Flagsmith Release Notes

2.226.0 (2026-04-03)

Features

• Dogfooding: Add OpenFeature SDK for server-side Flagsmith-on-Flagsmith (#7008) (3e3be2e)
• enforce feature ownership project setting (#7067) (e8ce5ab)
• saas-billing: Invoice immediately for new seats (#7086) (3718766)
• track-code-references-actions (#7044) (0ae31e2)

Bug Fixes

• chargebee: Handle addon ids per billing period (#7108) (db02299)

Dependency Updates

• bump licensing to support new cli args (#7098) (cee0c91)
• Update cryptography to 46.0.6 (#7111) (d8edc2a)
• Update picomatch, lodash and path-to-regexp (#7112) (de6e4e2)
• Update pyasn1 to 0.6.3 (#7110) (490bb50)

Docs

• add guide for experimental flag update endpoints (#7083) (0156837)
• Remove deny change request from docs (#7105) (6dc9b14)
• Remove duplicate Prometheus metrics table from monitoring page (#7107) (652cdd4)

2.225.0 (2026-04-02)

Features

• Logging: Unify logging format (#7050) (9f1d4ec)
• tagged-v1-endpoints-for-mcp-usage (#7052) (61ca107)

Bug Fixes

• ci: Docker compose migration race condition (#7068) (c048441)
• dissociated-code-references-gate-from-flag-response (#7065) (a8a876c)
• Invoke backend logout API on logout button click to prevent broken authentication (#6820) (b9ea92a)
• Skip logout endpoint in e2e (#7089) (9a6aa07)
• ui: replace misleading permission tooltip on segment override variations (#7011) (184503d)
• use .values("id").distinct().count() in platform_hub for Oracle compatibility (#7041) (3f71f16)
• Version endpoints not returning JSON in all-in-one Docker deployment (#7079) (2eecc76)

Dependency Updates

• bump brace-expansion in /docs (#7058) (7399289)
• bump brace-expansion in /frontend (#7059) (4d4af67)
• bump cryptography from 46.0.5 to 46.0.6 in /api (#7060) (9c09ac1)
• Bump flagsmith-ldap 0.1.1 -> 0.1.2 (#7082) (377b879)
• bump flatted from 3.3.3 to 3.4.2 in /frontend (#7006) (c6bc4b4)
• bump handlebars from 4.7.8 to 4.7.9 in /frontend (#7053) (93eceb7)
• bump handlebars from 4.7.8 to 4.7.9 in /frontend (#7075) (936ae93)
• bump node-forge from 1.3.2 to 1.4.0 in /docs (#7054) (bbcb826)
• bump path-to-regexp from 0.1.12 to 0.1.13 in /docs (#7062) (1d9b561)
• bump path-to-regexp from 0.1.12 to 0.1.13 in /frontend (#7061) (df42f93)
• bump picomatch from 2.3.1 to 2.3.2 in /docs (#7047) (a9cb0ca)
• bump picomatch from 2.3.1 to 2.3.2 in /frontend (#7046) (ccd9da8)
• bump pygments from 2.19.2 to 2.20.0 in /api (#7076) (2dcdde2)
• bump requests from 2.32.4 to 2.33.0 in /api (#7048) (c376a26)
• bump yaml in /frontend (#7045) (45e6329)
• react-migration-to-v19 (#6764) (13b012e)

CI

• pre-commit autoupdate (#7078) (738ef4a)
• Tests: Migrate API Pull Request workflow to Depot CI (#7030) (e09f651)

Docs

• pgbouncer: add credentialsFromExistingSecret usage to Kubernete… (#7037) (1867d0e)

Refactoring

• create feature migration (#6925) (eac3aab)

2.223.0 (2026-03-23)

Features

add Code References to project integrations page (#6974) (26fc48f)

Features API: Restrict code references querying to a feature flag (#6970) (dcb0a37)

Bug Fixes

API Usage: Allow self-hosted API usage alerts (#6975) (437abff)

CI: Pin safe trivy check version (#7010) (ffd2a11)

Schedule Update on Segment Overrides shows 'Feature contains no changes' (#6996) (ec940fe)

CI

Add flagsmith-lint-tests pre-commit hook (#6933) (95a1721)

Fix all flagsmith-lint-tests violations (#6994) (aafc84b)

pre-commit autoupdate (#7017) (078e7d8)

Docs

add troubleshooting guide to support (#6978) (9be685c)

2.222.2 (2026-03-18)

Bug Fixes

• add edit users sending up wrong data (#6923) (b249f2c)
• align organisation dropdown on responsive viewports (#6971) (0073739)
• convert feature_state_value after v2 segment save (#6962) (#6967) (13ada3b)
• mask webhook secret with password field and reveal toggle (#6932) (ddbf8bd)
• restore grid layout in PanelSearch broken by wrapper div (#6977) (51fc019)
• restore Prevent Flag Defaults UI enforcement in create feature modal (#6931) (0b80126)
• trim whitespace in search filters to prevent API 400 errors (#6934) (d93f6d4)
• use bg-body on sign-up card for dark mode compatibility (#6973) (ead91ec)
• wrap long text in value editor to prevent horizontal overflow (#6972) (cf9d70d)

Dependency Updates

• Bump flagsmith-worfklows 3.3.2 (#6981) (a4593a2)

CI

• Ensure workflows run on update flagsmith environment PRs (#6957) (de8bf59)
• pre-commit autoupdate (#6965) (f226061)

Refactoring

• decouple Button from Constants import (#6947) (c7f9f29)
• Migrate from is_context_in_segment to get_evaluation_result (#6896) (2ae6edc)
• permission types (#6417) (2d9f0fa)

2.222.1 (2026-03-18)

Bug Fixes

• 6905: replace dynamic serializer with SDKAnalyticsFlagsV1Serializer (#6908) (f1082d4)
• Audit: Stop error noise when deleting segment overrides (#6941) (c2bddaf)
• only apply bold font-weight to active sidebar link (#6926) (1dca708)
• prevent IDOR vulnerability in environment update endpoint (#6384) (89f2477)
• replace all hardcoded icon fills with currentColor (#6870) (7453f96)
• Segments: Fix project reference in segment creation (#6929) (b905af2)
• SuccessMessage: fix invalid fontWeight and consolidate duplicate (#6873) (45b0dec)

Dependency Updates

• bump black from 25.1.0 to 26.3.1 in /api (#6939) (ffa171d)
• bump pyjwt from 2.8.0 to 2.12.0 in /api (#6950) (696bf62)
• bump pyopenssl from 25.3.0 to 26.0.0 in /api (#6964) (a6390eb)

CI

• pre-commit autoupdate (#6897) (0cb6bda)
• Use sticky PR comments for Playwright report summaries (#6909) (dbd66e9)

Refactoring

• Prevent duplicate features list GETS (#6927) (362a9f8)

Tests

• fix flaky tests (#6848) (8ffafd9)