v2.3.0-beta.2

⚠️ Pre-release — internal testing only. Pull :beta or the exact version tag below; :latest still points at the last stable release.

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.3.0-beta.2
docker pull ghcr.io/bablsoft/accessflow-frontend:2.3.0-beta.2

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.3.0-beta.2 \
  --namespace accessflow --create-namespace

What's Changed

• Dashboard redesign: responsive grid, new widgets, Bklit charts (AF-498) by @babltiga in #719
• chore(deps): bump react-i18next from 17.0.10 to 17.0.11 in /frontend by @dependabot[bot] in #711
• chore(deps): bump software.amazon.awssdk:bom from 2.50.2 to 2.51.3 in /backend by @dependabot[bot] in #718
• chore(deps): bump io.swagger.parser.v3:swagger-parser from 2.1.45 to 2.1.46 in /backend by @dependabot[bot] in #713
• chore(deps-dev): bump typescript-eslint from 8.62.0 to 8.66.0 in /frontend by @dependabot[bot] in #714
• chore(deps-dev): bump globals from 17.6.0 to 17.9.0 in /frontend by @dependabot[bot] in #715
• chore(deps-dev): bump jsdom from 29.1.1 to 30.0.1 in /frontend by @dependabot[bot] in #712

Full Changelog: v2.3.0-beta.1...v2.3.0-beta.2

v2.3.0-beta.1

⚠️ Pre-release — internal testing only. Pull :beta or the exact version tag below; :latest still points at the last stable release.

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.3.0-beta.1
docker pull ghcr.io/bablsoft/accessflow-frontend:2.3.0-beta.1

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.3.0-beta.1 \
  --namespace accessflow --create-namespace

What's Changed

• feat(AF-612): import a Postman collection as a connector schema by @babltiga in #620
• feat(AF-629): Snowflake, BigQuery, and Databricks warehouse engine plugins by @babltiga in #631
• chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /terraform-provider by @dependabot[bot] in #636
• chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 in /frontend by @dependabot[bot] in #637
• chore(deps): bump tools.jackson.core:jackson-databind from 3.2.0 to 3.2.1 in /engines/mongodb by @dependabot[bot] in #635
• chore(deps): bump @tanstack/react-query from 5.101.2 to 5.101.4 in /frontend by @dependabot[bot] in #642
• chore(deps): bump @xyflow/react from 12.11.0 to 12.11.2 in /frontend by @dependabot[bot] in #641
• chore(deps-dev): bump eslint from 10.5.0 to 10.7.0 in /frontend by @dependabot[bot] in #638
• chore(deps-dev): bump @vitejs/plugin-react from 6.0.3 to 6.0.4 in /frontend by @dependabot[bot] in #639
• chore(deps): bump react-i18next from 17.0.8 to 17.0.10 in /frontend by @dependabot[bot] in #640
• feat(AF-624): pre-flight query cost & blast-radius estimation by @babltiga in #644
• chore(deps): bump software.amazon.awssdk:bom from 2.48.0 to 2.49.0 in /backend by @dependabot[bot] in #643
• feat(AF-623): automated sensitive-data discovery & classification scans by @babltiga in #657
• chore(deps): bump com.azure:azure-sdk-bom from 1.3.7 to 1.3.8 in /backend by @dependabot[bot] in #667
• chore(deps): bump react-router-dom from 7.18.1 to 7.18.2 in /frontend by @dependabot[bot] in #661
• chore(deps-dev): bump @testing-library/jest-dom from 6.9.1 to 7.0.0 in /frontend by @dependabot[bot] in #663
• chore(deps-dev): bump postcss from 8.5.16 to 8.5.25 in /frontend by @dependabot[bot] in #668
• chore(deps-dev): bump @types/node from 26.1.1 to 26.1.2 in /frontend by @dependabot[bot] in #665
• chore(deps): bump software.amazon.awssdk:bom from 2.49.0 to 2.49.4 in /backend by @dependabot[bot] in #664
• fix(test): match active tab panel by ARIA role, not AntD class by @babltiga in #669
• chore(deps): bump antd from 6.4.3 to 6.5.2 in /frontend by @dependabot[bot] in #662
• feat(AF-645): approval prediction — logistic regression trainer + evaluator by @ashish-babu-03 in #656
• SEO remediation: docs URL split, CSP + caching headers, self-hosted fonts, WebP screenshots by @babltiga in #670
• Fail CI before security.txt expires by @babltiga in #671
• GEO remediation: correct llms.txt, restore the docs link graph, enrich schema by @babltiga in #672
• chore: add .claude agent harness and repair phantom tooling instructions by @babltiga in #673
• chore: add af-reviewer and af-verifier agents with a review gate by @babltiga in #676
• chore(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /frontend by @dependabot[bot] in #674
• chore(deps-dev): bump undici from 7.28.0 to 7.29.0 in /frontend by @dependabot[bot] in #675
• feat(AF-634): Snowflake dry-run via EXPLAIN with bytes-assigned estimate by @babltiga in #678
• feat(AF-634): BigQuery dry-run job with bytes-scanned estimate by @babltiga in #677
• feat(AF-634): Databricks dry-run via EXPLAIN COST with size estimate by @babltiga in #679
• feat(AF-645): approval prediction schema, entities, repositories by @babltiga in #681
• chore(deps): bump software.amazon.awssdk:bom from 2.49.4 to 2.50.2 in /backend by @dependabot[bot] in #683
• chore(deps): bump @codemirror/view from 6.43.6 to 6.43.7 in /frontend by @dependabot[bot] in #685
• chore(deps): bump react-dom and @types/react-dom in /frontend by @dependabot[bot] in #686
• chore(deps-dev): bump vite from 8.1.3 to 8.2.0 in /frontend by @dependabot[bot] in #689
• chore(deps): bump org.springdoc:springdoc-openapi-starter-webmvc-ui from 3.0.3 to 3.1.0 in /backend by @dependabot[bot] in #690
• feat(AF-649): approval prediction training-data lookup + persistence services by @babltiga in #698
• chore(AF): add af-java-reviewer and af-frontend-reviewer agents by @babltiga in #699
• chore(deps-dev): bump @vitejs/plugin-react from 6.0.4 to 6.0.5 in /frontend by @dependabot[bot] in #687
• feat(AF-647): approval prediction configuration properties + env vars by @babltiga in #700
• feat(AF-650): approval prediction feature extractor (schema v1) by @babltiga in #701
• feat(AF-651): approval prediction serving path + per-org training by @babltiga in #702
• test(AF-651): cover the two remaining rescore/sentinel branches by @babltiga in #703
• feat(AF-652): schedule daily per-org approval-model retraining by @babltiga in #704
• feat(AF-653): expose approval prediction on the read side by @babltiga in #705
• feat(AF-654): show advisory approval likelihood to reviewers by @babltiga in #706
• docs(AF-655): sync approval prediction across docs, README and website by @babltiga in #707
• fix(AF-645): withhold approval likelihood from a query's own submitter by @babltiga in #708
• feat(AF-627): recurring approved queries with result subscriptions by @babltiga in #709
• feat(#625): least-privilege intelligence — unused-grant analytics and revocation recommendations by @babltiga in #710

New Contributors

• @ashish-babu-03 made their first contribution in #656

Full Changelog: v2.2.0-beta.3...v2.3.0-beta.1

v2.2.0

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.2.0
docker pull ghcr.io/bablsoft/accessflow-frontend:2.2.0

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.2.0 \
  --namespace accessflow --create-namespace

What's Changed

• feat(AF-612): import a Postman collection as a connector schema by @babltiga in #620

Full Changelog: v2.2.0-beta.3...v2.2.0

v2.2.0-beta.3

⚠️ Pre-release — internal testing only. Pull :beta or the exact version tag below; :latest still points at the last stable release.

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.2.0-beta.3
docker pull ghcr.io/bablsoft/accessflow-frontend:2.2.0-beta.3

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.2.0-beta.3 \
  --namespace accessflow --create-namespace

What's Changed

• feat(AF-448): external secrets-manager integration (Vault / AWS Secrets Manager / Azure Key Vault) by @babltiga in #606
• feat(AF-457): proxy result caching, batch writes & multi-replica LB by @babltiga in #607
• docs(AF-519): add llms.txt to the website by @babltiga in #608
• feat(AF-49): result byte cap + global concurrency budget in QueryExecutor by @babltiga in #609
• feat(AF-458): backup/restore DR tooling (Helm) + AI provider fallback pool by @babltiga in #610
• feat(AF-453): ServiceNow & Jira ticketing with bi-directional sync by @babltiga in #616
• feat(AF-611): delete all notifications in one action by @babltiga in #615
• docs: sync product pitch to include API access governance by @babltiga in #617
• feat(AF-614): filter connector operations at schema import by @babltiga in #618
• feat(AF-613): dynamic variables for API connectors by @babltiga in #619

Full Changelog: v2.2.0-beta.2...v2.2.0-beta.3

v2.2.0-beta.2

⚠️ Pre-release — internal testing only. Pull :beta or the exact version tag below; :latest still points at the last stable release.

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.2.0-beta.2
docker pull ghcr.io/bablsoft/accessflow-frontend:2.2.0-beta.2

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.2.0-beta.2 \
  --namespace accessflow --create-namespace

What's Changed

• feat(AF-577): contextual "View docs" link on admin pages by @babltiga in #599
• chore(deps): bump org.apache.pdfbox:pdfbox from 3.0.7 to 3.0.8 in /backend by @dependabot[bot] in #600
• chore(deps-dev): bump @types/node from 26.1.0 to 26.1.1 in /frontend by @dependabot[bot] in #601
• chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 in /frontend by @dependabot[bot] in #602
• chore(deps-dev): bump @vitest/coverage-v8 from 4.1.9 to 4.1.10 in /frontend by @dependabot[bot] in #603
• chore(deps): bump axios from 1.18.0 to 1.18.1 in /frontend by @dependabot[bot] in #604
• chore(deps): bump i18next from 26.3.4 to 26.3.6 in /frontend by @dependabot[bot] in #605

Full Changelog: v2.2.0-beta.1...v2.2.0-beta.2

v2.2.0-beta.1

⚠️ Pre-release — internal testing only. Pull :beta or the exact version tag below; :latest still points at the last stable release.

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.2.0-beta.1
docker pull ghcr.io/bablsoft/accessflow-frontend:2.2.0-beta.1

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.2.0-beta.1 \
  --namespace accessflow --create-namespace

What's Changed

• Add missing Connectors and Use cases links to docs page navigation by @babltiga in #581
• fix(AF-578): render and route access-request bell notifications by @babltiga in #584
• feat(AF-579): assign review plans to API connectors by @babltiga in #585
• Point Terraform provider docs project link at accessflow.bablsoft.com by @babltiga in #586
• Fix Terraform registry overview: project info + accessflow.bablsoft.com backlink by @babltiga in #587
• chore(deps): bump @codemirror/state from 6.7.0 to 6.7.1 in /frontend by @dependabot[bot] in #592
• chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /terraform-provider by @dependabot[bot] in #594
• chore(deps): bump react-router-dom from 7.18.0 to 7.18.1 in /frontend by @dependabot[bot] in #589
• chore(deps): bump @tanstack/react-query from 5.101.0 to 5.101.2 in /frontend by @dependabot[bot] in #590
• chore(deps-dev): bump vite from 8.1.2 to 8.1.3 in /frontend by @dependabot[bot] in #591
• chore(deps): bump @codemirror/view from 6.43.1 to 6.43.6 in /frontend by @dependabot[bot] in #593
• feat(#582): auto-approve queries covered by a pre-approving JIT grant by @babltiga in #588
• feat(AF-567): JIT time-boxed access grants for API connectors by @babltiga in #597
• test(AF-595): e2e complex SQL execution against Postgres by @babltiga in #596
• feat(AF-522): custom roles & fine-grained functional permissions by @babltiga in #598

Full Changelog: v2.1.1...v2.2.0-beta.1

v2.1.1

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.1.1
docker pull ghcr.io/bablsoft/accessflow-frontend:2.1.1

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.1.1 \
  --namespace accessflow --create-namespace

What's Changed

• fix(FE-565): render clickable API-request review notifications by @babltiga in #568
• fix(FE-567): add approve/reject to API request detail page by @babltiga in #569
• fix(AF-564): editable group connector grants + correct share label by @babltiga in #570
• docs(website): surface API governance across homepage copy by @babltiga in #572
• fix(AF-566): let reviewers open any API request detail by @babltiga in #571
• chore(release-prep): mark v2.1 released and refresh website screenshots by @babltiga in #573
• docs(website): add enterprise use-cases section and fix nav wrapping by @babltiga in #574
• API Path Fixes by @babltiga in #576
• fix(AF-566): open API request detail from the API Reviews queue by @babltiga in #575

Full Changelog: v2.1.0-beta.8...v2.1.1

v2.1.0

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.1.0
docker pull ghcr.io/bablsoft/accessflow-frontend:2.1.0

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.1.0 \
  --namespace accessflow --create-namespace

What's Changed

• fix(FE-565): render clickable API-request review notifications by @babltiga in #568
• fix(FE-567): add approve/reject to API request detail page by @babltiga in #569
• fix(AF-564): editable group connector grants + correct share label by @babltiga in #570
• docs(website): surface API governance across homepage copy by @babltiga in #572
• fix(AF-566): let reviewers open any API request detail by @babltiga in #571
• chore(release-prep): mark v2.1 released and refresh website screenshots by @babltiga in #573

Full Changelog: v2.1.0-beta.8...v2.1.0

v2.1.0-beta.8

⚠️ Pre-release — internal testing only. Pull :beta or the exact version tag below; :latest still points at the last stable release.

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.1.0-beta.8
docker pull ghcr.io/bablsoft/accessflow-frontend:2.1.0-beta.8

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.1.0-beta.8 \
  --namespace accessflow --create-namespace

What's Changed

• fix(AF-556): surface backend ProblemDetail.detail in error toasts by @babltiga in #560
• fix(FE-557): show empty-state on API Editor when no connectors assigned by @babltiga in #561
• fix(AF-558): honour group grants in datasource visibility queries by @babltiga in #562
• feat(FE-559): parity-matched member authoring for request groups by @babltiga in #563

Full Changelog: v2.1.0-beta.7...v2.1.0-beta.8

v2.1.0-beta.7

⚠️ Pre-release — internal testing only. Pull :beta or the exact version tag below; :latest still points at the last stable release.

Container images

docker pull ghcr.io/bablsoft/accessflow-backend:2.1.0-beta.7
docker pull ghcr.io/bablsoft/accessflow-frontend:2.1.0-beta.7

Multi-arch: linux/amd64, linux/arm64.

Helm chart

helm repo add accessflow https://bablsoft.github.io/accessflow
helm repo update
helm install accessflow accessflow/accessflow --version 2.1.0-beta.7 \
  --namespace accessflow --create-namespace

What's Changed

• feat(AF-530): group-based access grants for datasources & API connectors by @babltiga in #547
• feat(AF-531): parity-matched member-step UI for request groups by @babltiga in #549
• fix(AF-544): validate erasure form client-side before submit by @babltiga in #551
• fix(AF-548): schema-driven target table/column pickers in erasure config form by @babltiga in #552
• chore(deps): bump golang.org/x/net from 0.52.0 to 0.55.0 in /terraform-provider by @dependabot[bot] in #550
• fix(AF-545): label cancel-confirmation popup buttons Yes/No by @babltiga in #553
• fix(AF-546): bind erasure status as JPQL parameter in timeout sweep by @babltiga in #554

Full Changelog: v2.1.0-beta.6...v2.1.0-beta.7