Version Update Log

Personal Edition

4.0.32

• December 19, 2025
• [Fix] Upgraded fastjson to fix CVE-2022-25845.
• [Fix] Resolved an issue where dynamic SQL tags did not support uppercase letters.
• [Optimization] Updated Lombok version to ensure compatibility with JDK 17 compilation.
• [Optimization] Enhanced OpenSSL compatibility across multiple versions, improving OS compatibility.
• [Optimization] Added a new restart command for Linux:

bash dbapi.sh restart standalone
bash dbapi-daemon.sh restart standalone

4.0.31

• December 4, 2025
• [Fix] Resolved a bug that prevented the application from starting on certain operating systems, including CentOS 7 and some Windows versions.

4.0.30

• December 2, 2025
• [Optimization] Optimized serial number logic.
• [Optimization] Improved query performance for retrieving all APIs.

4.0.29

• October 21, 2025
• [Fix] Addressed an issue where client modifications were not taking effect.

4.0.28

• September 9, 2025
• [Fix] Corrected an error in the Content-Type header of API responses in cluster mode.
• [Fix] Resolved an issue where Redis cache updates were not occurring after a cluster restart.

4.0.27

• September 2, 2025
• [Optimization] Performance enhancements.

4.0.26

• August 11, 2025
• [Optimization] UI improvements.
• [Fix] Resolved several bugs.

4.0.25

• July 26, 2025
• [Optimization] Comprehensive enhancement of dynamic SQL tag functionality:
  • Added support for choose, when, and otherwise tags.
  • Supported bind tag.
  • Added support for set tag.
  • Fixed several syntax-related bugs in these tags.

4.0.24

• July 22, 2025
• [Fix] Resolved an issue where selecting files was impossible when importing groups before APIs.
• [Optimization] Default disk log retention period extended to 15 days.

4.0.23

• July 4, 2025
• [Fix] Ensured synchronization of data source and IP firewall changes to relevant roles in cluster mode.
• [Fix] Corrected errors in cache configuration.
• [Fix] Resolved issues preventing API imports.
• [New] Added support for configuring an IP whitelist for the UI web page (dbapi.ui.allowed.ips) in standalone mode.
• [Optimization] Expanded IP firewall support to include CIDR notation.
• [Optimization] Further UI refinements.

4.0.22

• June 21, 2025
• [Optimization] Script enhancements, allowing configuration of the JAVA_LOCATION parameter.
• [Optimization] Implemented pagination for API log queries.
• [Optimization] Refinements to the UI.
• [New] Added SQL keyword search functionality for APIs.
• [Fix] Resolved script incompatibility issues with Ubuntu systems.

4.0.21

• April 18, 2025
• [Optimization] Refined token logic on the client side.

4.0.20

• April 16, 2025
• [Optimization] Streamlined JDBC data source connection pool initialization logic.
• [New] Added a request test page enabling users to quickly generate URLs for obtaining tokens via the client.

4.0.19

• April 15, 2025
• [Optimization] Enhanced startup scripts.
• [New] Introduced import/export functionality for clients.
• [Fix] Resolved an issue where static resources were inaccessible through the gateway/apiServer in cluster mode.

4.0.18

• April 3, 2025
• [Fix] Prevented manual modification of the URL on the request test page.
• [Fix] Resolved JDK 17 startup issues by optimizing the startup script.

4.0.17

• March 29, 2025
• [Fix] Addressed Chinese character encoding issues in PowerShell.
• [Fix] Ensured proper sending of the Authorization header during public API request testing.
• [Optimization] Enabled JVM memory parameter configuration on Linux.
• [Optimization] Adjusted the display of row counts returned by non-query SQL statements.
• [Optimization] Improved version management.

4.0.16

• February 22, 2025
• [New] Added a parameter processing plugin.

4.0.15

• [Optimization] Frontend restructured using Vue 3.
• [Optimization] UI refinements.
• [Optimization] Preserved original API states during imports, avoiding automatic offline status changes.
• [Optimization] Validated the existence of data sources prior to API imports.
• [Optimization] Verified user-entered information during API creation or editing.
• [Optimization] Added global exception handling on the backend.
• [Optimization] Closed file streams during configuration imports.
• [New] Added functionality to modify client settings.
• [New] Unified management of plugin and driver packages within the extlib directory.
• [Fix] Corrected date format errors in certain datasets, switching from 12-hour to 24-hour timekeeping.

4.0.14

• December 29, 2024
• [Fix] Patched Tomcat vulnerability CVE-2024-56337 by upgrading Tomcat to version 9.0.98.

4.0.13

• December 8, 2024
• [Optimization] Improved serial number calculation.

4.0.12

• November 8, 2024
• [UI] Request test pages now open in new tabs.
• [UI] Descriptions and passwords for data sources are no longer required fields.
• [Optimization] Extended login validity to 10 days.
• [Optimization] Modified APIs no longer automatically go offline after edits.
• [Optimization] Enhanced logging features.
• [Fix] Resolved Maven Antrun plugin issues.

4.0.11

• June 1, 2024
• [Optimization] Enhanced logging capabilities.

4.0.10

• December 16, 2023
• [Fix] Resolved errors reported when passing empty JSON body parameters in APIs.
• [Fix] Corrected Shell Code Demo errors.
• [Optimization] Improved Windows PowerShell script execution failure handling without closing the window.
• [Optimization] Enhanced logging features.

4.0.9

• November 23, 2023
• [Removal] Removed Hive and Kylin driver packages, streamlining the installation package.

4.0.8

• September 26, 2023
• [Optimization] UI refinements.
• [Removal] Eliminated built-in plugins, further simplifying the installation package.

Enterprise Edition

4.5.0 (Not backward compatible)

• May 31, 2026
• [New] Client-side enable/disable functionality.
• [New] Added MCP capability, allowing DBAPI APIs to be mapped to MCP tools for interfacing with AI clients (such as Claude Desktop, Cursor, LangChain, Spring AI, etc.), helping enterprises build data-driven AI agent applications.
• [New] Added audit logging feature, recording the entire user operation chain to meet compliance auditing requirements.
• [New] HTTP executor supports custom parameter mapping modes, utilizing Groovy expressions to flexibly process forwarded parameters (renaming, default values, arithmetic concatenation, conditional assignments, etc.).
• [New] Support for creating administrator accounts.
• [New] Added support for Windows background service startup.
• [New] Health check endpoint added to standalone mode.
• [Optimization] Monitoring dashboard now includes statistical charts for failure counts, status code distribution, and response data volume rankings.
• [Optimization] Fully mobile-adapted UI, with layouts automatically responsive when accessed via mobile browsers.
• [Optimization] Enhanced UI interactions (e.g., clicking on API tree nodes displays a floating preview of URL and parameters; double-clicking quickly opens the edit page; drag-and-drop functionality allows adjusting sidebar width; resizable windows on SQL debugging pages; new light/dark theme toggle options).
• [Optimization] Accelerated loading speed of API tree lists.

Not compatible

This version introduces changes to the metadata database schema. Before upgrading, execute the following SQL commands in the metadata database:

mysql

ALTER TABLE `client` ADD COLUMN `status` INT(11) DEFAULT 1 COMMENT '1-Enabled; 0-Disabled';
UPDATE `client` SET `status` = 1 WHERE `status` IS NULL;

ALTER TABLE `api_config` ADD COLUMN `mcp_status` INT(11) DEFAULT 0 COMMENT '0-MCP not enabled; 1-MCP enabled';
UPDATE `api_config` SET `mcp_status` = 0 WHERE `mcp_status` IS NULL;


DROP TABLE IF EXISTS `audit_log`;
CREATE TABLE `audit_log` (
  `id`          int(11)      NOT NULL AUTO_INCREMENT,
  `user_id`     int(11)      DEFAULT NULL,
  `username`    varchar(64)  DEFAULT NULL,
  `operation`   varchar(32)  NOT NULL,
  `target_type` varchar(32)  NOT NULL,
  `target_id`   varchar(64)  DEFAULT NULL,
  `target_name` varchar(255) DEFAULT NULL,
  `detail`      text,
  `create_time` datetime  NOT NULL,
  PRIMARY KEY (`id`),
  KEY `idx_user_id` (`user_id`),
  KEY `idx_target_type` (`target_type`),
  KEY `idx_create_time` (`create_time`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

postgresql

ALTER TABLE client ADD COLUMN status integer DEFAULT 1;
UPDATE client SET status = 1 WHERE status IS NULL;
COMMENT ON COLUMN client.status IS '1-Enabled; 0-Disabled';

ALTER TABLE api_config ADD COLUMN mcp_status integer DEFAULT 0;
UPDATE api_config SET mcp_status = 0 WHERE mcp_status IS NULL;
COMMENT ON COLUMN api_config.mcp_status IS '0-MCP not enabled; 1-MCP enabled';


DROP TABLE IF EXISTS audit_log;
CREATE TABLE audit_log (
    id SERIAL NOT NULL,
    user_id INTEGER,
    username VARCHAR(64),
    operation VARCHAR(32) NOT NULL,
    target_type VARCHAR(32) NOT NULL,
    target_id VARCHAR(64),
    target_name VARCHAR(255),
    detail TEXT,
    create_time TIMESTAMP NOT NULL,
    PRIMARY KEY (id)
);
CREATE INDEX idx_audit_log_user_id ON audit_log (user_id);
CREATE INDEX idx_audit_log_target_type ON audit_log (target_type);
CREATE INDEX idx_audit_log_create_time ON audit_log (create_time);

4.4.0 (Not backward compatible)

• March 29, 2026
• [New] Parameters in SQL queries can now use the built-in variable __apiId.
• [New] API access logs now record both parameters and the byte size of returned data.
• [New] Ability to set IP blocking rules for specific ClientIds.
• [New] PostgreSQL support as a metadata database.
• [New] Logs database supports MySQL, PostgreSQL, ClickHouse, and Doris.
• [New] Request tests now include a preset parameter value feature, allowing users to save frequently used values and quickly load them from a predefined list.
• [New] HTTP executor supports custom request headers.
• [Fix] API access logs previously failed to capture error messages.
• [Fix] Pressing Enter during login displayed success twice.
• [Fix] When orchestrating APIs, incorrect API node messages appeared stating "Selected API is offline or deleted."
• [Optimization] Global IP firewall restrictions applied to token generation interfaces.

Not compatible

This version introduces changes to the log database schema. Before upgrading, execute the following SQL commands in the log database:

mysql

-- mysql
ALTER TABLE access_log ADD `method` VARCHAR ( 20 );
ALTER TABLE access_log ADD `params` VARCHAR ( 10240 );
ALTER TABLE access_log ADD `response_size` INT(11);

clickhouse

-- clickhouse
ALTER TABLE access_log ADD COLUMN method String;
ALTER TABLE access_log ADD COLUMN params String;
ALTER TABLE access_log ADD COLUMN response_size Int32;

Not compatible

This version introduces changes to the metadata database schema. If using MySQL as the metadata database, execute the following SQL commands before upgrading:

CREATE TABLE `object_ip_rule` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `type` varchar(50) NOT NULL,
  `object_id` varchar(20) NOT NULL,
  `ip_list` varchar(20480) DEFAULT NULL,
  `mode` varchar(20) DEFAULT NULL,
  `status` varchar(20) DEFAULT NULL,
  `create_time` datetime DEFAULT NULL,
  `update_time` datetime DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP,
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_type_object_id` (`type`, `object_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;

RENAME TABLE user TO sys_user;

CREATE TABLE `api_preset` (
    `id` INT NOT NULL AUTO_INCREMENT ,
    `api_id` VARCHAR(20) DEFAULT NULL ,
    `content_type` VARCHAR(50) DEFAULT NULL ,
    `params` TEXT DEFAULT NULL ,
    `create_time` DATETIME DEFAULT NULL,
    PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;

4.3.19

• March 11, 2026
• [Fix] Removed the non-SQL executor's built-in variable __clientId.

4.3.18

• January 8, 2026
• [New] Added health checks for data sources.
• [Optimization] In cluster mode, editing data sources now allows connection testing for each API server node.
• [Optimization] Upgraded Druid to version 1.2.23.
• [Optimization] Further UI refinements.

4.3.17

• December 17, 2025
• [Fix] Resolved an issue where dynamic SQL tags did not support uppercase letters.
• [Optimization] Added a new restart command for Linux:

bash dbapi.sh restart standalone
bash dbapi.sh restart manager
bash dbapi.sh restart gateway
bash dbapi.sh restart apiServer

bash dbapi-daemon.sh restart standalone
bash dbapi-daemon.sh restart manager
bash dbapi-daemon.sh restart gateway
bash dbapi-daemon.sh restart apiServer

4.3.16

• December 14, 2025

• [New] The data transformation plugin can now be configured with multiple settings.

• [Optimization] Compatible with multiple versions of OpenSSL, improving OS compatibility.

• [Fix] Upgraded fastjson to fix CVE-2022-25845.

4.3.15

• December 4, 2025
• [Fix] Resolved a bug that prevented the system from starting on certain operating systems, including CentOS 7 and some Windows versions.

4.3.14

• December 2, 2025
• [Optimization] Optimized serial number logic.
• [Optimization] Upgraded Lombok to support JDK 17 compilation.

4.3.13

• November 22, 2025
• [Fix] Fixed a bug where the Elasticsearch executor caused the system to freeze.
• [New] Added a connection test feature for ES data sources.
• [Optimization] Improved query performance for all APIs.
• [Optimization] Several UI improvements.

4.3.12

• November 2, 2025
• [Optimization] Allowed regular developers to view the monitoring menu.
• [Optimization] Enabled regular developers to view all data sources.
• [Optimization] Permitted regular developers to grant group-level access to data sources (only those they created).
• [Optimization] Added support for using Groovy's JSON library in Groovy scripts.
• [Optimization] In API orchestration, when selecting an API node, options are displayed by group.
• [Fix] Ensured that offline APIs are not shown when selecting APIs in the API orchestration interface.

4.3.11

• October 21, 2025
• [Fix] Resolved an issue where client modifications were not taking effect.

4.3.10

• October 16, 2025
• [Fix] Addressed an issue preventing data source deletion.

4.3.9

• September 9, 2025
• [Fix] Corrected a content-type error in API responses under cluster mode.
• [Fix] Resolved an issue where Redis cache updates did not occur after restarting the cluster.

4.3.8

• August 30, 2025
• [Optimization] Enhanced the parameter processing plugin to support multiple configurations.
• [Optimization] Implemented several performance enhancements.

4.3.7

• August 11, 2025
• [New] Added support for the built-in variable __clientId in SQL queries.
• [Fix] Resolved missing global data transformation scripts during API import/export configuration.
• [Optimization] Various UI improvements.

4.3.6

• July 26, 2025
• [Optimization] Significantly enhanced dynamic SQL tag functionality:
  • Added support for choose, when, and otherwise tags.
  • Supported bind tags.
  • Supported set tags.
  • Fixed several syntax bugs related to these tags.

4.3.5

• July 20, 2025
• [Optimization] Default disk log retention period set to 15 days.
• [New] Added support for Groovy language in global data transformation scripts.
• [New] Introduced support for API parameters as built-in variables (parameters) in global data transformation scripts.
• [New] Added support for Groovy language in parameter validation scripts.
• [New] Enabled Groovy scripting for API node parameter scripts, end-node scripts, and decision-node scripts within API orchestration.
• [New] Added configuration options for automatic cleanup of database access logs.
• [Fix] Resolved an issue where files could not be selected when importing groups before APIs.

4.3.4

• July 6, 2025
• [Optimization] Refined editing logic for data sources.
• [Optimization] Implemented several UI improvements.
• [Fix] Resolved an issue where API imports failed to allow file selection.

4.3.3

• July 2, 2025
• [Optimization] Removed the taos-jdbcdriver package, streamlining the installation package.
• [Fix] Under cluster mode, changes to data sources, deletions, or resets of data source connection pools did not take effect on the apiServer.
• [Fix] After upgrading the version under cluster mode, Redis cache became incompatible.

4.3.2

• June 28, 2025
• [Optimization] Expanded IP firewall support to include subnet configurations.
• [Optimization] Modified dbapi.ui.allowed.ips to support subnet configurations.

4.3.1

• June 21, 2025
• [Optimization] Enhanced UI design.
• [Optimization] Streamlined script configuration by adding a JAVA_LOCATION parameter.
• [Optimization] Added pagination for API log queries.
• [New] Introduced search functionality for APIs by SQL keywords.
• [Fix] Resolved incompatibility issues between scripts and Ubuntu systems.

4.3.0 (Not backward compatible)

• May 18, 2025
• [New] Client authorization per individual API.
• [New] Added functionality to reset the database connection pool.

Note: This version’s metadata is not backward compatible. If you’re using MySQL as your metadata database, upgrading to this version requires executing the following SQL statements first:

ALTER TABLE client_auth ADD `type` VARCHAR(10);
ALTER TABLE client_auth ADD `create_time` datetime;
ALTER TABLE client_auth CHANGE group_id resource_id VARCHAR(20);
update client_auth set type = 'group';

4.2.5

• April 16, 2025
• [Optimization] Refined JDBC data source connection pool initialization logic.
• [New] Added a request testing page allowing clients to quickly generate URLs for obtaining tokens.

4.2.4

• April 15, 2025
• [Optimization] Improved startup scripts.
• [New] Configurable IP access restrictions for single-machine mode web interfaces.
• [New] Added import/export client functionality.
• [Fix] Resolved an issue where static resources were inaccessible under gateway/apiServer in cluster mode.
• [Optimization] Modified the dbapi.host configuration item to dbapi.api.url.base.

4.2.3

• April 3, 2025
• [Fix] Resolved an issue where the URL on the request testing page could not be manually edited.
• [Fix] Resolved an issue where changes to the IP firewall in cluster mode did not take effect immediately.
• [Fix] Resolved an issue where JDK 17 failed to start, optimizing the startup script.

4.2.2

• March 31, 2025
• [Fix] Resolved a bug where non-admin users could see all data sources.

4.2.1

• March 29, 2025
• [Fix] Resolved errors on the API search page when clicking buttons for "online," "offline," "copy," "delete," "version management," and "request testing."
• [Fix] Resolved Chinese character encoding issues in PowerShell.
• [Optimization] Added configurable JVM memory parameters for Linux systems.

4.2.0 (Not backward compatible)

• March 15, 2025
• [New] Added API orchestration features.
• [New] Added host configuration options when performing API request tests.
• [Fix] Resolved password modification failures.
• [Fix] Resolved an issue where public API request tests did not send the Authorization header.
• [Optimization] Streamlined code and version numbering.
• [Optimization] Adjusted the display of row counts returned by non-query SQL statements.

Note: This version’s metadata is not backward compatible. If you’re using MySQL as your metadata database, upgrading to this version requires executing the following SQL statements first:

ALTER TABLE api_config ADD `type` VARCHAR(20);
ALTER TABLE api_config ADD `dag_data` text;
ALTER TABLE api_config ADD `graph_data` text;

4.1.10

• February 22, 2025
• [New] Added a parameter processing plugin.

4.1.9

• February 7, 2025
• [Optimization] Refactored the frontend using Vue 3.
• [Optimization] Enhanced UI design.
• [Optimization] Preserved original status of imported APIs without automatically setting them to offline.
• [Optimization] Automatically granted group-level access to data sources upon API import.
• [Optimization] Verified user-entered information during API creation or editing.
• [Optimization] Added global exception handling on the backend.
• [Optimization] Closed file streams during configuration imports.
• [New] Customizable token expiration times for clients.
• [New] Added API copy functionality.
• [New] Unified management of plugin and driver packages in the extlib directory.
• [Fix] Resolved formatting errors in certain date fields, switching from 12-hour to 24-hour format.

4.1.8

• January 7, 2025
• [Optimization] Modified HTTP executor to return raw data formats instead of converting them into strings.

4.1.7

• December 29, 2024
• [Fix] Resolved Tomcat vulnerability CVE-2024-56337 by upgrading Tomcat to version 9.0.98.

4.1.6

• December 8, 2024
• [Optimization] Optimized serial number calculation.

4.1.5

• November 9, 2024
• [UI] Request testing opened new tab pages.
• [Optimization] Modified APIs to avoid automatic offline status changes.
• [Optimization] Streamlined client token logic.
• [Optimization] Improved logging practices.

4.1.4

• November 8, 2024
• [UI] Made data source descriptions and JDBC data source passwords optional fields.
• [Optimization] Set login validity to 10 days.
• [Fix] Resolved Maven Antrun plugin issues.

4.1.3

• July 21, 2024
• [Fix] Resolved a bug where clients set to permanent token validity could not modify their own information.

If this issue occurs, please execute the following SQL statement in the metadata database before upgrading to version 4.1.3:

update client set expire_at = 253370736000000 where expire_at = 9223372036854775807 ;

4.1.2 (Not backward compatible)

• May 27, 2024
• [New] Added JavaScript code for data format conversion.

Note: This version’s metadata is not backward compatible. If you’re using MySQL as your metadata database, upgrading to this version requires executing the following SQL statement first:

CREATE TABLE api_transform_script (
    `api_id` VARCHAR(20) DEFAULT NULL,
    `type` VARCHAR(20) DEFAULT NULL,
    `script` text
) ENGINE = InnoDB DEFAULT CHARSET=utf8;

4.1.1

• January 12, 2024
• [New] Added support for configuring Druid connection pool parameters in JDBC data sources.

4.1.0 (Not backward compatible)

• December 24, 2023
• [New] Added API parameter validation functionality.

Note: This version’s metadata is not backward compatible. If you’re using MySQL as your metadata database, upgrading to this version requires executing the following SQL statement first:

CREATE TABLE `api_param_rule` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `api_id` varchar(10) DEFAULT NULL,
  `script` text,
  `type` varchar(20) DEFAULT NULL,
  `message` varchar(255) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=1 DEFAULT CHARSET=utf8;

4.0.9

• December 16, 2023
• [Fix] Resolved HTTP executor bugs.
• [Fix] Resolved errors when sending empty JSON body parameters in API requests.
• [Fix] Resolved Shell Code Demo errors.
• [Optimization] Improved Windows PowerShell script execution failure pop-up windows.
• [Optimization] Enhanced logging practices.

4.0.8

• [Optimization] Streamlined code.

4.0.7

• [Removed] Hive Kylin driver package, simplifying the installation package.

4.0.6

• [Optimized] UI design.
• [Removed] Built-in plugins, further streamlining the installation package.

4.0.5

• [Fixed] Resolved system bugs.

4.0.4

• [Optimized] Code.
• [Added] Source code packaging in tar format.

4.0.3

• [Fixed] Resolved API concurrency bugs.
• [Optimized] Code.

4.0.2

• [Added] API rate limiting.
• [Added] Client rate limiting.
• [Added] Response encryption.
• [Removed] Netty access logs.
• [Optimized] Removed GitHub logo.
• [Added] API history saving and rollback features.
• [Optimized] Prohibited changing the executor type during API modifications.
• [Optimized] Prohibited changing the data source type during modifications.