Changelog
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.9.0 to ^3.9.1
- devDependencies
- @webda/shell bumped from ^3.6.2 to ^3.6.3
- dependencies
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.9.1 to ^3.10.0
- devDependencies
- @webda/shell bumped from ^3.6.3 to ^3.7.0
- dependencies
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.10.0 to ^3.11.0
- devDependencies
- @webda/shell bumped from ^3.7.0 to ^3.8.0
- dependencies
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.11.0 to ^3.11.1
- devDependencies
- @webda/shell bumped from ^3.8.0 to ^3.8.1
- dependencies
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.11.1 to ^3.11.2
- devDependencies
- @webda/shell bumped from ^3.8.1 to ^3.8.2
- dependencies
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.13.0 to ^3.13.1
- devDependencies
- @webda/shell bumped from ^3.9.1 to ^3.9.2
- dependencies
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.13.1 to ^3.13.2
- devDependencies
- @webda/shell bumped from ^3.9.2 to ^3.9.3
- dependencies
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.15.0 to ^3.15.1
- devDependencies
- @webda/shell bumped from ^3.10.0 to ^3.10.1
- dependencies
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.15.1 to ^3.16.0
- devDependencies
- @webda/shell bumped from ^3.10.1 to ^3.11.0
- dependencies
4.0.0-beta.12 (2026-10-22)
⚠ BREAKING CHANGES
- Webda/Mailer moved to @webda/mailer
Features
Bug Fixes
- runtime: append client ip to existing X-Forwarded-For in ProxyService (#976) (163c2c5)
- runtime: type forwarded proxy headers for strict mode (#985) (c125cab)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.12
- @webda/models bumped to 4.0.0-beta.12
- @webda/ql bumped to 4.0.0-beta.9
- @webda/workout bumped to 4.0.0-beta.6
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.12
- @webda/test bumped to 4.0.0-beta.8
- dependencies
4.0.0-beta.11 (2026-10-16)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.11
- @webda/models bumped to 4.0.0-beta.11
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.11
- dependencies
4.0.0-beta.10 (2026-10-15)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.10
- @webda/models bumped to 4.0.0-beta.10
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.10
- dependencies
4.0.0-beta.9 (2026-10-14)
⚠ BREAKING CHANGES
- the unused store parameters modelAliases, defaultModel and forceModel are removed; use @WebdaAlias for renamed models. The runtime MigrationStore is removed: use webda migrate.
Features
- transparent Webda 3 → 4 data upgrade — legacy types, store migrations (core) (#889) (#890) (01d4efb)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.9
- @webda/models bumped to 4.0.0-beta.9
- @webda/ql bumped to 4.0.0-beta.8
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.9
- dependencies
4.0.0-beta.8 (2026-10-12)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.8
- @webda/models bumped to 4.0.0-beta.8
- @webda/ql bumped to 4.0.0-beta.7
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.8
- @webda/test bumped to 4.0.0-beta.7
- dependencies
4.0.0-beta.7 (2026-10-11)
Features
- core: config encrypt encrypts every secret field, --check fails on unencrypted secrets (#854) (8926a02)
- stable and documented configuration secret encryption (#837) (55fad94)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.7
- @webda/models bumped to 4.0.0-beta.7
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.7
- dependencies
4.0.0-beta.6 (2026-10-09)
Features
Bug Fixes
- deps: upgrade nodemailer, deepmerge-ts, jsondiffpatch, faker and OpenTelemetry (security) (#816) (f082ab8)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.6
- @webda/models bumped to 4.0.0-beta.6
- @webda/ql bumped to 4.0.0-beta.6
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.6
- @webda/test bumped to 4.0.0-beta.6
- dependencies
4.0.0-beta.5 (2026-10-08)
⚠ BREAKING CHANGES
- core: models defining canAct are now enforced on REST, gRPC and MCP operations; refused calls return 403. Query pages can be shorter than their LIMIT. OwnerModel ignores a client supplied _user. ResourceAcl.canAct signature changed to (context, action) and entries need a principal.
Bug Fixes
- core: enforce model permissions on every transport, deny by default (#810) (24c1182)
- packaging: point every package's repository at its monorepo folder (#812) (3717b73)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.5
- @webda/models bumped to 4.0.0-beta.5
- @webda/ql bumped to 4.0.0-beta.5
- @webda/workout bumped to 4.0.0-beta.5
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.5
- @webda/test bumped to 4.0.0-beta.5
- dependencies
4.0.0-beta.4 (2026-10-08)
⚠ BREAKING CHANGES
- auth: redesign authentication with @webda/auth (#800)
Features
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.4
- @webda/models bumped to 4.0.0-beta.4
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.4
- dependencies
4.0.0-beta.3 (2026-10-05)
⚠ BREAKING CHANGES
- compiler: the accessors, loadParameters and unserializer modules are removed. They wrote into the sources what webdac build now generates through @webda/content-mapper, or methods nothing calls. The unused webdac build --code flag is removed too.
- @webda/ts-plugin and the
tsc-esmbinary are removed, and applications now build with TypeScript 7.1. Generated code changes where TypeScript 6 was wrong, each verified against the shipped output:- AuditEntry.timestamp, declared
number, is no longer coerced to Date; - AbstractOwnerModel no longer emits
new ModelLink(T), a ReferenceError on first raw-uuid assignment; - sample-app's
User extends WebdaUseris now treated as a model (TS6's base-chain guard was keyed on class name), so its relations are initialised and coerced; - imports use the specifier the author wrote, not monorepo-relative paths that only resolve inside this repository;
- the emitted .d.ts is valid (TS6 referenced PrimaryKeyType unimported and wrote BelongTo without its type argument). A build that cannot write its module now fails; under TS6 a strict file-naming violation was logged and the build still reported success.
- AuditEntry.timestamp, declared
- compiler: model relations are now
type: "string"in Input, Output and Stored schemas instead of an object with no properties, and six services gain thetypeproperty they inherit from ServiceParameters. Anything generated from these schemas — API validation, client types — changes with them. - remove node 18 support
- remove expose for Store
Features
- add codemod system (bbc3086)
- add formatting for context (54dee1e)
- blog-system Binary/Binaries demo + e2e suite, with framework fixes (#771) (fe7e187)
- build on TypeScript 7.1; delete @webda/ts-plugin and ts-patch (0008e97)
- compiler: generate schemas with @webda/content-mapper (af3b7c5)
- content-mapper: TypeScript 7.1 content mapper package (9b57565)
- core: flat models[] config + internal field migration (PR 1 of 3) (#776) (56d4b01)
- enhance debug panels (#759) (63e6e0c)
- move to node 22 (21daf46)
- move to pnpm and disable many modules for now (ea953b7)
- remove expose for Store (c8a36b1)
- remove node 18 support (44e7de2)
- WebdaQLString<T> branded type + ts-plugin compile-time validator (#772) (f0c14c1)
Bug Fixes
- compiler metadata, CLI commands, cron/async hooks and long-running command lifecycle (#785) (0515715)
- compiler: make webdac code a working migration tool (578ca7b)
- unit test models relations (2d160f1)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped to 4.0.0-beta.3
- @webda/models bumped to 4.0.0-beta.3
- @webda/ql bumped to 4.0.0-beta.3
- @webda/workout bumped to 4.0.0-beta.3
- devDependencies
- @webda/compiler bumped to 4.0.0-beta.3
- @webda/test bumped to 4.0.0-beta.3
- dependencies
4.0.0-beta.1 (2024-08-14)
Features
- separate WebdaQL module (69beabb)
Miscellaneous Chores
- prepare version for 4.0 (24e8e78)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.16.0 to ^4.0.0-beta.1
- @webda/workout bumped from ^3.2.0 to ^4.0.0-beta.1
- devDependencies
- @webda/shell bumped from ^3.11.0 to ^4.0.0-beta.1
- dependencies
3.5.0 (2024-04-12)
Features
- update to latest otel (db00927)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.14.0 to ^3.15.0
- @webda/workout bumped from ^3.1.3 to ^3.2.0
- devDependencies
- @webda/shell bumped from ^3.9.4 to ^3.10.0
- dependencies
3.4.0 (2024-02-04)
Features
- postgres: add option to create views for each models (1830dc4)
Bug Fixes
- ci: pnpm explicit dependency to @webda/workout (7e1f05e)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.13.2 to ^3.14.0
- devDependencies
- @webda/shell bumped from ^3.9.3 to ^3.9.4
- dependencies
3.3.0 (2024-01-16)
Features
- allow cluster member info to be extended (cb1e982)
- cluster: add outofsync alert tweaking option (b3e5d91)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.12.0 to ^3.13.0
- devDependencies
- @webda/shell bumped from ^3.9.0 to ^3.9.1
- dependencies
3.2.0 (2024-01-09)
Features
- add Aggregation for subscriptions and event listener subscriptions (8bca3ce)
- add encrypter and configuration encryption (b53611c)
- add EventAsyncIterator (f3eb7f9)
- add MergedEventIterator to compile multiple Iterator in one (4b8e53e)
- add subscription system (b4f625c)
- move ProxyService to runtime (#342) (a95a797)
- move some services from @webda/core to @webda/runtime (#342) (bf78ca9)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.11.2 to ^3.12.0
- devDependencies
- @webda/shell bumped from ^3.8.2 to ^3.9.0
- dependencies
3.1.0 (2023-11-18)
Features
- add a BinaryModel for big json (7849fac)
- add gzip compression for BinaryModel (732b4a3)
- add MigrationStore to @webda/runtime (42613fd)
Bug Fixes
- avoid exposing OpenAPI root if not defined (e525412)
Dependencies
- The following workspace dependencies were updated
- dependencies
- @webda/core bumped from ^3.8.0 to ^3.9.0
- devDependencies
- @webda/shell bumped from ^3.3.0 to ^3.6.2
- dependencies