Chartbrew Files

Changelog

[!WARNING] This version includes important security improvements. Please update as soon as possible.

🔐 Security patches

• Strengthened team boundaries for chart previews, template imports, and dataset queries.
• Prevented unauthorized team ownership changes through role updates and invitations.
• Enforced share policy restrictions on public report variables.
• Required valid signatures for Slack requests.
• Protected Slack credentials and restricted integration settings updates.
• Cleared previous team connections when reinstalling the Slack app.
• Restricted MongoDB queries to supported read-only operations.
• Blocked additional private-network bypasses.
• Applied outbound network restrictions to alert and snapshot webhooks.

🐛 Bug fixes

• Fixed chart minimum and maximum values being ignored.
• Fixed zero-value limits and clearing saved limits.
• Applied value limits to the correct axis for horizontal bar charts.

⚙️ Configuration changes

• Slack requires CB_SLACK_SIGNING_SECRET to process incoming requests.
• After reinstalling the Slack app, run /chartbrew connect and select the allowed channels again.
• Alert and snapshot webhooks now follow the existing CB_ALLOW_PRIVATE_NETWORK_CALLS setting.
• No new environment variables or database migrations are required.