Flagsmith/flagsmith v2.238.0

on GitHub

2.238.0 (2026-06-01)

Features

• experimentation: add unique event names from ClickHouse (#7660) (1ee9b7b)
• experiments ux improvements (#7644) (755df22)
• experiment: use backend type filter for multivariate features (#7630) (164d4bc)
• MCP: Use native OpenAPI tool fields and consolidate private deps (#7656) (2c8cf0f)

Bug Fixes

• feature_segment missing in versioning (#7618) (f5584c9)
• GitLab: issue/MR status in the feature Links panel goes stale after state changes (#7545) (77f742e)
• webhooks: Prevent SSRF in webhooks and webhook tests (#7550) (85b92fa)

Dependency Updates

• node: upgrade ws transitive dependency to fix CVE-2026-45736 (#7634) (4de821d)

CI

• renovate: Fix renovate config json & add linter to pre-commit hooks (#7657) (69c6dbf)
• Replace Dependabot with Renovate (#7645) (5b4dff0)

Docs

• add vulnerability response policy to support page (#7423) (d39aae7)
• Consolidate PR collaboration guide to Flagsmith/AGENTS.md (#7646) (c1f40d8)
• CVE vulnerability guidance (#7655) (89135fe)