Changelog

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (v.4.2.1 #289) (also in avo-advanced_search, avo-ai, avo-api, avo-audit_logging, avo-authorization, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-http_resource, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (v.4.2.2 #289) (also in avo-advanced_search, avo-ai, avo-api, avo-authorization, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-http_resource, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)
• feat(avo-audit_logging,avo-mcp_server,avo-api,avo-ai): trace an audited change back to the connection, token or chat that made it (AVO-1779) @Paul-Bob (v.4.2.1 #259) (also in avo-ai, avo-api, avo-mcp_server)

🐛 Bug Fixes

• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (v.4.2.2 #302) (also in avo-advanced_search, avo-ai, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-forms, avo-licensing, avo-reactive_fields, avo-record_reordering, avo-scopes)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (#289) (also in avo-advanced_search, avo-ai, avo-api, avo-audit_logging, avo-authorization, avo-calendar_view, avo-custom_controls, avo-dynamic_filters, avo-http_resource, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• Show an empty-state message when collaboration has no activity @adrianthedev (#348)
• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (#302) (also in avo-advanced_search, avo-ai, avo-audit_logging, avo-calendar_view, avo-custom_controls, avo-dynamic_filters, avo-forms, avo-licensing, avo-reactive_fields, avo-record_reordering, avo-scopes)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (#289) (also in avo-advanced_search, avo-ai, avo-api, avo-audit_logging, avo-authorization, avo-calendar_view, avo-collaboration, avo-dynamic_filters, avo-http_resource, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (#302) (also in avo-advanced_search, avo-ai, avo-audit_logging, avo-calendar_view, avo-collaboration, avo-dynamic_filters, avo-forms, avo-licensing, avo-reactive_fields, avo-record_reordering, avo-scopes)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (v.4.2.1 #289) (also in avo-advanced_search, avo-ai, avo-api, avo-audit_logging, avo-authorization, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-http_resource, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (v.4.2.1 #302) (also in avo-advanced_search, avo-ai, avo-audit_logging, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-forms, avo-licensing, avo-reactive_fields, avo-record_reordering, avo-scopes)
• Make every gem template compile through Herb @adrianthedev (v.4.2.1 #301) (also in avo-advanced_search, avo-ai, avo-api, avo-dynamic_filters, avo-http_resource, avo-mcp_server)

🤖 Maintenance

• Prepare fresh orbs for workspace development @adrianthedev (v.4.2.1 #297) (also in avo-mcp_server)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (v.4.2.1 #289) (also in avo-advanced_search, avo-ai, avo-api, avo-audit_logging, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-http_resource, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• fix(avo-authorization): an app with no field lists never instantiates a raising policy for them @Paul-Bob (v.4.2.2 #335)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (v.4.2.1 #289) (also in avo-ai, avo-api, avo-audit_logging, avo-authorization, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-http_resource, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)
• feat(avo-mcp_server): expose an Avo panel as a remote MCP server (AVO-1466) @Paul-Bob (v.4.2.1 #163) (also in avo-ai, avo-mcp_server)

🐛 Bug Fixes

• fix(avo-advanced_search): searchable belongs_to inputs keep the field's html data attributes @Paul-Bob (v.4.2.1 #344)
• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (v.4.2.1 #302) (also in avo-ai, avo-audit_logging, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-forms, avo-licensing, avo-reactive_fields, avo-record_reordering, avo-scopes)
• Make every gem template compile through Herb @adrianthedev (v.4.2.1 #301) (also in avo-ai, avo-api, avo-calendar_view, avo-dynamic_filters, avo-http_resource, avo-mcp_server)

🐛 Bug Fixes

• fix(avo-licensing): build the Avo metadata in a savepoint so a failed query can't abort the caller's transaction @Paul-Bob (v.4.2.3 #367)
• fix(avo-licensing): send the Avo metadata when the license check runs before Avo.init @Paul-Bob (v.4.2.2 #365)
• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (v.4.2.2 #302) (also in avo-advanced_search, avo-ai, avo-audit_logging, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-forms, avo-reactive_fields, avo-record_reordering, avo-scopes)
• fix(avo-licensing): keep the debug report rendering when the licence check failed @Paul-Bob (v.4.2.1 #266)

🎸 Features

• Show the record count on array resources @Shub3am (avo v.4.2.11 #4852)
• Add hide_if_blank field option @Shub3am (avo v.4.2.11 #4851)
• feature: warn before leaving a form with unsaved changes @Shub3am (avo v.4.2.11 #4847)
• Locale selector in the top navbar, stored per user @Paul-Bob (avo v.4.2.9 #4834)
• Lightbox for image previews on file and files fields @Paul-Bob (avo v.4.2.9 #4833)
• feat: linkable option for has_one fields @Shub3am (avo v.4.2.9 #4830)
• feat: per_page option for has_many fields @Shub3am (avo v.4.2.9 #4832)
• Cmd+Return submits the form in any Avo modal @adrianthedev (avo v.4.2.8 #4824)
• feat: request interface marker, a record-title reachability seam, and LocationField#stored_as @Paul-Bob (avo v.4.2.7 #4807)
• feat: tooltip: and label_tooltip: field options @Paul-Bob (avo v.4.2.6 #4812)
• feat: press C on a show page to create a new record @adrianthedev (avo v.4.2.5 #4803)
• feat: modal_width option for actions @adrianthedev (avo v.4.2.5 #4802)
• feat(media-library): preview txt, md and csv files on the details page @adrianthedev (avo v.4.2.5 #4801)
• feat: play a sound when picking a scheme, neutral, or accent @adrianthedev (avo v.4.2.5 #4751)
• ci: hand the release workflow the bot credentials @Paul-Bob (avo v.4.2.5 #4799)
• feat: policy-declared field authorization across every Avo surface @Paul-Bob (avo-advanced_search v.4.2.1, avo-api v.4.2.7, avo-audit_logging v.4.2.2, avo-authorization v.4.2.1, avo-calendar_view v.4.2.1, avo-collaboration v.4.3.0, avo-custom_controls v.4.3.0, avo-dynamic_filters v.4.2.1, avo-http_resource v.4.2.1, avo-kanban v.4.2.1, avo-nested v.4.3.0, avo-notifications v.4.2.1, avo-record_reordering v.4.3.0, avo-scopes v.4.3.0 #289)
• feat(avo-mcp_server): expose an Avo panel as a remote MCP server (AVO-1466) @Paul-Bob (avo-advanced_search v.4.2.1 #163)
• Export the REST API as an OpenAPI 3.1 document @Mihai-Munteanu (avo-api v.4.3.0 #366)
• feat(avo-api, avo-mcp_server): show each credential's access level on the index @Paul-Bob (avo-api v.4.2.8 #338)
• avo-cli: terminal-aware tables, record view and write confirmations (AVO-1828) @Mihai-Munteanu (avo-api v.4.2.7 #304)
• Index status badges say when a token or MCP connection was revoked @Paul-Bob (avo-api v.4.2.5 #298)
• avo-cli: a command line client for the Avo REST API, and the _schema endpoint it discovers apps through (AVO-1637) @Mihai-Munteanu (avo-api v.4.2.5 #248)
• feat(avo-audit_logging,avo-mcp_server,avo-api,avo-ai): trace an audited change back to the connection, token or chat that made it (AVO-1779) @Paul-Bob (avo-api v.4.2.2, avo-audit_logging v.4.2.1 #259)

✨ Enhancements

• Expose the parent record to custom controllers as @via_record @Paul-Bob (avo v.4.2.11 #4857)
• Let array resources opt into create, edit and delete with self.writable @Paul-Bob (avo v.4.2.10 #4849)
• Normalize neutral theme lightness @adrianthedev (avo v.4.2.10 #4846)
• enhancement: localize resource descriptions by convention 🤖🤖🤖 @be-student (avo v.4.2.2 #4778)

🐛 Bug Fixes

• Align top navbar control sizing @adrianthedev (avo v.4.3.0 #4861)
• Array and HTTP resources build their own index query, so any controller can list them @Paul-Bob (avo v.4.2.11 #4859)
• test: wait for the nested belongs_to saves before counting records @Shub3am (avo v.4.2.11 #4855)
• fix: restore neutral navbar text contrast @adrianthedev (avo v.4.2.11 #4850)
• fix: preserve nested belongs-to dialogs @adrianthedev (avo v.4.2.11 #4818)
• test: wait for the attach modal to reload between "Attach & Attach another" clicks @Paul-Bob (avo v.4.2.11 #4845)
• fix: tags field no longer shows stale remote suggestions when typing during a search @Paul-Bob (avo v.4.2.10 #4842)
• fix: removed tag no longer shows twice in the tags field suggestions @Paul-Bob (avo v.4.2.10 #4840)
• Keep the default Stimulus targets on field inputs when the html option sets no input data @Paul-Bob (avo v.4.2.10 #4839)
• fix: keep index filters after deleting a record @Paul-Bob (avo v.4.2.10 #4841)
• Fix nested Trix editors overwriting each other's content @Paul-Bob (avo v.4.2.10 #4838)
• Refresh the attach modal's options after "Attach & Attach another" @Paul-Bob (avo v.4.2.10 #4837)
• Wrap long values in resource sidebars instead of overflowing @Paul-Bob (avo v.4.2.10 #4836)
• fix: resolve plugin and aliased field types in avo_field helpers @Shub3am (avo v.4.2.9 #4828)
• fix: open actions with a belongs_to field when several records or none are selected @Shub3am (avo v.4.2.9 #4829)
• fix: Go back from a belongs_to index link returns to the index it came from @Shub3am (avo v.4.2.9 #4831)
• Key cached index rows on the current user, locale and tenant @Paul-Bob (avo v.4.2.9 #4827)
• fix: actions keep the view they were started from instead of "new" @Paul-Bob (avo v.4.2.8 #4825)
• fix: Render media library blob details when the attached record is gone @Shub3am (avo v.4.2.8 #4820)
• Stop the namespaced generator spec from deleting the committed galaxy files @Shub3am (avo v.4.2.8 #4823)
• fix: Pass the id of a polymorphic belongs_to field to action handle @Shub3am (avo v.4.2.7 #4819)
• Use the tabler x icon on the confirm dialog close button @adrianthedev (avo v.4.2.7 #4817)
• Stop loading Action View at boot when a plugin registers a view type @adrianthedev (avo v.4.2.7 #4816)
• Compile the modal and panel templates through Herb @adrianthedev (avo v.4.2.7 #4815)
• Fix the model class built for array resources @adrianthedev (avo v.4.2.6 #4810)
• Fall back to default pagination when page or per_page is not a number @adrianthedev (avo v.4.2.6 #4809)
• fix: keep link_to on resources and fields on Rails 8.2 @Paul-Bob (avo v.4.2.6 #4808)
• fix: let an action's download compose with reload and redirect_to @Paul-Bob (avo v.4.2.4 #4798)
• fix(ci): unbreak the TailwindCSS integration test on json 3 @Paul-Bob (avo v.4.2.4 #4793)
• fix: discard filters the resource no longer declares @Paul-Bob (avo v.4.2.4 #4787)
• fix: stop packaging stray files from app/assets/builds @Paul-Bob (avo v.4.2.3 #4785)
• fix: copyable icon sits beside date_time and time values on Index @Paul-Bob (avo v.4.2.2 #4783)
• fix: explain missing model associations 🤖🤖🤖 @be-student (avo v.4.2.2 #4779)
• fix: skip action records deleted after selection 🤖🤖🤖 @be-student (avo v.4.2.2 #4777)
• fix: render a tab badge once per tab group instead of once per panel @adrianthedev (avo v.4.2.1 #4774)
• fix: pad the modal body panel only in the belongs-to create modal @adrianthedev (avo v.4.2.1 #4773)
• fix(avo-advanced_search): searchable belongs_to inputs keep the field's html data attributes @Paul-Bob (avo-advanced_search v.4.2.1 #344)
• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (avo-advanced_search v.4.2.1, avo-audit_logging v.4.2.2, avo-calendar_view v.4.2.1, avo-collaboration v.4.3.0, avo-custom_controls v.4.3.0, avo-dynamic_filters v.4.2.1, avo-forms v.4.3.0, avo-licensing v.4.2.2, avo-reactive_fields v.4.3.0, avo-record_reordering v.4.3.0, avo-scopes v.4.3.0 #302)
• Make every gem template compile through Herb @adrianthedev (avo-advanced_search v.4.2.1, avo-api v.4.2.7, avo-calendar_view v.4.2.1, avo-dynamic_filters v.4.2.1, avo-http_resource v.4.2.1 #301)
• Serve array and HTTP resources through the REST API @Mihai-Munteanu (avo-api v.4.3.0, avo-http_resource v.4.3.0 #356)
• fix(avo-api): send field_options.required only when true @Mihai-Munteanu (avo-api v.4.3.0 #349)
• List array and HTTP resources over the REST API instead of a 500 @Paul-Bob (avo-api v.4.2.9, avo-http_resource v.4.2.2 #357)
• avo-ai: reads stay inside the policy scope, and the run ends the loader (AVO-1831) @adrianthedev (avo-api v.4.2.7 #315)
• fix(avo-api): refuse a page or per_page the paginator cannot read, instead of answering 500 @Paul-Bob (avo-api v.4.2.7 #290)
• fix(avo-mcp_server,avo-api): owner links through to its resource on Rails 8.2 hosts (AVO-1815) @Paul-Bob (avo-api v.4.2.5 #294)
• fix(avo-api): draw routes without loading the host app's models @Paul-Bob (avo-api v.4.2.3 #264)
• fix(avo-authorization): an app with no field lists never instantiates a raising policy for them @Paul-Bob (avo-authorization v.4.2.2 #335)
• Show an empty-state message when collaboration has no activity @adrianthedev (avo-collaboration v.4.3.0 #348)
• fix(avo-dashboards): render resource cards inside has_many association tables @Paul-Bob (avo-dashboards v.4.3.0 #342)
• avo-dashboards: bust cached cards when Avo or a plugin is upgraded @Paul-Bob (avo-dashboards v.4.3.0 #332)
• fix(avo-dashboards): read rows as a ceiling on data cards, not a floor @Paul-Bob (avo-dashboards v.4.2.1 #293)
• test(avo-dynamic_filters): keep the date filter calendar attached to its input on scrolled pages @Paul-Bob (avo-dynamic_filters v.4.2.1 #341)
• fix(avo-dynamic_filters): reset filters reloads only its own association frame @Paul-Bob (avo-dynamic_filters v.4.2.1 #340)
• fix(avo-dynamic_filters): hide the value input on boolean filters with custom conditions @Paul-Bob (avo-dynamic_filters v.4.2.1 #339)
• fix(avo-forms): stop a stray navigation call from doubling a page's menu @Paul-Bob (avo-forms v.4.3.0 #268)
• fix(avo-licensing): build the Avo metadata in a savepoint so a failed query can't abort the caller's transaction @Paul-Bob (avo-licensing v.4.2.3 #367)
• fix(avo-licensing): send the Avo metadata when the license check runs before Avo.init @Paul-Bob (avo-licensing v.4.2.2 #365)
• fix(avo-licensing): keep the debug report rendering when the licence check failed @Paul-Bob (avo-licensing v.4.2.1 #266)
• test(avo-nested): nested Trix field in the dummy app @Paul-Bob (avo-nested v.4.3.0 #343)
• Align notification navbar control sizing @adrianthedev (avo-notifications v.4.3.0 #358)
• Fix realtime notification updates @adrianthedev (avo-notifications v.4.3.0 #354)

💡 Refactor

• Let the resource build, save and destroy its records @Mihai-Munteanu (avo v.4.3.0 #4860)
• avo-api: null clears every field, and _schema drops shape and keys (AVO-1637) @Mihai-Munteanu (avo-api v.4.2.5 #299)
• refactor(avo-api): rename API token scopes to entitlements @Paul-Bob (avo-api v.4.2.1 #250)

🎡 CI

• ci: run spec/lib and other unscheduled spec dirs @Paul-Bob (avo v.4.2.11 #4854)

⚡️ Performance

• perf: stop re-finding records on edit pages and association frames @Shub3am (avo v.4.2.8 #4821)

🤖 Maintenance

• chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates @app/dependabot (avo v.4.3.0 #4863)
• [js] Update all Yarn dependencies (2026-10-01) @app/depfu (avo v.4.3.0 #4864)
• [ruby] Update all Bundler dependencies (2026-10-01) @app/depfu (avo v.4.3.0 #4865)
• 🚨 [security] [js] Update dompurify 3.4.15 → 3.4.16 (patch) @app/depfu (avo v.4.3.0 #4862)
• test: actions keep the selection after the browser back button @Paul-Bob (avo v.4.2.10 #4835)
• Add specs for belongs_to fields declared with for_attribute @Paul-Bob (avo v.4.2.9 #4826)
• [ruby] Update all Bundler dependencies (2026-09-24) @app/depfu (avo v.4.2.7 #4813)
• Sync shipped skills with docs through 7f2d52546ecf (2026-09-22) @adrianthedev (avo v.4.2.6 #4811)
• [ruby] Update all Bundler dependencies (2026-09-21) @app/depfu (avo v.4.2.6 #4806)
• Sync shipped skills with docs through 7beca5699d23 (2026-09-18) @adrianthedev (avo v.4.2.6 #4804)
• [js] Update all Yarn dependencies (2026-09-21) @app/depfu (avo v.4.2.6 #4805)
• [ruby] Update all Bundler dependencies (2026-09-10) @app/depfu (avo v.4.2.6 #4790)
• [js] Update all Yarn dependencies (2026-09-10) @app/depfu (avo v.4.2.6 #4789)
• Document the container CSS class rename in avo-admin-config @adrianthedev (avo v.4.2.5 #4753)
• Sync shipped skills with docs through aba11fb2470 (2026-09-17) @adrianthedev (avo v.4.2.5 #4800)
• Skills package map: list avo-ai's onboarding skill @adrianthedev (avo v.4.2.5 #4775)
• Sync shipped skills with docs through 8e6e230 (2026-09-15) @adrianthedev (avo v.4.2.4 #4797)
• chore(deps): bump js-yaml from 4.3.1 to 4.3.2 in the npm_and_yarn group across 1 directory @app/dependabot (avo v.4.2.4 #4786)
• chore(deps): bump browserslist from 4.27.0 to 4.28.8 in the npm_and_yarn group across 1 directory @app/dependabot (avo v.4.2.1 #4769)
• chore(deps): bump @tiptap/core from 2.27.2 to 3.30.4 in the npm_and_yarn group across 1 directory @app/dependabot (avo v.4.2.1 #4766)
• [ruby] Update all Bundler dependencies (2026-09-03) @app/depfu (avo v.4.2.1 #4767)
• Prepare fresh orbs for workspace development @adrianthedev (avo-calendar_view v.4.2.1 #297)

🐛 Bug Fixes

• fix(avo-licensing): build the Avo metadata in a savepoint so a failed query can't abort the caller's transaction @Paul-Bob (#367)

🐛 Bug Fixes

• fix(avo-licensing): send the Avo metadata when the license check runs before Avo.init @Paul-Bob (#365)
• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (#302) (also in avo-advanced_search, avo-ai, avo-audit_logging, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-forms, avo-reactive_fields, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• List array and HTTP resources over the REST API instead of a 500 @Paul-Bob (#357) (also in avo-http_resource)

🐛 Bug Fixes

• List array and HTTP resources over the REST API instead of a 500 @Paul-Bob (#357) (also in avo-api)

Release notes

For more information and the release video check out the full release page

🎸 Features

• Show the record count on array resources @Shub3am (#4852)
• Add hide_if_blank field option @Shub3am (#4851)
• feature: warn before leaving a form with unsaved changes @Shub3am (#4847)

✨ Enhancements

• Expose the parent record to custom controllers as @via_record @Paul-Bob (#4857)
• Let array resources opt into create, edit and delete with self.writable @Paul-Bob (#4849)
• Normalize neutral theme lightness @adrianthedev (#4846)

🐛 Bug Fixes

• Array and HTTP resources build their own index query, so any controller can list them @Paul-Bob (#4859)
• test: wait for the nested belongs_to saves before counting records @Shub3am (#4855)
• fix: restore neutral navbar text contrast @adrianthedev (#4850)
• fix: preserve nested belongs-to dialogs @adrianthedev (#4818)
• test: wait for the attach modal to reload between "Attach & Attach another" clicks @Paul-Bob (#4845)
• fix: tags field no longer shows stale remote suggestions when typing during a search @Paul-Bob (#4842)
• fix: removed tag no longer shows twice in the tags field suggestions @Paul-Bob (#4840)
• Keep the default Stimulus targets on field inputs when the html option sets no input data @Paul-Bob (#4839)
• fix: keep index filters after deleting a record @Paul-Bob (#4841)
• Fix nested Trix editors overwriting each other's content @Paul-Bob (#4838)
• Refresh the attach modal's options after "Attach & Attach another" @Paul-Bob (#4837)
• Wrap long values in resource sidebars instead of overflowing @Paul-Bob (#4836)

🎡 CI

• ci: run spec/lib and other unscheduled spec dirs @Paul-Bob (#4854)

🤖 Maintenance

• test: actions keep the selection after the browser back button @Paul-Bob (#4835)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (#289) (also in avo-ai, avo-api, avo-audit_logging, avo-authorization, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-http_resource, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)
• feat(avo-mcp_server): expose an Avo panel as a remote MCP server (AVO-1466) @Paul-Bob (#163) (also in avo-ai, avo-mcp_server)

🐛 Bug Fixes

• fix(avo-advanced_search): searchable belongs_to inputs keep the field's html data attributes @Paul-Bob (#344)
• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (#302) (also in avo-ai, avo-audit_logging, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-forms, avo-licensing, avo-reactive_fields, avo-record_reordering, avo-scopes)
• Make every gem template compile through Herb @adrianthedev (#301) (also in avo-ai, avo-api, avo-calendar_view, avo-dynamic_filters, avo-http_resource, avo-mcp_server)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (#289) (also in avo-advanced_search, avo-ai, avo-api, avo-audit_logging, avo-authorization, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-http_resource, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• test(avo-dynamic_filters): keep the date filter calendar attached to its input on scrolled pages @Paul-Bob (#341)
• fix(avo-dynamic_filters): reset filters reloads only its own association frame @Paul-Bob (#340)
• fix(avo-dynamic_filters): hide the value input on boolean filters with custom conditions @Paul-Bob (#339)
• Stop Avo add-ons tripping Rails 8.2's early load hook guard at boot @adrianthedev (#302) (also in avo-advanced_search, avo-ai, avo-audit_logging, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-forms, avo-licensing, avo-reactive_fields, avo-record_reordering, avo-scopes)
• Make every gem template compile through Herb @adrianthedev (#301) (also in avo-advanced_search, avo-ai, avo-api, avo-calendar_view, avo-http_resource, avo-mcp_server)

🎸 Features

• feat: policy-declared field authorization across every Avo surface @Paul-Bob (#289) (also in avo-advanced_search, avo-ai, avo-api, avo-audit_logging, avo-authorization, avo-calendar_view, avo-collaboration, avo-custom_controls, avo-dynamic_filters, avo-kanban, avo-mcp_server, avo-nested, avo-notifications, avo-query, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• Make every gem template compile through Herb @adrianthedev (#301) (also in avo-advanced_search, avo-ai, avo-api, avo-calendar_view, avo-dynamic_filters, avo-mcp_server)

🎸 Features

• feat(avo-api, avo-mcp_server): show each credential's access level on the index @Paul-Bob (#338) (also in avo-mcp_server)

Release notes

For more information and the release video check out the full release page

🎸 Features

• Locale selector in the top navbar, stored per user @Paul-Bob (#4834)
• Lightbox for image previews on file and files fields @Paul-Bob (#4833)
• feat: linkable option for has_one fields @Shub3am (#4830)
• feat: per_page option for has_many fields @Shub3am (#4832)
• Cmd+Return submits the form in any Avo modal @adrianthedev (#4824)

🐛 Bug Fixes

• fix: resolve plugin and aliased field types in avo_field helpers @Shub3am (#4828)
• fix: open actions with a belongs_to field when several records or none are selected @Shub3am (#4829)
• fix: Go back from a belongs_to index link returns to the index it came from @Shub3am (#4831)
• Key cached index rows on the current user, locale and tenant @Paul-Bob (#4827)
• fix: actions keep the view they were started from instead of "new" @Paul-Bob (#4825)
• fix: Render media library blob details when the attached record is gone @Shub3am (#4820)
• Stop the namespaced generator spec from deleting the committed galaxy files @Shub3am (#4823)

⚡️ Performance

• perf: stop re-finding records on edit pages and association frames @Shub3am (#4821)

🤖 Maintenance

• Add specs for belongs_to fields declared with for_attribute @Paul-Bob (#4826)

🐛 Bug Fixes

• fix(avo-authorization): an app with no field lists never instantiates a raising policy for them @Paul-Bob (#335)