5.3.1 (2026-09-24)

• #710: Security fix. The AI Assistant endpoints (/assistant/ and /assistant/history/) did not check
  permissions, and table names passed to the assistant were not validated before being used to sample rows. The
  endpoints now require EXPLORER_PERMISSION_CHANGE, and only tables present in the connection's schema (respecting
  EXPLORER_SCHEMA_INCLUDE_TABLE_PREFIXES / EXPLORER_SCHEMA_EXCLUDE_TABLE_PREFIXES) are sampled. All users of
  4.1 and later are encouraged to upgrade.

• #687: UI improvements:

  • A download button in the preview pane exports the displayed results as CSV (#683).
  • Fixed the assistant controls floating incorrectly while a response is being generated (#685).
  • Show/Hide Schema is now a single toggle button.
  • Table descriptions are no longer truncated in the table description list.

• #703: The email CSV endpoint no longer requires the X-Requested-With header, and returns a 400 if no email
  address is provided.