 1.24 !1054
• Removed non-functional depshield badge !1058

Full diff

Diff between versions 4.0.1 and 4.0.2

DBLab Engine v4.0.1

Improvements and Fixes

• Fixed date formatting errors with invalid (empty) dates that could cause crashes on the branches page !1049
• Implemented proper cleanup for clone datasets on destroy operations !1052
• Enhanced branch metadata verification after snapshot creation !1051

Internal

• Removed swagger-ui deployment !1047
• Updated UI package versions and fixed shared package npm release !1053
• Updated dependencies to address security vulnerabilities !1050
• Updated LICENSE file year !1048

Full diff

Diff between versions 4.0.0 and 4.0.1

DBLab Engine v4.0.0

New features

• Instant database branching (docs) !638, !647, !675, !680, !682, !770, !823, !841, !858, !888, !939, !944, !957, !965, !974, !982, !987, !990, !997, !1001, !1016
• Snapshots on demand: users can create snapshots using API/CLI/UI (docs) !637, !934, !971, !973, !988, !991, !992, !993, !1000, !1001, !1002, !1003, !1011, !1013
• Full refresh on demand: for logical mode, users can initiate full refresh using API/CLI/UI (for logical mode) !1023, !1024, !1025
• Improved UI: more tabs, icons, filtering, CLI/API snippets !731, !998
• Webhooks for major events (docs) !763
• macOS support (docs) !1022

Improvements and fixes

• Updated OpenAPI spec – api.dblab.dev !741, !743, !1006
• Clone counting and restoration cleanup: 9d45ce39
• Fix "white screen" when opening the clone creation page: !966
• Reorganizing clone datasets: !977
• Destroy dependent clones synchronously: !995
• Refactor API endpoints: !994, !996
• Fix logs location for idle clone detection: !1012
• Improve CONTRIBUTING.md !1004, !1005

Internal

• Clean up and refactor code: !1015
• Fix integration tests on custom runners: !1010

Full diff

Diff between versions 3.5.0 and 4.0.0

DBLab Engine v4.0.0 RC3

Merge branch '626-existing-snapshot' into 'dle-4-0'

fix: show error message on creating snapshot when data in the pool has not changed (#626)

See merge request postgres-ai/database-lab!1033