Changelog
This is a patch release for v2.50.
Bug fixes and improvements
Server
- With
HASURA_FF_NAMING_CONVENTION_SEP_2023enabled, the source's type name prefix and suffix are applied to the input types of aggregation predicates, so sources with the same table name no longer clash ontable_aggregate_bool_exp.
Console
- Fixed Data Manager filters truncating PostgreSQL UUID and fractional values, and Edit Row clearing existing UUID, timestamp and numeric values. Timestamp calendars now open on the field's current value.
- Fix self-hosted CLI Console authentication when an admin secret is supplied by the CLI, and allow initialization without credentials when the engine does not require a secret.
- console: improve Schema Registry layout and comparison UX — responsive history/detail layout, clearer change-summary and severity filtering with search and empty/no-match states, fixed share links and clipboard handling, and added Storybook coverage.
CLI
- Added a repeatable
--header "Name: value"flag to the CLI commands that talk to the GraphQL Engine (migrate,metadata,seed,deploy,actions) to attach custom HTTP headers — for example--header "Authorization: Bearer <JWT>"or--header "x-api-key: <key>"— to every request the CLI makes to the engine, allowing custom authentication instead of, or alongside, an admin secret. When no admin secret is configured the CLI no longer sends an emptyX-Hasura-Admin-Secretheader (which a server with an admin secret would reject before consulting its auth webhook/JWT). Header names/values are validated (CRLF injection and case-insensitive duplicates rejected; error messages never print header values), custom headers take precedence over the admin-secret header only when they target the same header name, and the flag is never persisted to project config. These flags only transport headers; the engine/gateway must still authorize the requested operation. - Fix
hasura update-clidisplaying a nil-pointer panic when a release download fails. The error now includes the asset URL and HTTP status.
Build
- Update vulnerable dependencies in the CLI, data connectors, console and supporting build/test tooling.
- Refresh the HGE image trust stores to reject compromised eMudhra certificate chains, including AAA cross-signs. UBI images also distrust otherwise legitimate chains relying solely on the affected roots.