3.31.0

Release notes

For more information and the release video check out the full release page

🐛 Bug Fixes

• Enhance Avo by adding configuration file requirement in lib/avo.rb @Paul-Bob (#4410)
• enhancement: improve CSP @Paul-Bob (#4335)
• 🚨 [security] fix: return_to parameter @Paul-Bob (#4330)
• fix: require @Paul-Bob (#4328 & avo-dashboards #65 & avo-menu #47 & avo-pro #151 & avo-dynamic_filters #111 & avo-advnaced #84)
• fix: nested has_one with date fields @Paul-Bob (avo-dynamic_filters #83)

🤖 Maintenance

• [ruby] Update all Bundler dependencies (2026-04-09) @depfu (#4408)
• [ruby] Update all Bundler dependencies (2026-04-04) @depfu (#4398)
• 🚨 [security] [ruby] Update rack 3.2.5 → 3.2.6 (patch) @depfu (#4397)
• 🚨 [security] [js] Update lodash 4.17.23 → 4.18.1 (minor) @depfu (#4394)
• fix: require dependencies @Paul-Bob (#4323)
• 🚨 [security] [js] Update dompurify 3.3.1 → 3.3.2 (patch) @depfu (#4300)
• [js] Update all Yarn dependencies (2026-03-05) @depfu (#4287)