- Advice Insights: Users can now run database health checks for PostgreSQL and PGEE services and view recommendations in the new Advice tab. Each insight includes a detailed explanation and suggested fix with a copyable script.
- Cypex backup configuration: Users can now configure backup settings for Cypex services from the Backup tab and during service creation.
- Cypex connection credentials: Users can now view Application connection credentials directly within the Overview tab for Cypex services.
- Service lifecycle control: Users can now start and stop PostgreSQL services directly from the Overview tab next to the service status chip. This helps avoid unnecessary resource consumption and costs.
- Fixed an issue where modifying Backup time on the Backups tab of a service could incorrectly reset the value.
- Improved login experience for environments with SSO enabled. Users can now choose between signing in with Single Sign-on or Email & Password directly from the login page and easily switch between authentication methods at any time. The last used authentication method will be saved, making future logins faster and more convenient.
- The Application tab has been removed for Cypex services, and users can now access the application in a new tab with a single click directly from the Overview tab.
- CVE-2026-47429:
vitest (direct dependency for testing; affected only during development, no vulnerability) - CVE-2026-50289:
systeminformation (indirect dependency of cypress; affected only during build time, no vulnerability) - CVE-2026-44494:
axios (direct dependency for HTTP requests; potential for man-in-the-middle attack) - CVE-2026-59873:
tar (indirect dependency of node-gyp and cacache; affected only during build time, no vulnerability) - CVE-2026-12143:
form-data (direct dependency for constructing multipart form-data requests; affected feature is not in use, no vulnerability) - CVE-2026-59879:
immutable (indirect dependency of legacy draft-js; dependency removed, no vulnerability) - CVE-2026-44665:
fast-xml-builder (indirect dependency of fast-xml-parser; affected feature is not in use, no vulnerability)
- Default datasets migration moved to dataset cluster initialization