Skip to main content

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/core bumped from ^3.1.1 to ^3.1.2
    • devDependencies
      • @webda/async bumped from ^3.0.4 to ^3.0.5
      • @webda/shell bumped from ^3.1.1 to ^3.1.2

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/core bumped from ^3.1.2 to ^3.2.0
    • devDependencies
      • @webda/async bumped from ^3.0.5 to ^3.0.6
      • @webda/shell bumped from ^3.1.2 to ^3.1.3

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/core bumped from ^3.2.0 to ^3.2.1
    • devDependencies
      • @webda/async bumped from ^3.0.6 to ^3.0.7
      • @webda/shell bumped from ^3.1.3 to ^3.1.4

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/core bumped from ^3.2.1 to ^3.2.2
    • devDependencies
      • @webda/async bumped from ^3.0.7 to ^3.0.8
      • @webda/shell bumped from ^3.1.4 to ^3.1.5

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.0.8 to ^3.0.9
      • @webda/core bumped from ^3.2.2 to ^3.3.0
      • @webda/workout bumped from ^3.0.2 to ^3.0.3
    • devDependencies
      • @webda/shell bumped from ^3.1.5 to ^3.2.0

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.0.9 to ^3.0.10
      • @webda/core bumped from ^3.3.0 to ^3.4.0
    • devDependencies
      • @webda/shell bumped from ^3.2.0 to ^3.2.1

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.1.0 to ^3.1.1
      • @webda/core bumped from ^3.5.0 to ^3.6.0
    • devDependencies
      • @webda/shell bumped from ^3.3.0 to ^3.4.0

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.2.0 to ^3.2.1
      • @webda/core bumped from ^3.7.0 to ^3.8.0
    • devDependencies
      • @webda/shell bumped from ^3.5.0 to ^3.6.0

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.2.1 to ^3.2.2
      • @webda/core bumped from ^3.8.0 to ^3.8.1
    • devDependencies
      • @webda/shell bumped from ^3.6.0 to ^3.6.1

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.2.2 to ^3.2.3
      • @webda/core bumped from ^3.8.1 to ^3.9.0
    • devDependencies
      • @webda/shell bumped from ^3.6.1 to ^3.6.2

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.2.3 to ^3.2.4
      • @webda/core bumped from ^3.9.0 to ^3.9.1
    • devDependencies
      • @webda/shell bumped from ^3.6.2 to ^3.6.3

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.2.4 to ^3.3.0
      • @webda/core bumped from ^3.9.1 to ^3.10.0
    • devDependencies
      • @webda/shell bumped from ^3.6.3 to ^3.7.0

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.3.0 to ^3.3.1
      • @webda/core bumped from ^3.10.0 to ^3.11.0
      • @webda/workout bumped from ^3.1.0 to ^3.1.1
    • devDependencies
      • @webda/shell bumped from ^3.7.0 to ^3.8.0

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.4.0 to ^3.4.1
      • @webda/core bumped from ^3.11.1 to ^3.11.2
    • devDependencies
      • @webda/shell bumped from ^3.8.1 to ^3.8.2

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.5.0 to ^3.5.1
      • @webda/core bumped from ^3.12.0 to ^3.13.0
      • @webda/workout bumped from ^3.1.2 to ^3.1.3
    • devDependencies
      • @webda/shell bumped from ^3.9.0 to ^3.9.1

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.5.1 to ^3.5.2
      • @webda/core bumped from ^3.13.0 to ^3.13.1
    • devDependencies
      • @webda/shell bumped from ^3.9.1 to ^3.9.2

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.5.2 to ^3.5.3
      • @webda/core bumped from ^3.13.1 to ^3.13.2
    • devDependencies
      • @webda/shell bumped from ^3.9.2 to ^3.9.3

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.5.3 to ^3.6.0
      • @webda/core bumped from ^3.13.2 to ^3.14.0
    • devDependencies
      • @webda/shell bumped from ^3.9.3 to ^3.9.4

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.7.0 to ^3.7.1
      • @webda/core bumped from ^3.15.0 to ^3.15.1
    • devDependencies
      • @webda/shell bumped from ^3.10.0 to ^3.10.1

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.7.1 to ^3.7.2
      • @webda/core bumped from ^3.15.1 to ^3.16.0
    • devDependencies
      • @webda/shell bumped from ^3.10.1 to ^3.11.0

4.0.0-rc.1 (2026-11-14)​

Features​

  • first release candidate of Webda 4.0, npm version badge in package READMEs (#1083) (0cf8a55)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-rc.1
      • @webda/core bumped to 4.0.0-rc.1
      • @webda/ql bumped to 4.0.0-rc.1
      • @webda/utils bumped to 4.0.0-rc.1
      • @webda/workout bumped to 4.0.0-rc.1
    • devDependencies
      • @webda/bench bumped to 4.0.0-rc.1
      • @webda/compiler bumped to 4.0.0-rc.1
      • @webda/test bumped to 4.0.0-rc.1

4.0.0-beta.14 (2026-11-10)​

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.14
      • @webda/core bumped to 4.0.0-beta.14
      • @webda/ql bumped to 4.0.0-beta.11
      • @webda/utils bumped to 4.0.0-beta.13
    • devDependencies
      • @webda/bench bumped to 4.0.0-beta.14
      • @webda/compiler bumped to 4.0.0-beta.14

4.0.0-beta.13 (2026-11-04)​

⚠ BREAKING CHANGES​

  • otel: @webda/otel no longer honors an incoming traceparent from any caller: list upstream services in trustedTraceSources (default []) or cross-service traces split. traceExporter.sampling now applies to the auto-instrumented HTTP and database spans (ParentBased ratio sampler). The HTTP instrumentation's incoming SERVER spans and the router span are replaced by Webda's SERVER span on every entry point. The Router emits CORS response headers for the origins of the website parameter and the CORS filters; Lambda OPTIONS without Origin no longer gets Access-Control-Max-Age/Allow-Headers. See the Upgrading section of packages/otel/README.md.

Features​

  • azure: add Azure services, Container Apps and Functions deployers (#998) (6c7b1aa)
  • core: refuse to start when a @webda package is loaded twice (#965) (b67f2d4)
  • otel: on-demand web tracing (W3C trace context, X-Webda-Trace token, every entry point) (#1029) (3d5387b)
  • read and migrate Webda 3 types in the MongoDB and DynamoDB stores (#889) (#964) (a644d5c)

Bug Fixes​

  • aws,azure: harden Lambda/Azure request parsing, multi-value headers, and S3 key encoding (#1044) (648ae7c)
  • remediate CodeQL security and quality alerts (#995) (3ce3fb3)
  • security: address medium and low security review findings (AGY-018 to AGY-036) (#1050) (8de0715)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.13
      • @webda/core bumped to 4.0.0-beta.13
      • @webda/ql bumped to 4.0.0-beta.10
      • @webda/utils bumped to 4.0.0-beta.12
      • @webda/workout bumped to 4.0.0-beta.7
    • devDependencies
      • @webda/bench bumped to 4.0.0-beta.13
      • @webda/compiler bumped to 4.0.0-beta.13
      • @webda/test bumped to 4.0.0-beta.9

4.0.0-beta.12 (2026-10-22)​

Features​

  • auth: add an SMS second factor with a pluggable SmsSender (#979) (05a9bf2), closes #61
  • binary: attach direct uploads on verified client completion (#944) (736942e)

Bug Fixes​

  • core: Queue.consume waits between receives returning no message (#920) (7a41465)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.12
      • @webda/core bumped to 4.0.0-beta.12
      • @webda/ql bumped to 4.0.0-beta.9
      • @webda/utils bumped to 4.0.0-beta.11
      • @webda/workout bumped to 4.0.0-beta.6
    • devDependencies
      • @webda/bench bumped to 4.0.0-beta.12
      • @webda/compiler bumped to 4.0.0-beta.12
      • @webda/test bumped to 4.0.0-beta.8

4.0.0-beta.11 (2026-10-16)​

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.11
      • @webda/core bumped to 4.0.0-beta.11
    • devDependencies
      • @webda/bench bumped to 4.0.0-beta.11
      • @webda/compiler bumped to 4.0.0-beta.11

4.0.0-beta.10 (2026-10-15)​

Features​

  • auth: add model-scoped MFA with typed behavior configuration (#888) (ee068e8)
  • bench: benchmarks for Store, Queue, Pub/Sub and the blog-system application (#914) (#916) (aed07ef)
  • core: URL-addressed getContent / putContent with Readable in and out (#377) (#904) (2323103)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.10
      • @webda/core bumped to 4.0.0-beta.10
      • @webda/utils bumped to 4.0.0-beta.10
    • devDependencies
      • @webda/bench bumped to 4.0.0-beta.10
      • @webda/compiler bumped to 4.0.0-beta.10

4.0.0-beta.9 (2026-10-14)​

⚠ BREAKING CHANGES​

  • the unused store parameters modelAliases, defaultModel and forceModel are removed; use @WebdaAlias for renamed models. The runtime MigrationStore is removed: use webda migrate.

Features​

  • transparent Webda 3 → 4 data upgrade — legacy types, store migrations (core) (#889) (#890) (01d4efb)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.9
      • @webda/core bumped to 4.0.0-beta.9
      • @webda/ql bumped to 4.0.0-beta.8
      • @webda/utils bumped to 4.0.0-beta.9
    • devDependencies
      • @webda/compiler bumped to 4.0.0-beta.9

4.0.0-beta.8 (2026-10-12)​

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.8
      • @webda/core bumped to 4.0.0-beta.8
      • @webda/ql bumped to 4.0.0-beta.7
      • @webda/utils bumped to 4.0.0-beta.8
    • devDependencies
      • @webda/compiler bumped to 4.0.0-beta.8
      • @webda/test bumped to 4.0.0-beta.7

4.0.0-beta.7 (2026-10-11)​

Features​

  • core: config encrypt encrypts every secret field, --check fails on unencrypted secrets (#854) (8926a02)
  • stable and documented configuration secret encryption (#837) (55fad94)

Bug Fixes​

  • postgres: bind collection items, quote S3 Content-Disposition (#670) (#861) (a5a5068)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.7
      • @webda/core bumped to 4.0.0-beta.7
      • @webda/utils bumped to 4.0.0-beta.7
    • devDependencies
      • @webda/compiler bumped to 4.0.0-beta.7

4.0.0-beta.6 (2026-10-09)​

⚠ BREAKING CHANGES​

  • ql: DELETE, UPDATE, SELECT, SET and WHERE are reserved uppercase keywords; Query.type is required; parse().toString() prints the canonical query instead of the source tokens; the root parse rule is now (statement | filterQuery) EOF for code walking the ANTLR tree.

Features​

  • ql: WebdaQL DELETE/UPDATE/SELECT statements, bulk deleteMany/updateMany, filter-only Query operations (#818) (add9503)
  • store-agnostic aggregations (Model.aggregate, SELECT … GROUP BY) (#820) (9eca947)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.6
      • @webda/core bumped to 4.0.0-beta.6
      • @webda/ql bumped to 4.0.0-beta.6
      • @webda/utils bumped to 4.0.0-beta.6
    • devDependencies
      • @webda/compiler bumped to 4.0.0-beta.6
      • @webda/test bumped to 4.0.0-beta.6

4.0.0-beta.5 (2026-10-08)​

⚠ BREAKING CHANGES​

  • core: models defining canAct are now enforced on REST, gRPC and MCP operations; refused calls return 403. Query pages can be shorter than their LIMIT. OwnerModel ignores a client supplied _user. ResourceAcl.canAct signature changed to (context, action) and entries need a principal.

Bug Fixes​

  • core: enforce model permissions on every transport, deny by default (#810) (24c1182)
  • packaging: point every package's repository at its monorepo folder (#812) (3717b73)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.5
      • @webda/core bumped to 4.0.0-beta.5
      • @webda/ql bumped to 4.0.0-beta.5
      • @webda/utils bumped to 4.0.0-beta.5
      • @webda/workout bumped to 4.0.0-beta.5
    • devDependencies
      • @webda/compiler bumped to 4.0.0-beta.5
      • @webda/test bumped to 4.0.0-beta.5

4.0.0-beta.4 (2026-10-08)​

⚠ BREAKING CHANGES​

  • auth: redesign authentication with @webda/auth (#800)

Features​

  • auth: redesign authentication with @webda/auth (#800) (74dc5df)
  • deployers as commands (deployment units, CloudFormation/Lambda, daemonless OCI images) (#796) (2539cc9)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.4
      • @webda/core bumped to 4.0.0-beta.4
      • @webda/utils bumped to 4.0.0-beta.4
    • devDependencies
      • @webda/compiler bumped to 4.0.0-beta.4

4.0.0-beta.3 (2026-10-05)​

⚠ BREAKING CHANGES​

  • remove node 18 support
  • remove expose for Store

Features​

  • add codemod system (bbc3086)
  • add formatting for context (54dee1e)
  • aws: re-enable module and migrate to current core API (a82e46b)
  • move to node 22 (21daf46)
  • move to pnpm and disable many modules for now (ea953b7)
  • operations system — decouple operations from transport (#753) (54f3151)
  • remove expose for Store (c8a36b1)
  • remove node 18 support (44e7de2)
  • stores: translate IS NULL and IS NOT NULL (8dc727b)

Bug Fixes​

  • compiler metadata, CLI commands, cron/async hooks and long-running command lifecycle (#785) (0515715)
  • post-migration follow-ups (store create uuid, LambdaServer stage, drop workarounds) (#784) (7eead4d)
  • route53: Do not run changeResourceRecordsSets if no changes (b7c6efd)
  • stores: escape WebdaQL string values and handle TRUE/FALSE in query translators (d02f0a2)
  • unit test models relations (2d160f1)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped to 4.0.0-beta.3
      • @webda/core bumped to 4.0.0-beta.3
      • @webda/ql bumped to 4.0.0-beta.3
      • @webda/utils bumped to 4.0.0-beta.3
      • @webda/workout bumped to 4.0.0-beta.3
    • devDependencies
      • @webda/compiler bumped to 4.0.0-beta.3
      • @webda/test bumped to 4.0.0-beta.3

4.0.0-beta.1 (2024-08-14)​

Features​

  • separate WebdaQL module (69beabb)

Miscellaneous Chores​

  • prepare version for 4.0 (24e8e78)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.7.2 to ^4.0.0-beta.1
      • @webda/core bumped from ^3.16.0 to ^4.0.0-beta.1
      • @webda/workout bumped from ^3.2.0 to ^4.0.0-beta.1
    • devDependencies
      • @webda/shell bumped from ^3.11.0 to ^4.0.0-beta.1

3.4.0 (2024-04-12)​

Features​

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.6.0 to ^3.7.0
      • @webda/core bumped from ^3.14.0 to ^3.15.0
      • @webda/workout bumped from ^3.1.3 to ^3.2.0
    • devDependencies
      • @webda/shell bumped from ^3.9.4 to ^3.10.0

3.3.0 (2024-01-09)​

Features​

  • add route53 sync shell command (933f359)

Bug Fixes​

  • dynamodb scan query splice bad result (5c3d657)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.4.1 to ^3.5.0
      • @webda/core bumped from ^3.11.2 to ^3.12.0
      • @webda/workout bumped from ^3.1.1 to ^3.1.2
    • devDependencies
      • @webda/shell bumped from ^3.8.2 to ^3.9.0

3.2.7 (2023-12-04)​

Bug Fixes​

  • allow Binaries to define metadata and metadata schema (2001b1e)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.3.1 to ^3.4.0
      • @webda/core bumped from ^3.11.0 to ^3.11.1
    • devDependencies
      • @webda/shell bumped from ^3.8.0 to ^3.8.1

3.2.0 (2023-11-12)​

Features​

  • add CoreModel listeners system (977dd9d)
  • drop node16 as it is EOL (a6b795a)
  • RESTDomainService: add the url info retriever on Binaries (13fe77c)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.1.1 to ^3.2.0
      • @webda/core bumped from ^3.6.0 to ^3.7.0
      • @webda/workout bumped from ^3.0.4 to ^3.1.0
    • devDependencies
      • @webda/shell bumped from ^3.4.0 to ^3.5.0

3.1.9 (2023-10-04)​

Bug Fixes​

  • default toLowerCase for k8s resources name (aaa0d58)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/async bumped from ^3.0.10 to ^3.1.0
      • @webda/core bumped from ^3.4.0 to ^3.5.0
      • @webda/workout bumped from ^3.0.3 to ^3.0.4
    • devDependencies
      • @webda/shell bumped from ^3.2.1 to ^3.3.0

3.1.6 (2023-07-24)​

Bug Fixes​

  • move @webda/async devDep to dev on @webda/aws (5ed6c58)

3.1.1 (2023-06-30)​

Bug Fixes​

  • add explicit dependencies declaration (#411) (4d8cbae)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/core bumped from ^3.1.0 to ^3.1.1
      • @webda/workout bumped from ^3.0.1 to ^3.0.2
    • devDependencies
      • @webda/async bumped from ^3.0.3 to ^3.0.4
      • @webda/shell bumped from ^3.1.0 to ^3.1.1

3.1.0 (2023-06-30)​

Features​

  • allow redirect with WebdaError.Redirect (499432e)

Bug Fixes​

  • @types/ws version (f63b002)
  • improve error message for unsupported diagrams (03238b0)

Dependencies​

  • The following workspace dependencies were updated
    • dependencies
      • @webda/core bumped from ^3.0.2 to ^3.1.0
    • devDependencies
      • @webda/async bumped from ^3.0.2 to ^3.0.3
      • @webda/shell bumped from ^3.0.2 to ^3.1.0

1.1.1 (2021-03-24)​

Note: Version bump only for package @webda/aws

1.1.0 (2021-03-18)

Bug Fixes​

  • add deploy stage for existing resources (7233190)

Features​

  • allow to send the request id to the api client (9b2fd11)

1.0.0-beta.0 (2019-08-21)

Bug Fixes​

  • move away from checkCSRF to checkRequest (84a9265)
  • remove x-webda-method header (ac0e798)
  • update all packages to use the new scope @webda (6acc1d5)
  • update imports (7896f0c)

Features​

BREAKING CHANGES​

  • remove the compatibility for PUT instead of PATCH
  • need to update as CorsFilter is not exported anymore
  • new v1.0.0