Changelog

Release notes

For more information and the release video check out the full release page

• chore(deps): bump browserslist from 4.27.0 to 4.28.8 in the npm_and_yarn group across 1 directory @dependabot (#4769)
• chore(deps): bump @tiptap/core from 2.27.2 to 3.30.4 in the npm_and_yarn group across 1 directory @dependabot (#4766)

🐛 Bug Fixes

• fix: render a tab badge once per tab group instead of once per panel @adrianthedev (#4774)
• fix: pad the modal body panel only in the belongs-to create modal @adrianthedev (#4773)

🤖 Maintenance

• [ruby] Update all Bundler dependencies (2026-09-03) @depfu (#4767)

No customer-facing changes in avo-calendar_view 4.2.0.

🎸 Features

• feat(avo-api): API tokens and per-token scopes for the REST API (AVO-1650) @Paul-Bob (#212) (also in avo-api, avo-custom_controls, avo-forms)
• feat(avo-calendar_view): render single-day timed events dot-style (AVO-1735) @adrianthedev (v.4.0.9 #215)

🤖 Maintenance

• Rename avo-calendar to avo-calendar_view @adrianthedev (v.4.0.8 #214) (also in avo-calendar)

🐛 Bug Fixes

• fix(avo-http_resource): refuse requests to an endpoint with no host @adrianthedev (v.4.1.8 #219)
• fix: reject symlinks from spec.files in every gemspec @adrianthedev (v.4.1.8 #210) (also in avo-ai, avo-api, avo-audit_logging, avo-calendar, avo-collaboration, avo-licensing, avo-menu, avo-meta, avo-nested, avo-notifications, avo-permissions, avo-query, avo-reactive_fields)

💡 Refactor

• refactor: container widths use Tailwind's scale (:large/:small deprecated) @adrianthedev (v.4.1.9 #239) (also in avo-advanced_search, avo-ai, avo-authorization, avo-custom_controls, avo-dashboards, avo-kanban, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• fix: reject symlinks from spec.files in every gemspec @adrianthedev (#210) (also in avo-ai, avo-api, avo-audit_logging, avo-calendar, avo-collaboration, avo-http_resource, avo-licensing, avo-menu, avo-meta, avo-notifications, avo-permissions, avo-query, avo-reactive_fields)

🐛 Bug Fixes

• fix: reject symlinks from spec.files in every gemspec @adrianthedev (#210) (also in avo-ai, avo-api, avo-audit_logging, avo-calendar, avo-collaboration, avo-http_resource, avo-licensing, avo-menu, avo-meta, avo-nested, avo-notifications, avo-permissions, avo-query)

💡 Refactor

• refactor: container widths use Tailwind's scale (:large/:small deprecated) @adrianthedev (#239) (also in avo-advanced_search, avo-ai, avo-authorization, avo-custom_controls, avo-dashboards, avo-http_resource, avo-kanban, avo-scopes)

🎸 Features

• Resolve scope, card and dashboard labels via translation keys (AVO-1444) @Paul-Bob (v.4.1.2 #182) (also in avo-dashboards)
• Localize scope and dashboard card display strings (AVO-1444) @Paul-Bob (v.4.1.2 #178) (also in avo-dashboards)

💡 Refactor

• refactor: container widths use Tailwind's scale (:large/:small deprecated) @adrianthedev (#239) (also in avo-advanced_search, avo-ai, avo-authorization, avo-custom_controls, avo-dashboards, avo-http_resource, avo-kanban, avo-record_reordering)

💡 Refactor

• refactor: container widths use Tailwind's scale (:large/:small deprecated) @adrianthedev (v.4.1.2 #239) (also in avo-advanced_search, avo-ai, avo-authorization, avo-custom_controls, avo-dashboards, avo-http_resource, avo-record_reordering, avo-scopes)

🐛 Bug Fixes

• fix: reject symlinks from spec.files in every gemspec @adrianthedev (#210) (also in avo-ai, avo-api, avo-audit_logging, avo-calendar, avo-collaboration, avo-http_resource, avo-licensing, avo-menu, avo-meta, avo-nested, avo-permissions, avo-query, avo-reactive_fields)

🎸 Features

• Resolve scope, card and dashboard labels via translation keys (AVO-1444) @Paul-Bob (v.4.1.2 #182) (also in avo-scopes)
• Localize scope and dashboard card display strings (AVO-1444) @Paul-Bob (v.4.1.2 #178) (also in avo-scopes)

🐛 Bug Fixes

• fix(avo-dashboards): spin card refresh icon counterclockwise (AVO-1736) @adrianthedev (v.4.1.3 #216)

💡 Refactor

• refactor: container widths use Tailwind's scale (:large/:small deprecated) @adrianthedev (v.4.1.4 #239) (also in avo-advanced_search, avo-ai, avo-authorization, avo-custom_controls, avo-http_resource, avo-kanban, avo-record_reordering, avo-scopes)

🎸 Features

• feat(avo-api): API tokens and per-token scopes for the REST API (AVO-1650) @Paul-Bob (#212) (also in avo-api, avo-calendar_view, avo-custom_controls)
• feat(avo-forms): set the container width on pages and forms @adrianthedev (v.4.1.2 #240)

🐛 Bug Fixes

• fix: reject symlinks from spec.files in every gemspec @adrianthedev (#210) (also in avo-ai, avo-api, avo-audit_logging, avo-calendar, avo-collaboration, avo-http_resource, avo-menu, avo-meta, avo-nested, avo-notifications, avo-permissions, avo-query, avo-reactive_fields)

🐛 Bug Fixes

• fix(avo-dynamic_filters): render filter partials as HTML inside the turbo_stream response @Paul-Bob (v.4.1.3 #241)
• Localize the dynamic filters bar per request (AVO-1465) @Paul-Bob (v.4.1.2 #168)

🐛 Bug Fixes

• fix: reject symlinks from spec.files in every gemspec @adrianthedev (#210) (also in avo-ai, avo-api, avo-audit_logging, avo-calendar, avo-http_resource, avo-licensing, avo-menu, avo-meta, avo-nested, avo-notifications, avo-permissions, avo-query, avo-reactive_fields)

🎸 Features

• feat(avo-api): API tokens and per-token scopes for the REST API (AVO-1650) @Paul-Bob (#212) (also in avo-calendar_view, avo-custom_controls, avo-forms)

🐛 Bug Fixes

• fix: reject symlinks from spec.files in every gemspec @adrianthedev (v.4.1.2 #210) (also in avo-ai, avo-audit_logging, avo-calendar, avo-collaboration, avo-http_resource, avo-licensing, avo-menu, avo-meta, avo-nested, avo-notifications, avo-permissions, avo-query, avo-reactive_fields)
• fix(avo-api): separate the two authorization failure modes in the skill @Paul-Bob (v.4.1.2 #201)
• fix(avo-api): rewrite the REST API skill to describe the gem that ships @Paul-Bob (v.4.1.2 #200)

🐛 Bug Fixes

• fix: reject symlinks from spec.files in every gemspec @adrianthedev (#210) (also in avo-ai, avo-api, avo-calendar, avo-collaboration, avo-http_resource, avo-licensing, avo-menu, avo-meta, avo-nested, avo-notifications, avo-permissions, avo-query, avo-reactive_fields)

💡 Refactor

• refactor: container widths use Tailwind's scale (:large/:small deprecated) @adrianthedev (#239) (also in avo-advanced_search, avo-ai, avo-custom_controls, avo-dashboards, avo-http_resource, avo-kanban, avo-record_reordering, avo-scopes)

🎸 Features

• feat(avo-api): API tokens and per-token scopes for the REST API (AVO-1650) @Paul-Bob (#212) (also in avo-api, avo-calendar_view, avo-forms)

💡 Refactor

• refactor: container widths use Tailwind's scale (:large/:small deprecated) @adrianthedev (#239) (also in avo-advanced_search, avo-ai, avo-authorization, avo-dashboards, avo-http_resource, avo-kanban, avo-record_reordering, avo-scopes)

🎸 Features

• Menu items and resources can color their sidebar icons @adrianthedev (v.4.1.2 #170) (also in avo-menu)

🐛 Bug Fixes

• fix(avo-advanced_search): compare the rendered name in the global search authorization spec @adrianthedev (v.4.1.2 #222)
• Guard resource color lookups and fix the avo-intelligence dummy app @adrianthedev (v.4.1.2 #180) (also in avo-intelligence, avo-menu)

💡 Refactor

• refactor: container widths use Tailwind's scale (:large/:small deprecated) @adrianthedev (v.4.1.2 #239) (also in avo-ai, avo-authorization, avo-custom_controls, avo-dashboards, avo-http_resource, avo-kanban, avo-record_reordering, avo-scopes)