Release history

Changelog

ObjectStack is the runtime and Console every ObjectOS edition runs on, and all of its packages ship under one version number. Each release below shows the date its notes state and up to four highlights quoted from those notes; the full notes carry the breaking changes and the upgrade checklist.

Snapshot of the release notes as of All release notes

  1. 18.3.0

    • An installed package is customized in its pair
    • Ownership queues and assignment rules
    • Connectors carry each organization's credentials
    • One record page, opened in a drawer
    Full release notes: 18.3.0
  2. 18.2.0

    • The Console and @object-ui/* ship from this repository
    • One access rule for a file reference
    • App automation cannot write identity rows under elevation
    • Installs check what a package declares
    Full release notes: 18.2.0
  3. 18.1.0

    • ADR-0131's last steps: an organization-less row confers nothing
    • A production os serve with no organization object is refused
    • Nine metadata narrowings come with a conversion
    • One federation rule at every datasource door
    Full release notes: 18.1.0
  4. 18.0.0

    • A database 17.x created is upgraded by a ceremony before 18.0.0 serves it
    • A flow reads one expression dialect per slot
    • Positions, permission sets and capabilities are metadata
    • Page components are judged as errors
    Full release notes: 18.0.0
  5. 17.7.0

    • App-authored code reaches stored metadata only through the metadata API
    • Credentials stop travelling in copies
    • "Hidden" and "gone" are one answer on the write doors
    • Reads and writes serve declared fields only
    Full release notes: 17.7.0
  6. 17.6.0

    • A caller that resolves no permission set gets the deny baseline
    • Field-level security reaches every query door
    • Stored metadata bodies are redacted wherever they are copied
    • Analytics is judged like the data door
    Full release notes: 17.6.0
  7. 17.5.0

    • Package-authored scheduled work is off until a deployment turns it on
    • An edge-branched decision takes only its first matching branch
    • Row-level security stops admitting what it cannot enforce
    • Analytics answers only what the caller may read
    Full release notes: 17.5.0
  8. 17.4.0

    • Every duration key carries its unit in its own name, and a gate keeps it that way
    • A static readonly field is stripped from a non-system INSERT, not only from a non-system update
    • positions[] on the session payload is the security axis
    • driver-turso's timeout is delivered or refused, and two inert keys are gone
    Full release notes: 17.4.0
  9. 17.3.0

    • client.projects.* becomes client.environments.*, with no aliases
    • Who may become a user of an environment's apps is one declaration, and its default flips to the safe end
    • A permission-store read failure fails LOUD
    • driver-memory enforces the uniqueness it always declared
    Full release notes: 17.3.0
  10. 17.2.0

    • Two write-path guardrails close the "silently dropped predicate" hole
    • Further ADR-0049 enforce-or-remove retirements
    • http_request_errors_total is retired
    • Analytics stops answering the wrong number on a cross-object filter
    Full release notes: 17.2.0
  11. 17.1.0

    • Deactivating a permission set or a position now actually stops granting access
    • Platform admin sets stop shipping a bulk-export wildcard
    • Partial field masking
    • sys_audit_log can answer "who viewed this record"
    Full release notes: 17.1.0
  12. 17.0.0

    • A file is a record now, not a blob in a column
    • Bulk export is its own privilege
    • The SDK reaches the surface that exists — and only that surface
    • An approver can choose the next approver
    Full release notes: 17.0.0
  13. 16.0.0

    • Ask for approval like a real organization
    • The approvals inbox is now metadata, not hand-written buttons
    • "Alert 60 days before end_date" finally just works
    • Roll-ups can count only what matters
    Full release notes: 16.0.0
  14. 15.0.0

    Date not stated in the notes
    • Answer "why can this user see this record?" in one click
    • Multi-tenant data stays in its lane — by construction
    • An AI workspace built into the Console
    • Gantt charts ready for real project management
    Full release notes: 15.0.0
  15. 14.0.0

    • Approvals route to positions
    • Admin user management, phone sign-in, and bulk import
    • SMS infrastructure and phone OTP
    • Book audience enforced at the read layer
    Full release notes: 14.0.0
  16. 13.0.0

    • Audience anchors: built-in everyone / guest positions
    • Delegated administration
    • The explain engine
    • Access-matrix snapshot gate
    Full release notes: 13.0.0
  17. 12.0.0

    • Adaptive record surfaces and semantic field spans
    • Detail-page related lists: 'primary' prominence
    • Package-shipped permission sets
    • The protocol-version handshake is now enforced
    Full release notes: 12.0.0
  18. 9.0.0

    • Analytics results are now presentation-ready
    • Automation: durable pause survives subflows and restarts
    • Publishing: seed data lands on every publish path
    • AI service: tools stream progress while they run
    Full release notes: 9.0.0