BuildBaseBuildBase
Changelog

What we shipped

Weekly release notes. Most recently: two-step sign-in, phone and wallet sign-in, and a sign-in page in eight languages.

2026

27 releases

·38 changes

Two-step sign-in, phone and wallet sign-in, and a sign-in page in eight languages

Sign-in grows from a few methods to most of what people expect: two-step sign-in, email and phone codes, Apple and a provider of your own, usernames, wallets, guests and device codes, with bot protection and sign-up rules in front of them. The hosted sign-in page speaks eight languages and carries each app's own name, logo and words. Feature flags targeted at tags or set to allow everyone now turn on in the SDK, a short outage at a webhook endpoint no longer switches it off, and a workflow's delayed steps keep their timing.

13 added
2 improved
23 fixed
Read

·41 changes

Spam protection for forms, deploy hooks that report back, and monday.com in the console

Forms can require a captcha and hold suspicious submissions for review. Deploy hooks and the monday.com integration, built but hidden until now, are in the console and working, and a workflow set to run every time no longer runs once per person.

8 added
8 improved
25 fixed
Read

·13 changes

Charts that no longer take the server down, migrations that run themselves, and a bounded page size

A week on the platform's own health after an incident on 7 October: the analytics rollup collection had never had an index, and the email history chart formatted twelve million dates per load. All of it measured in production and fixed, with the one-off repairs now running on their own after a deploy.

2 added
7 improved
4 fixed
Read

·24 changes

Invite-only sign-up, a console that loads once, and one subscription per workspace

Close public sign-up and still let invited people in, get a console that no longer bootstraps twice on every load, and never pay for a second subscription from a double-clicked checkout. The SDK went from 0.0.74 to 0.0.78 across the week.

3 added
10 improved
11 fixed
Read

·22 changes

Workspace invitations, a notification inbox, and plans that say what they include

Invite people to a workspace by email before they have an account, give every member an in-app inbox that updates live with their own notification preferences, and see exactly what each plan includes. It ships in @buildbase/sdk 0.0.71; signOut() revoking the server session shipped in 0.0.70 the same week.

8 added
1 improved
13 fixed
Read

·15 changes

Tracking & Tags: your ad and analytics tags, managed from the console

Add GA4, Google Tag Manager, Google Ads, Meta and a dozen other tags in the console, attach them to an app, and the SDK installs them and reports sign-ups, checkouts and purchases for you - plus the funnel in between. It ships in @buildbase/sdk 0.0.68.

7 added
8 fixed
Read

·14 changes

Invitations that carry a role

An invitation can now name the role the person lands on, and it arrives by email instead of waiting to be found. Owners can read what the built-in roles grant, and the last console controls that ignored permissions now respect them.

7 added
7 fixed
Read

·21 changes

Custom roles, link safety, and a billing audit

Custom roles now work end to end, with the organization's own database deciding what a member may do. Links BuildBase hosts are checked for reputation and can be killed at click time. And a systematic pass over billing fixed six real issues.

6 added
1 improved
14 fixed
Read

·18 changes

Badges for your app, and billing exemptions

Any app built on BuildBase can now show a "Built with BuildBase" badge, an organization exempt from billing says so instead of looking unsubscribed, and the console picks up a round of fixes.

6 added
12 fixed
Read

·13 changes

A setup guide that verifies itself

Get Started rebuilt as a six-phase flow whose steps are proven from live data, live chat support in the console, and a subscription gate that holds server-side.

6 added
1 improved
6 fixed
Read

·9 changes

Documentation for every module

All 19 modules are now documented, and writing the docs surfaced four bugs worth fixing.

4 added
1 improved
4 fixed
Read

·5 changes

Device-aware sessions and trusted devices

Sessions now know which device they belong to, with a trusted-device flow and configurable security emails.

3 added
1 improved
1 fixed
Read

·5 changes

Agents can register themselves

Dynamic Client Registration (RFC 7591) lets an AI agent become an OAuth client without a human provisioning one.

4 added
1 improved
Read

·4 changes

Passkeys and PKCE

WebAuthn passkey sign-in with progressive enrollment, plus PKCE support with a per-client requirement flag.

4 added
Read

·5 changes

Making the platform legible to AI agents

Agent skills discovery, OAuth metadata, signed bot authentication, and markdown content negotiation.

4 added
1 improved
Read

·4 changes

Self-hosted deployment

Docker images for the central and tenant servers, a setup wizard, and request hardening across the API.

3 added
1 fixed
Read

·7 changes

Multi-instance scaling, and the docs site

Shared state moved to Redis so the platform runs on several instances, and docs.buildbase.app went live.

4 added
3 improved
Read

·3 changes

Fifty more workflow triggers

The workflow builder gained six actions and unhid fifty triggers, grouped by category.

3 added
Read

·4 changes

A shared component library

UI components centralized into one package, with a navigation and accessibility pass across every screen.

2 added
2 improved
Read

·4 changes

Smart lists and a system event catalog

Audience lists that filter on email activity and membership, plus a centralized catalog of system events.

4 added
Read

·4 changes

Slack notifications

Real-time Slack alerts for signups, workspaces and subscriptions, plus a 223-test authentication suite.

3 added
1 improved
Read

·4 changes

Audience import and tagging

CSV import with column mapping, audience tags, and automatic syncing from user lifecycle events.

4 added
Read

·3 changes

Webhooks and freemium plans

A webhook system with enriched payloads and signature verification, and support for freemium plans.

3 added
Read

·6 changes

Multi-currency billing and failed payments

Plans priced in several currencies, a currency locked per workspace, and dunning when a payment fails.

4 added
2 fixed
Read

·3 changes

Checkout, invoices, and per-workspace Stripe customers

Stripe Checkout for new subscriptions and upgrades, with invoice history on the workspace.

3 added
Read

·3 changes

Workspace plans and quota limits

Quota and limit calculation per workspace, with plan history kept as a log.

3 added
Read

·3 changes

Plan groups and pricing versions

Plans became versioned, so changing pricing no longer rewrites what existing subscribers are on.

3 added
Read

2025

4 releases

·5 changes

User attributes

Custom attributes on users, editable from the console and from the SDK, and filterable in the user table.

4 added
1 improved
Read

·4 changes

Sending email from a template, and settings APIs

Send directly from the template editor with merge tags visible, plus organization and workspace settings APIs.

2 added
2 fixed
Read

·3 changes

Users on a map

Country, language and timezone captured for every user, with a world map and per-country counts on the dashboard.

3 added
Read

·3 changes

Device and location on every activity

User activity records now carry resolved IP information - location, browser and device - with charts over the result.

3 added
Read

2024

1 release

·3 changes

Login screens configured from the console

The hosted login screen takes its configuration and branding from the console, with magic link sign-in completed.

3 added
Read

2023

2 releases

·3 changes

Redis, background queues, and short links

Caching and a job queue moved onto Redis and BullMQ, and short links arrived.

3 added
Read

·5 changes

Feature flags, campaigns, and encryption at rest

The first feature flag system, email campaigns with open tracking, and field-level encryption in the data layer.

5 added
Read

Entries reach back to the first working version in November 2023. They are not evenly spaced, because development has not been: ten of the twenty-five months before December 2025 have no commits at all, including an unbroken stretch from June to November 2025. Rather than pad those periods, they are simply absent - a changelog records what happened, not what a calendar expects.

Subscribe by RSS

Build on something that ships every week

Every release above is live for every customer the week it is written up.

7-day free trialNo credit card requiredCancel anytime