0.29.0

Deprecated

• Using an empty string filter value for "All" is deprecated; use "__all" instead.

What's Changed

• Fix typos in docstrings and documentation by @maxtaran2010 in #1080
• fix: resolve boolean input widget crash on WTForms 3.2 by @Vansh-Sharma27 in #1084
• Fix/issue 1000: Fix unnecessary selectinload for AJAX relations on edit page by @arturbent0 in #1059
• [Fix] AJAX fields: persist selected values after validation errors by @maxim-f1 in #1039
• Added default_value to Filters by @wnowicki in #1004
• Ability to return Response from AuthenticationBackend.login method. by @sheldygg in #935
• searching for fields that cannot be formatted as a link by @twistfire92 in #948
• feat: add CSV import with streaming progress and row-level validation by @alserious in #877
• build(deps-dev): bump phonenumbers from 9.0.28 to 9.0.34 by @dependabot[bot] in #1088
• build(deps-dev): bump pytest from 9.0.3 to 9.1.1 by @dependabot[bot] in #1090
• build(deps-dev): bump psycopg2-binary from 2.9.11 to 2.9.12 by @dependabot[bot] in #1089
• build(deps-dev): bump pillow from 12.2.0 to 12.3.0 by @dependabot[bot] in #1087
• build(deps-dev): bump zensical from 0.0.42 to 0.0.50 by @dependabot[bot] in #1086
• New feature: File download support by @korolenkowork in #702
• [Feature] Add auto-resizing textarea widget with character counter by @maxim-f1 in #1083
• [Feature] Add column_type_formatters_detail by @maxim-f1 in #999

New Contributors

• @maxtaran2010 made their first contribution in #1080
• @arturbent0 made their first contribution in #1059
• @twistfire92 made their first contribution in #948

0.28.0

What's Changed

• feat: pass request to column formatters by @Dexter2099 in #1077
• fix: preserve base admin identity for polymorphic rows by @Dexter2099 in #1076
• fix: allow clearing nullable ajax relation fields by @Dexter2099 in #1075
• build(deps): update fontawesome to v7.2.0 by @CHC383 in #1073
• fix: follow symlinks for static files by @Dexter2099 in #1072
• build(deps): remove tabler-icons.min.css.map by @CHC383 in #1071
• build(deps): update to JQuery v4.0.0 and select2 v4.1.0 by @CHC383 in #1070
• Bump ruff from 0.15.15 to 0.15.20 by @dependabot[bot] in #1079
• feat: add rich_text_fields for pluggable rich text editors by @vahidzhe in #1074

New Contributors

• @Dexter2099 made their first contribution in #1077

Full Changelog: 0.27.2...0.28.0

0.27.2

What's Changed

• fix: render column defaults on the create form by @dhcsousa in #1061
• fix(base-view): sidebar link falls back to /admin when @expose method is named index by @Vansh-Sharma27 in #1062
• Preserve list page after editing a record (#1055) by @Vansh-Sharma27 in #1063
• build(deps): update to tabler v1.4.0, tabler-icons css v3.44.0 and migrate to Bootstrap v5 by @CHC383 in #1058

New Contributors

• @Vansh-Sharma27 made their first contribution in #1062

Full Changelog: 0.27.1...0.27.2

0.27.1

Security

• Validate the sortBy list-view parameter against column_sortable_list GHSA-ccg5-9c8w-xh6v

ModelView.sort_query() did not check the attacker-controlled sortBy
query parameter against the configured column_sortable_list allow-list,
so a request could sort by any column of the model (including ones hidden
from column_list) and by related-model columns via a dotted path —
turning row order into an information-exposure ordering oracle. sortBy
is now rejected with HTTP 400 unless it is present in the configured
sortable columns.

Full Changelog: 0.27.0...0.27.1

0.27.0

What's Changed

• fix(list): fix the list view to limit the page width to viewport size by @CHC383 in #1056
• feat: make admin logo width and height configurable (closes #1045) by @SAY-5 in #1052
• Docs: add contributing page to documentation site by @vahidzhe in #1034
• Feature: after_model_change response by @dhcsousa in #1030
• Create form_details_query by @MaximDementyev in #1038
• fix: forward kwargs to SessionMiddleware in AuthenticationBackend by @vahidzhe in #1036
• Fixed overriding form_args in forms.py and widgets.py by @mmzeynalli in #1044

New Contributors

• @CHC383 made their first contribution in #1056
• @SAY-5 made their first contribution in #1052
• @dhcsousa made their first contribution in #1030

Full Changelog: 0.26.0...0.27.0

0.26.0

What's Changed

• Drop Python 3.9 by @aminalaee in #1047
• Migrate to Zensical by @aminalaee in #1048

Full Changelog: 0.25.1...0.26.0

0.25.1

Verion 0.25.1 - 2026-05-16

Fixed

• fix: Authenticate ajax lookup endpoint by @vahidzhe in #1035
• fix: Authorization bypass on ajax_lookup

New Contributors

• @vahidzhe made their first contribution in #1035

Full Changelog: 0.25.0...0.25.1

0.25.0

Verion 0.25.0 - 2026-04-18

Added

• Move to org by @aminalaee in #1018
• extra blocks for templates allowing customization by @birddevelper in #952
• Add template hooks to all filters for customizable UIs (dropdowns, sliders, etc.) by @fd-oncodna in #970
• Support MappedAsDataclass by @Goradii in #857
• save values types as is if possible while JSON export by @DenisDudnik in #865
• Add toast to notify results for custom actions by @rusanpas in #971
• Showing exceptions happened during delete in list page as per #898 by @mmzeynalli in #1022
• Quality of Life updates by @mmzeynalli in #1026
• [Feature] Check the available primary actions (edit, delete, view details) for each row on listing page. by @maxim-f1 in #874

Fixed

• Fix #841: Cannot update value of attribute with reserved name when it starts empty/null by @mmzeynalli in #1028
• Fix TypeError with UUID primary keys in issubclass check by @S3wnkin in #992
• core: fix ambiguous column error when searching or sorting by @nurikk in #983
• Handling SQLAlchemy UUID fields correctly by introducing new UuidField. by @mmzeynalli in #1023
• Fixes #915: Sorting exposed functions by their coded order not alphabetical by @mmzeynalli in #1024
• fix: add RootPathMiddleware for proper static file routing with root_… by @JartanFTW in #996

New Contributors

• @S3wnkin made their first contribution in #992
• @fd-oncodna made their first contribution in #970
• @Goradii made their first contribution in #857
• @nurikk made their first contribution in #983
• @DenisDudnik made their first contribution in #865
• @rusanpas made their first contribution in #971
• @JartanFTW made their first contribution in #996

Full Changelog: 0.24.0...0.25.0

0.24.0

Added

• Improve logout button and logo_url by @maxim-f1 in #995
• Support filtering Date and Datetime fields with "less than" and "greater than" operations. by @caarmen in #1010
• Added switch style for checkbox and fixed related bug. by @maxim-f1 in #975
• Add ModelView.search_auto_submit option for list search by @Airumian in #1003
• Add select_from to count query in models.py by @estyrke in #969

Fixed

• [Bug] Improved error display in the delete modal window by @maxim-f1 in #994
• [Bug] Authorization vulnerability for expose and action by @maxim-f1 in #993

New Contributors

• @caarmen made their first contribution in #1010
• @Airumian made their first contribution in #1003
• @estyrke made their first contribution in #969

Full Changelog: 0.23.0...0.24.0

0.23.0

Added

• Highlight applied filters with background and clear option by @danmysak in #964
• Implemented optional pretty CSV export by @TimofeiN in #938

Fixed

• fix: use children.extend in Menu.add by @wasinski in #892
• fix: Support set-based relationships in list/detail views by @msukmanowsky in #982
• Fixing an SQLAlchemy warning by @lorg in #980
• Fix buttons width on details page by @MaximDementyev in #978
• Migrate from hatchling to uv by @mmzeynalli in #974
• Change PK column name to title in list/detail page by @wnowicki in #977

New Contributors

• @danmysak made their first contribution in #964
• @TimofeiN made their first contribution in #938
• @wasinski made their first contribution in #892
• @msukmanowsky made their first contribution in #982
• @MaximDementyev made their first contribution in #978
• @mmzeynalli made their first contribution in #974

Full Changelog: 0.22.0...0.23.0