Releases: Canner/WrenAI
Releases · Canner/WrenAI
Release list
wren: v0.13.3
0.13.3 (2026-08-18)
Bug Fixes
- context: filter non-mapping entries in _load_views_v1 (#2604) (9bdae39)
- context: harden description checks for bad MDL rows (#2616) (b56d4da)
- context: harden relationships load + validate like views (#2613) (d234608)
- genbi: harden non-dict apps.yml entries in list/get/register (#2587) (dae7076)
- genbi: reject non-object Vercel API JSON (#2582) (4cd4bf8)
- memory: reject non-list relationship models in schema_indexer (#2605) (73c1255)
- memory: skip non-dict rows in extract_schema_items/describe (#2586) (32d76bf)
- memory: skip unnamed cubes/measures/dimensions in schema_indexer (#2665) (f29b5b0)
- spark: apply limit via DataFrame.limit before toPandas (#2574) (4483ce8)
- wren-cli: surface skipped non-mapping rows in parse/translate-types (#2570) (fc4ebf0)
- wren: bound the session-context cache to 32 LRU entries (#2628) (f92e681)
- wren: classify bare TimeoutError as DatabaseTimeoutError in WrenEngine (#2654) (7f7370e)
- wren: preserve unconstrained PostgreSQL NUMERIC precision (#2655) (2c264e5)
- wren: prevent context upgrade path traversal (#2649) (6db8bed)
- wren: validate import paths before force cleanup (#2580) (60ee894)
wren-core-py: v0.7.5
wren-core-py: v0.7.4
wren-semantic-core: v0.3.1
wren-manifest-macro: v0.3.1
wren-core-base: v0.3.1
0.29.2
What's Changed
- Add Databricks to the list of supported databases by @chilijung in #2076
- feat(wren-ai-service): get knowledge from ibis (ai-env-changed) by @yichieh-lu in #2043
- chore(deps): bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /wren-launcher in the go_modules group across 1 directory by @dependabot[bot] in #2051
- chore(deps): bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /wren-ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in #2071
- refactor(wren-ai-service): add system prompt handling to LLMProvider and update pipelines to utilize it by @yichieh-lu in #2079
- chore(wren-ui): upgrade vega-lite version to align dependent library vega-epression by @onlyjackfrost in #2078
- chore(wren-ai-service): fix security issues by @cyyeh in #2082
- chore(wren-ui): resolve glob library to 10.5.0 by @onlyjackfrost in #2083
- fix(wren-ui): resolve CVE-2025-64718 by @wwwy3y3 in #2093
- fix(wren-ui): resolve CVE-2025-65945 by @wwwy3y3 in #2094
- chore(wren-ai-service): bump langchain-core from 1.2.1 to 1.2.5 in /wren-ai-service by @dependabot[bot] in #2092
- chore(wren-ai-service): bump orjson from 3.11.4 to 3.11.5 in /wren-ai-service by @dependabot[bot] in #2111
- chore(wren-ai-service): bump filelock from 3.12.2 to 3.20.1 in /wren-ai-service by @yichieh-lu in #2110
- chore(wren-ai-service): update aiohttp to version 3.13.3 and add urllib3 dependency by @yichieh-lu in #2114
- chore(deps): bump next from 14.2.32 to 14.2.35 in /wren-ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in #2095
- chore(wren-ui): bump dependencies to fix security vulnerabilities by @onlyjackfrost in #2117
- chore(wren-ai-service): update nltk to version 3.9.3 and pillow to version 12.1.1 in dependencies by @yichieh-lu in #2140
- chore(wren-ai-service): update dependencies in poetry.lock and pyproject.toml, including deepeval to version 3.0.0 and qdrant-client to version >=1.12.0,<2.0.0 by @yichieh-lu in #2146
- fix(wren-ui): resolve CVE-2026-25896 by upgrading fast-xml-parser to 4.5.4 by @onlyjackfrost in #2147
- chore(wren-ui): upgrade lodash to 4.17.23 to fix CVE-2025-13465 by @onlyjackfrost in #2149
- Add Claude Code configuration and documentation by @wwwy3y3 in #2152
- Upgrade tar dependency to 7.5.8 by @wwwy3y3 in #2168
- Upgrade axios dependency to v1.13.5 by @wwwy3y3 in #2169
- chore(wren-ai-service): upgrade sqlparse to fix hang on long tuple lists by @yichieh-lu in #2172
- Add minimatch dependency to wren-ui by @wwwy3y3 in #2175
- chore(deps): bump go.opentelemetry.io/otel/sdk from 1.36.0 to 1.40.0 in /wren-launcher in the go_modules group across 1 directory by @dependabot[bot] in #2139
- fix(deps): upgrade grpc-go to v1.79.3 (critical CVE) by @onlyjackfrost in #2173
- fix(wren-ai-service): upgrade litellm to 1.83.0 (OIDC cache key collision CVE) by @yichieh-lu in #2192
- chore(deps): bump the go_modules group across 1 directory with 2 updates by @dependabot[bot] in #2176
- fix: resolve high-severity dependabot security alerts by @onlyjackfrost in #2198
- fix(wren-ai-service): upgrade litellm to 1.83.7 (SQL injection CVE) by @yichieh-lu in #2207
- feat(ui): surface a Wren AI Cloud upgrade entry point in the sidebar by @goldmedal in #2644
- Release 0.29.2 (ai-env-changed) by @goldmedal in #2646
Full Changelog: 0.29.1...0.29.2
wren-pydantic: v0.2.1
wren-langchain: v0.2.1
wren: v0.13.2
0.13.2 (2026-07-28)
Bug Fixes
- ask: guided template's recall step uses a valid CLI option (#2565) (f242be4)
- athena: strip trailing semicolon on unlimited query path (#2535) (06e4c42)
- bigquery: push LIMIT into SQL and strip trailing semicolon (#2465) (0a25df3)
- duckdb: strip trailing semicolon on unlimited query path (#2489) (3d1be24)
- mcp: apply default row cap in list_stored_queries markdown fallback (#2526) (86fac4f)
- memory: skip non-dict columns in seed query generation (#2514) (a3de389)
- memory: skip non-dict models/relationships/views in schema_indexer (#2533) (50493ab)
- mssql: preserve outer CTEs and ORDER BY when flattening pagination wrap (#2579) (a93184d)
- mssql: strip trailing semicolons before sqlglot LIMIT rewrite (#2476) (2e2d0a9)
- oracle: strip trailing semicolon on unlimited query path (#2534) (78b5b93)
- profile: exclude connection_url from selectable datasources (#2527) (62712f2)
- profile: mask secrets nested under kwargs and settings in profile debug (#2525) (682e829)
- redshift: strip trailing semicolon on unlimited query path (#2482) (812e802)
- redshift: use public strip_trailing_semicolon on unlimited path (#2560) (50e710d)
- spark: strip trailing semicolon before sql/dry_run (#2464) (f4b45ed)