Reddit

Title: NocoDB 2026.05.2 - Gantt View, Shared Pages, expanded record panel in Community Edition, dashboard color palettes, one active session per account

Body:

Hey r/NocoDB,

2026.05.2 is out. Quick rundown of what's in it:

1. Gantt View

Turn any date-based table into a live project schedule. Records become draggable bars on a timeline, dependencies become arrows between them, and records with only an end date become milestone diamonds. Configure a per-view Date Dependencies rule (Start, End, optional Duration and a self-referencing Successor Link), then drag to reschedule, resize to extend, and pull from a bar's handle to link tasks into a dependency chain. Hover any task to light up its whole upstream and downstream chain. Zoom across eight levels from a one-week sprint to a five-year roadmap, group by any field, color bars with row-coloring rules, and open a right-rail Record Inspector to edit dates and links without leaving the chart. Gantt views can be shared as read-only public views.

Available on the Business plan and above on Cloud, and on self-hosted Enterprise.

2. Shared Pages

Turn any NocoDocs page into a read-only public link that anyone can open in a browser, no NocoDB account required. Open the Share dialog, enable public viewing, and copy the link or an embeddable iframe snippet. The Include sub-pages toggle controls whether the link exposes the whole subtree or just the single page, and pages with custom visibility permissions are filtered out automatically so private branches can't leak through a parent's link. The public reader shows the cover image, icon, attachments, a breadcrumb, a sub-pages sidebar, a light/dark toggle, and a Markdown download, and the page is marked noindex. Switch the toggle off to revoke the link in seconds.

Available on all NocoDB Cloud plans and on self-hosted Business and above. Community Edition includes NocoDocs but not public sharing.

3. Expanded Record Side Panel in Community Edition

The expanded-record side panel, introduced in 2026.05.1, now ships in Community Edition too. Opening a record docks it to the right of the grid instead of a full-screen modal, so your data stays in view while you edit fields, read comments, or scan history. It's the default desktop layout across all editions; public and shared views still open as a centered modal. New this release: type in the search box to filter a record's fields by name, or toggle Hide blank fields to collapse the empty ones, handy when a table has many columns.

Available on all plans, including Community Edition.

4. Dashboard chart color palettes

Dashboard bar, line, pie, donut, and scatter widgets gain a color palette picker in their appearance settings, with presets and a preview that reflects the chart type. Gauge widgets now use a full color picker for range colors, so you can set precise hex values instead of the basic browser swatch.

Available on the Plus and Business plans in Cloud (dashboards are in Beta).

5. Pinned filters for date fields

Date, DateTime, Created time, and Last modified time fields can now be pinned to the toolbar, alongside the existing select and user field types. Each pinned date filter shows a compact pill with a dropdown to switch between sub-options like exact date, days ago, days from now, and past or next N days.

Available on the Plus plan and above on Cloud, and on self-hosted Enterprise.

6. One active session per account

NocoDB now keeps a single active session per account. Signing in on a new device or browser signs out any earlier session and revokes its tokens, so a login left open on a shared or lost machine can't keep access. It applies to every sign-in path, including SSO, and is on by default across all editions. API tokens are unaffected. Self-hosted operators who run shared service accounts can opt out with NC_DISABLE_SINGLE_SESSION_ENFORCEMENT=true.

7. Account security

Workspace-wide 2FA enforcement no longer exempts owners: when an Enterprise workspace requires 2FA, owners must enroll along with everyone else.

Heads up for self-hosters

SSRF protection blocks private and local network targets by default. If your instance connects to a database or sends webhooks on a private or local network, opt in with NC_ALLOW_LOCAL_EXTERNAL_DBS, NC_WEBHOOK_ALLOW_PRIVATE_NETWORK / NC_ALLOW_LOCAL_HOOKS, or disable filtering globally with NC_DISABLE_SSRF_PROTECTION. NocoDB Cloud always enforces SSRF protection.

Also, a bug that silently corrupted stored TOTP secrets on instances with NC_CONNECTION_ENCRYPT_KEY set is fixed. If 2FA verification was failing for you, disable and re-enroll after upgrading.

Also

Hidden required fields no longer fail silently. Hiding a required (NOT NULL) field now warns first and flags it persistently, and a row that can't save because a required value is missing shows a clear message instead of quietly disappearing.
Calendar and date fields respect the column timezone on MySQL DateTime and timezone-configured columns.
Arrow up/down now steps Integer, Decimal, and Percent fields in forms.
AutoNumber on an empty table no longer errors, and row-color filters survive view switches.
A large batch of dependency security advisories has been patched, with no public API changes.

Full changelog: https://nocodb.com/docs/changelog/2026.05.2

Happy to answer questions in the thread.