DBine: matoleo yote na matoleo ya zamani

DBine v1.4.2 installers.
New
- Old SQL Server versions over TLS 1.0/1.1: DBine connects to SQL Server 2012 and earlier when the server only speaks TLS 1.0 or 1.1. It always tries TLS 1.2 or later first. If the server only accepts an old protocol, DBine says so (naming the server's version) and asks once whether to connect anyway; on yes, it downloads the SQL Server (TLS 1.0/1.1) component and remembers the choice for that connection. A Legacy TLS indicator shows while it's in use, the certificate is still verified (or pinned with Trust server certificate), and the option can be turned off in the connection's SSL tab. Updating the server to TLS 1.2 (SQL Server 2012 SP4) remains the safer fix.
Improvements
- Engine logos: 51 more connection types show their product's logo instead of initials, among them IBM Db2, Informix and Netezza, Vertica, Exasol, InterSystems IRIS, Microsoft Access, Greenplum, StarRocks, OceanBase, TDengine, Materialize, Memgraph, RisingWave and Dremio.
Fixes
- Engines without databases (SQLite, libSQL, DuckDB files, KDB+…): their connection's menu now has Search the database, Health check and, where the engine has them, Properties, which were offered only on database nodes; the command palette offers search and the health check for them too.
Downloads
- Windows: -setup.exe (requires WebView2, included in Windows 10/11).
- macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
- Linux: .AppImage (portable), .deb or .rpm.
- Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
- Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.
Version 0.1.4 and later receive it through the automatic update.
- macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
- Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
- Each engine's driver (except SQLite) is downloaded the first time you connect.

DBine v1.4.1 installers.
New
- Automatic updates: DBine checks for a new version when it starts and every 6 hours, downloads and verifies it in the background, and shows Restart to update in the status bar when it's ready. If you just quit, the update installs then, and the next start is the new version, with a summary of what's new. Installs that can't update themselves (deb, rpm, MSI, Flatpak) keep the notice with the download link. DBINE_AUTO_UPDATE=0 turns automatic updates off on managed machines.
- q in the editor: KDB+ queries get q syntax highlighting and completion of keywords, built-in functions, tables, columns, functions and namespaced names such as .u.upd. ⌘/ comments lines with /, and there are more q snippets.
- KDB+ schema compare, sync and conversion: compare and sync tables in memory (add, drop, retype and rename columns, change the key), rename tables, and convert schemas between kdb+ and the other engines, with q types and keyed tables mapped to primary keys. Partitioned and splayed tables are refused, with the reason.
Improvements
- KDB+ foreign keys, bulk load and charts: linked columns show as foreign keys in the ER diagram and in jump by key, imports and migrations load rows as typed tables over IPC (100,000 rows in about a second), and charts are aggregated on the server over the whole result.
- KX logo: KDB+ connections show KX's logo.
Downloads
- Windows: -setup.exe (requires WebView2, included in Windows 10/11).
- macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
- Linux: .AppImage (portable), .deb or .rpm.
- Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
- Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.
Version 0.1.4 and later receive it through the automatic update.
- macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
- Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
- Each engine's driver (except SQLite) is downloaded the first time you connect.

DBine v1.4.0 installers.
New
- KDB+ support: connect to kdb+ processes (plain or over TLS) and work in q: browse the tables, views, functions and variables of every namespace, run q scripts statement by statement, filter, sort and edit table rows from the grid, and watch memory and open connections in the Monitor. On kdb+ 3.6 and later, read-only connections are also enforced by the server (reval); on older servers a read-only connection only opens tables and variables. Copy connection string gives the q hopen handle and PyKX.
- Databricks sign-in through the browser: Databricks and Azure Databricks connections can sign in with Browser sign-in (SSO): DBine opens the workspace's sign-in page (Microsoft Entra ID on Azure), so your organization's SSO and MFA work without a personal access token or a service principal. The session renews itself while DBine is open.
Improvements
- Permissions to grant come from the server: in Users and permissions, the list of permissions is what that server can grant, read from its own catalog where it has one (SQL Server's sys.fn_builtin_permissions, PostgreSQL's ACLs, MySQL's SHOW PRIVILEGES, ClickHouse, Oracle, SAP HANA, Redis, MongoDB, Neo4j, Couchbase, OpenSearch…) and from the engine's documentation elsewhere, so it follows the server's version: SQL Server now offers VIEW DATABASE STATE, VIEW DATABASE PERFORMANCE STATE, SHOWPLAN and the rest. It shows only what applies to the target you pick (the whole database, a schema, a table, a procedure…), and the same list feeds New schema…. A permission can still be typed.
Fixes
- Safer spreadsheet import: reading .xls and .xlsb files uses calamine 0.38, so a crafted file can no longer crash DBine or exhaust its memory (RUSTSEC-2026-0436).
- Text fields keep exactly what you type: user names, passwords, host names, connection URLs, searches, filters and every other text field no longer get their first letter capitalized, autocorrected or spell-checked by the operating system, so demo_user stays demo_user. Shift and Caps Lock work as always. The same applies to the connection filter in the phone app.
Downloads
- Windows: -setup.exe (requires WebView2, included in Windows 10/11).
- macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
- Linux: .AppImage (portable), .deb or .rpm.
- Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
- Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.
Version 0.1.4 and later receive it through the automatic update.
- macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
- Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
- Each engine's driver (except SQLite) is downloaded the first time you connect.

DBine v1.3.1 installers.
Improvements
- Recovering a connection after a network cut: a connection that failed or is stuck connecting can now be disconnected from its menu, which closes its sessions and its SSH tunnel; connecting again starts from scratch. A query that fails because the connection broke now drops its session and, when the SSH tunnel no longer reaches the server, the tunnel too, so the next query reconnects on its own. Disconnecting asks first when a tab has an open transaction or a statement still running, and an SSH tunnel's connection and sign-in can no longer wait forever.
- Clearer message when updates can't be checked offline: without an internet connection, checking for or downloading an update now says the update server can't be reached, instead of showing the network library's error.
Fixes
- SSH tunnels, security: the SSH library is updated past several advisories, the most serious letting a key held in the SSH agent sign without the agent asking for confirmation; a server can no longer stall a tunnel or make DBine use unbounded memory with crafted packets.
Downloads
- Windows: -setup.exe (requires WebView2, included in Windows 10/11).
- macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
- Linux: .AppImage (portable), .deb or .rpm.
- Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
- Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.
Version 0.1.4 and later receive it through the automatic update.
- macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
- Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
- Each engine's driver (except SQLite) is downloaded the first time you connect.

DBine v1.3.0 installers.
New
- SSH tunnel profiles: save an SSH tunnel (server, bastions, user and authentication) once as a profile in Settings and pick it in any connection; each connection keeps its own database server. Editing the profile applies to every connection that uses it on its next connect, a connection's current tunnel can be saved as a profile, and the profile's secrets stay in the system keychain.
- Table columns on hover: resting the pointer on a table's name in the SQL editor shows its columns with their type, whether they allow nulls, the primary key and each column's comment, for every engine.
Improvements
- AI assistant with Claude Code and Codex: when you ask about another database on the same connection, the assistant reads its tables and columns without switching the tab's database. These models still never receive table rows.
Fixes
- SAP HANA on Linux, security: cancelling a query no longer reads the folder of trusted certificates after the session has removed it, a moment another user of the same computer could have used to plant their own certificate authority.
- Security, dependencies: ctutils and crypto-bigint are updated past their constant-time fixes.
- Excel export of very long text: a cell longer than Excel's limit is cut to fit again when it holds characters such as emoji, instead of stopping the export.
- Trino and Presto, security: copying or exporting data from a table whose column type is nested deeper than any real schema can no longer crash DBine; the depth limit added in 1.2.2 now covers that path too.
Thanks to @dylanwu, whose detailed reports led to the three new features in this release.
Downloads
- Windows: -setup.exe (requires WebView2, included in Windows 10/11).
- macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
- Linux: .AppImage (portable), .deb or .rpm.
- Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
- Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.
Version 0.1.4 and later receive it through the automatic update.
- macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
- Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
- Each engine's driver (except SQLite) is downloaded the first time you connect.

DBine v1.2.2 installers.
Fixes
- Security: critical vulnerability in ZIP handling fixed. On October 28 a critical vulnerability was published in zip, the library DBine uses to read and write ZIP-based files: Excel imports and exports, and the download of the AI assistant's built-in model (GHSA-m665-v7pm-7grj). A specially crafted archive could show different contents depending on how it was read. This version moves every part of DBine to the fixed library; it ships a few hours after 1.2.1 for that reason alone, so updating is recommended.
- Trino and Presto, security: a column type nested deeper than any real schema (as a malicious server could send) is shown as it came instead of being parsed level by level, so it can no longer crash DBine.
Downloads
- Windows: -setup.exe (requires WebView2, included in Windows 10/11).
- macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
- Linux: .AppImage (portable), .deb or .rpm.
- Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
- Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.
Version 0.1.4 and later receive it through the automatic update.
- macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
- Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
- Each engine's driver (except SQLite) is downloaded the first time you connect.

DBine v1.2.1 installers.
Fixes
- Column completion follows the query you're writing: the editor offers only the columns of the tables, CTEs and subqueries the statement under the cursor reads, not those of other statements in the file. A column that two of those tables share is offered once per table, labeled with its alias and inserted qualified (c.customer_id), and a CTE's or a derived table's columns are offered in the query and after its alias.
- Field names in rows and structs: Trino and Presto ROW values, PostgreSQL composite types and Arrow Flight SQL structs show each field under its name, as JSON, also in nested rows, arrays of rows and maps whose values are rows ([{"customer_id":42,"items":[{"product_name":"demo-product","quantity":2}],"note":null}] instead of [[42,[["demo-product",2]],null]]). null, an empty string and an empty array stay distinct. ClickHouse named tuples keep their declared field order.
- Migrations with a SQL Server login without VIEW DEFINITION: when the source login could read the tables but not their definitions (common on Azure SQL), the migration script wrote CHECK (), which failed with "Incorrect syntax near ')'", and dropped column defaults without saying so. Now those CHECKs, defaults and computed expressions are left out of the script, and the preview and the run report list each one at the top, with the reason and the GRANT VIEW DEFINITION that lets DBine read them. Generated scripts and schema sync say it too, and a sync no longer drops a CHECK on the target because the source couldn't read its own. No engine writes an empty CHECK or DEFAULT anymore.
Downloads
- Windows: -setup.exe (requires WebView2, included in Windows 10/11).
- macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
- Linux: .AppImage (portable), .deb or .rpm.
- Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
- Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.
Version 0.1.4 and later receive it through the automatic update.
- macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
- Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
- Each engine's driver (except SQLite) is downloaded the first time you connect.

DBine v1.2.0 installers.
New
- Ukrainian and Polish: DBine and the phone app are available in Українська and Polski, including server messages and the AI assistant. Pick the language in Settings › General › Language, or DBine follows the system's.
- Indonesian: DBine and the phone app are available in Bahasa Indonesia, including server messages and the AI assistant. Pick the language in Settings › General › Language, or DBine follows the system's.
Improvements
- Completion across databases: on engines where one query can read another database of the same connection (ClickHouse, MySQL and MariaDB, SQL Server, Snowflake, Databricks, Trino, BigQuery, Oracle and more), the editor offers the other databases' names, their tables after other_db. and their columns after a table or an alias, also in joins between databases. Each database's tables are read the first time you type its name with a dot.
- DuckDB engine updated to 2.0.0: local DuckDB files and DataFrame SQL in notebooks now run on DuckDB 2.0.0 (up from 1.5.5). New database files use DuckDB 2.0's storage format, which older DuckDB versions cannot open; existing files continue to open and remain readable by the version that created them.
- Connection encryption for SQL Server, PostgreSQL and MySQL: the connection form shows each engine's own TLS options, with the names its tools use: Encrypt (Optional, Mandatory, Strict), TrustServerCertificate, ServerCertificate and HostNameInCertificate for SQL Server and Azure SQL; sslmode and sslrootcert for PostgreSQL and its family; ssl-mode and ssl-ca for MySQL and its family; ssl, ssl-verify-server-cert and ssl-ca for MariaDB and OceanBase. New connections are encrypted and check the server's certificate, and each setting can be turned off. Saved connections keep working exactly as before. Through an SSH tunnel the certificate is checked against the real server's name, and a certificate failure says which option to change. MySQL's PREFERRED falls back to an unencrypted connection only when the server doesn't offer TLS, before any password is sent.
- Connection encryption for InfluxDB, IoTDB, ksqlDB, TDengine, Phoenix, Arrow Flight SQL and the cloud services: the connection form shows each engine's own TLS options: ssl and unsafeSsl for InfluxDB 1, the URL scheme with skip-verify (InfluxDB 2) or tls-no-verify and tls-ca (InfluxDB 3), use_ssl and ca_certs for IoTDB and TimechoDB, useTls, verifyHost and trustStore for ksqlDB, useSSL for TDengine, the URL scheme, hostname_verification and truststore for Phoenix and Avatica, useEncryption and tlsRootCerts for Flight SQL, and DisableServerCertificateValidation for the Cosmos DB emulator; where an engine's tools have no name for skipping the check or for the CA file, curl's insecure and cacert. New connections are encrypted and check the server's certificate, and each setting can be turned off. Saved connections keep working exactly as before. Through an SSH tunnel the certificate is checked against the real server's name, and a certificate failure or a server without TLS is reported as such. BigQuery, Spanner, DynamoDB, Athena, Snowflake, Databricks and libSQL always use verified HTTPS, except an emulator endpoint typed as http://.
- Keyboard and screen readers: a visible focus ring shows where the keyboard is; list rows, cards, sortable headers and collapsible sections can be reached with Tab and used with Enter or Space; context menus work with the arrow keys; icon-only buttons have names a screen reader reads; the result of a query (finished, or failed with its error) is announced; animations stop when the system asks for reduced motion; and secondary text has more contrast in both themes.
Fixes
- "Don't verify" now pins the server's certificate, security: a connection that doesn't verify the server's certificate (sslmode=require, insecure, bolt+ssc, validate=false…) accepts the certificate the server presents the first time and from then on only that one, on PostgreSQL and its family, t

DBine v1.1.0 installers.
New
- Cloud sync status at a glance: the status bar shows Synced with a green dot, Pending in amber while a change waits to upload, and red on an error; hover for the last sync time, click for the sync settings.
- Copy connection string: right-click a connection (or use the button in its form) and pick Copy connection string… to get it as a URI, ADO.NET, JDBC, SQLAlchemy, ODBC, libpq, Node.js or Go string, whichever apply to its engine, for any database, with its TLS and sign-in settings. The password is left out (a ${DB_PASSWORD} placeholder) unless you turn on Include password; then it's fetched when you copy, and cleared from the clipboard a minute later if it's still there.
- Send a message step in scheduled tasks: post how the run went to Microsoft Teams, Slack, Telegram or ntfy, with the task's variables ({results} lists what each step did), Only if… like the email step, and a Test button. The webhook URL and tokens are kept in the keychain, never in the task, and messages go only over HTTPS to the service's own servers.
Fixes
- SSH tunnels, security: the SSH library is updated to fix two advisories (CVE-2026-111061, a denial of service through the SSH agent, and CVE-2026-111062).
- RSA keys, security: signing in to SSH with an RSA key, and opening Zoho Vault's and Bitwarden's organization keys, now run in AWS-LC in constant time, so the timing leak in the RSA library (RUSTSEC-2023-0071, "Marvin") no longer applies. RSA keys sign with SHA-256 or SHA-512; a server that only accepts SHA-1 (ssh-rsa) asks for an Ed25519 or ECDSA key, or the SSH agent.
- TLS, security: the TLS library and its certificate checks are updated in DBine and in 33 drivers (RUSTSEC-2026-0346 to 0349 and 0381 to 0383), so certificates from distrusted authorities are refused. The updated drivers download by themselves.
- Built-in AI engine: unpacking the engine keeps only the files' read, write and run permissions.
- Scheduled tasks, security: {results} and {alerts} only fill in the text of mails and messages. A script's SQL, a file or folder name, an address or an attachment path no longer takes them, so a database error echoing crafted data can't turn into SQL or a path.
- Scheduled task messages: {results} and {alerts} in a message or a mail come in DBine's interface language instead of always in Spanish, also when the task runs with DBine closed.
- Notebooks, big DataFrame SQL results: Advanced export… › All writes the whole result, not just the rows shown. The cell's SQL runs again in DuckDB over the DataFrames its last run read, without reading files or querying the sources again. Its charts start computed over the whole result, and you can switch that off. When a result is cut, the grid also says that sorting and Copy all only cover the loaded rows.
Downloads
- Windows: -setup.exe (requires WebView2, included in Windows 10/11).
- macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
- Linux: .AppImage (portable), .deb or .rpm.
- Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
- Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.
Version 0.1.4 and later receive it through the automatic update.
- macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
- Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
- Each engine's driver (except SQLite) is downloaded the first time you connect.