Railway introduced centralized workspace token management in settings, audit logging for token operations, password rotation across HA database clusters, and request tracing in the CLI.
Railway now automatically applies security patches for known vulnerabilities and redeploys affected services. Additionally, services are automatically redeployed when database or bucket credentials are rotated.
Railway is responding to a security incident involving unauthorized access to internal systems and recommends that customers rotate sensitive credentials.
Your project has a lot going on. Your activity feed doesn't need to tell you all of it at once. This week, we're helping you find relevant activity, smoothly move from Config as Code to infrastructure as code, and inspect and trigger cron jobs from your terminal. Let's get into it!
We just finished planning last week and the features will keep coming until morale improves. We hear that many of you want to bring more and more of your coding subscriptions into Railway and we have just that and more. Anyway, hold your laughter, these features are no joke.
This week, we’re helping your databases weather surprises and your webhooks arrive with everything they need. MongoDB high availability arrives in Priority Boarding, project webhooks gain custom headers, and MySQL point-in-time recovery graduates to general availability. Let’s get into it!
Your next project can start with an SSH command. This week, we're opening up free VMs with no account required, introducing tracing in Priority Boarding, and bringing OpenCode to Cloud Agents. Let's get into it!
Your agents have work to do. We've got computers for them. This week, Railway Sandboxes are generally available. You can also now use your existing ChatGPT subscription to power Railway Agent. We're also bringing point-in-time recovery to MySQL. Both features are available to try in [Priority Boarding](https://railway.com/account/feature-flags).
Olá, São Paulo! 🇧🇷 We've added a [Railway CDN](https://docs.railway.com/networking/cdn) region in São Paulo, Brazil, bringing cached content closer to your users in South America.
If your first question about a feature is “what’s the CLI command?”, we’ve got a few for you. Manage Postgres HA, restore to a point in time, and set up connection pooling from your terminal. Bulk-edit your variables from the CLI, then review the diff before applying changes.
The best infrastructure keeps the important work moving without constantly asking for your attention. This week, the Railway plugin lands in [Grok Bot](https://x.ai/bot), giving bots an authenticated way to deploy, configure, monitor, and troubleshoot Railway infrastructure.
Good morning, afternoon, and evening, and tomorrow! We aim to please here at the Railway corporation and we hope that this Changelog will make you happier than baseline. A macro note, we hear you on the annoyance about builds. We've been scaling that Infra up with demand, a lot of the new announcements we have here use pure VMs for your workloads.
The best infrastructure changes are reviewable, reversible, and visible to the right people. This week, Access Groups bring project-level controls to Enterprise workspaces, templates gain Agent-assisted editing with staged review and rollback, and Railway Agent Connectors bring external tools into the conversation. Let's get into it!
A burrito in the U.S. is $20, but Railway still starts at $5. That burrito? The same, made expensive. Railway? Continuously evolving. Adding features. Moisturized. Speaking of moisturized, these new features in this very Changelog help you stay that way. This set of features are focused on how you can work and relax, all at the same time.
ChatGPT learns to drive a train this week: the official Railway plugin is live, so you can deploy and operate your projects from a chat window. We're also sharing an early preview of [dev.new](http://dev.new), a new way to go from prompt to production on Railway. And the Observability dashboard picks up six new panels, synced cursors, and drag-to-zoom.
They say it's always DNS. This week it actually is: DNS logs land in the dashboard, so you can watch every lookup your services make. The CLI also picks up `railway api`, an escape hatch for running any Railway API operation from your terminal. And one more thing: this is our 300th changelog!
Your agents multiply, and Railway follows them around. The official Railway plugin lands in the Grok Build plugin marketplace this week, so xAI's coding agent can deploy and operate your projects out of the box. The CLI also picks up CDN cache controls with the new `railway cdn` command. Let's get into it!
Merge on Friday, launch on Monday. Feature flags land on Railway this week, so you can ship code dark and flip it on when you're ready, from the dashboard, the CLI, or the SDK. The Railway Agent also joins you in Slack and Discord, and the CLI learns to estimate your bill and set usage limits. Let's get into it!
Take a deep breath, drop your shoulders, and unclench your jaw. We launched a new campaign to help developers like you find your peace: [The peaceful way to ship software](https://railway.com/peace). The Railway CLI also picked up outbound networking controls, with new commands for static outbound IPs and outbound IPv6. Let's get into it!
`ssh railway.new` is all you need. Run it and Railway signs you up, spins up a sandbox, and connects you to the Railway Agent, with nothing to install. Every Sandbox now ships with six coding agents preinstalled, and `railway private-network` brings private networking to the CLI. Let's get into it!
Your Railway workspace now fits in your pocket. The [Railway mobile app is now available on the iOS App Store](https://apps.apple.com/us/app/railway-com/id6755712493) (Android beta is coming soon), PgBouncer is available in Priority Boarding with one-click setup for Postgres, and `railway templates` can manage the full template lifecycle from the CLI.
This week is all about sandboxes. Docker now ships preinstalled in every sandbox, the TypeScript SDK gets a file API for reading and writing the sandbox filesystem, and the CLI picks up sandbox checkpoints and port forwarding.
This week, Sandboxes are available in Priority Boarding from the dashboard and CLI, and Infrastructure as Code is available experimentally in CLI 5.2.0. Both features use the [Railway TypeScript SDK](https://github.com/railwayapp/railway-ts-sdk) (yes, we released a TypeScript SDK too).
This week, working with files and shells on Railway gets a lot more powerful. Volumes get full file management from the CLI with an interactive TUI browser for navigating, editing, and transferring files over SFTP.
We gave the Railway Agent a computer. The chat agent now gets a sandbox VM of its own, so it can clone a repo, run commands, edit files, and open a pull request without you copy-pasting code into the conversation. Static IP egress now supports high-availability with traffic distributed across three gateways and automatic failover.
This week, the Railway iOS app [landed in TestFlight](https://railway.com/mobile)! You can spin up services, get notified if anything goes wrong, read logs, view metrics, and deploy fixes, all from your pocket. No more keeping a laptop within arm's reach every weekend.
If your agent can deploy services, set variables, and read logs, it should also be able to discover templates and scale replicas on its own. This week, one command sets up your CLI, agent skills, and MCP server in one shot. Template search now works the same way everywhere: dashboard, canvas, command palette, and CLI all share one backend.
One `curl` shouldn't be enough to wipe a production database, [especially when an agent is the one firing it off](https://blog.railway.com/p/your-ai-wants-to-nuke-your-database). This week, volume deletions over the API soft-delete for 48 hours, matching the safety net the dashboard already had.
If an AI can tell you why your deploy is red, it should be able to make it green. This week, the Railway Agent is live for every workspace. It can create services, connect databases, walk you through a red deploy, and open a pull request with the fix, all from a chat panel in the Railway dashboard.
If your agent can write the code, it should be able to ship it too. So this week, we laid three new tracks for it. The Railway Remote MCP Server is now live at [`mcp.railway.com`](https://mcp.railway.com), ready for any MCP-compatible editor to plug into over OAuth.
This week, the fully remote Railway team descended on Kyoto, Japan for our biannual retreat, a week dedicated to planning, in-person collaboration, and exploring one of the most beautiful cities in the world.
The best build is the one that never runs. This week, Railway can detect when identical source code has already been built and skip the build entirely, deploying the cached image in seconds.
Your users in Tokyo shouldn't wait for bytes to travel from us-west. Starting this week, they don't have to. We're shipping a built-in CDN you can enable in one click, a partnership with Stripe that lets agents provision Railway in one command, and a one-click path to high-availability Postgres for everyone. Let's get into it!
*What do we want?* A more sensible dashboard layout! *When do we want it?* Now! *Ok! I mean did you even read the changelog? It’s already available.* How can I have already read the changelog if I’m *currently* reading the changelog? *Oh right. Well, yes. Let’s get into it!* Let’s go!
Railway gives you [one-click Postgres](https://dev.new/postgres) and you can have a database running in seconds. But a single instance doesn't protect you when things go wrong. No replicas, no failover, no redundancy.
*Classical music overture* **Noel Fielding:** It’s UI week at Railway. Where all of the Railway engineers work on delightful experiences for their customers. Cuts to Engineer JR **JR:** “C’mon c’mon c’mon, CI green, CI green, CI green” Cuts to Designer (now Engineer) Jitachi **Jitachi:** “I shipped a PR!” *Cuts to Changelog title card* We have a great week...
AI agents keep getting better at writing code. The tricky part is everything that comes after: deploying, debugging, and keeping things running. This week, we're making that easier on both sides. Smart Diagnosis brings an AI agent to your failed deployments, reading through logs and config to tell you what broke.
We've partnered with [Fastly](https://www.fastly.com/) to bring DDoS protection to every public service on Railway. All traffic routes through their global network (100+ points of presence) where it's filtered before it reaches your infrastructure. Nothing to configure, nothing to enable. It's on by default.
Tomorrow's Valentine's Day. Our gift to you? You can now chat with your canvas. Ask your Railway environment what's running, debug failing deploys, and stage changes through a new AI agent that understands your infrastructure. We're also shipping Postgres metrics and network flows to GA after battle-testing them in Priority Boarding. Let's get into it!
[Back](https://x.com/claudeai/status/2019467372609040752)-to-[back](https://x.com/OpenAI/status/2019474152743223477) model drops from two frontier AI labs, on the same day this week. And it wasn't just about the releases. [One of them even took shots at the other in a series of ads](https://x.com/avstorm/status/2019062739402920033). What a time to be alive.
In case you missed it, an [open-source personal AI assistant](http://openclaw.ai/) went viral this week. It runs on your own machine and you can connect it to WhatsApp, Telegram, Discord, or whatever chat app you already use.
We raised $100M! [Railway just closed a Series B](https://blog.railway.com/p/series-b), and we couldn't be more excited about what's ahead. We'll get into what that means below. Of course, just because we’re doing a big announcement, doesn’t mean that the shipping stops.
Last week we wrapped our planning for Q1 2026, so we're officially back to our regularly scheduled programming. This week: a major security upgrade for Pro workspaces, a structural overhaul of the CLI, Object Storage now available in Singapore, smoother database workflows in the dashboard, and Editable Canvas Arrows graduating to GA. Let's get into it!
The new year's off to a strong start. This was our planning week, but we couldn't help ourselves and a lot still shipped. Thank you to everyone who dropped ideas in our [what should we ship in 2026 thread](https://station.railway.com/feedback/feedback-what-should-we-ship-in-2026-9a878de8). The suggestions keep rolling in, and we're reading every single one.
Welcome to 2026! 🎉 The Railway team is slowly emerging from our winter break, coffee in hand, ready to tackle a brand new year. Hope you got some rest, we certainly did. Next week, we're kicking off our 2026 planning, and we want *you* to help shape what we build.
Happy holidays and welcome to the final changelog of 2025! 🎉 The Railway team is winding down for a well-deserved winter break. We've had an incredible year of shipping , from Railway Metal to audit logs, magic config, serverless, and so much more. But before we sign off for the year, we wanted to leave you with a few things.
It's the last changelog of 2025! The Railway team is heading off on a well-deserved winter break, and we'll be back early next year with our regularly scheduled programming. Before we sign off, we've got one more round of updates to share.
This week we're shipping features on both ends of the spectrum: one that helps you see everything that's happening across your workspace, and another that brings Railway into your local development workflow.
December is here and so is our final stretch of shipping before the holidays. While everyone else is debating whether it's too early to play Christmas music (it's not), we've been heads-down making Railway smarter about telling you what's actually going on with your services. This week is all about visibility.
Happy Thanksgiving to those celebrating! 🦃 We've got something to be thankful for , Buckets are now generally available! No more reaching for third-party storage solutions; Railway's got you covered.
This week is all about staying ahead of issues: Notifications graduate from Priority Boarding to General Availability, giving everyone a real-time view of what’s happening across projects and environments. There’s also a new way for our community Conductors to triage questions faster.
Between year-end shipping sprints and Black Friday load tests, it’s peak alert fatigue season. This week we’re shipping better webhooks so you only get pinged when it matters, smarter service settings that catch misconfigurations before they bite you, and [open office hours](https://cal.com/team/railway/railway-office-hours) with the Railway team for folks...
It’s November, and while your inbox is starting to be quieter, the Railway dashboard just got a lot more helpful. This week we're bringing dashboard notifications to Priority Boarding so the important stuff finds you right where you're working , no more tab-hopping to figure out what's happening with your deploys.
Happy Halloween! 🎃 While everyone else is dressing up in costumes and pretending to be something they're not, we're helping your team members prove they are *exactly* who they say they are , with enterprise Single Sign-On (SSO).
Last week, one of our newest additions was repo-aware settings, giving you autocomplete for your Railway config paths. This week? We're doubling down on the zero-config magic. Railway now automatically detects the environment variables your code needs and surfaces them right when you're configuring your service.
Last week, [we merged a PR from a hot air balloon in Mexico City](https://railway.com/changelog/2025-10-10-retreat-v8) (yes, really). This week, we're back on the ground and back to shipping.
# Railway x Mexico City  [Art by **gerazay**](https://www.instagram.com/gerazay/) ¡Buenos Dias!
| Release-notes page | Site | Feed |
|---|---|---|
| Changelog railway.com | railway.com | None |
| Deploy & Host Chirp Changelog railway.com | railway.com | None |
| Shipping a Changelog Every Friday for More Than 4 Years blog.railway.com | blog.railway.com | None |
Releasesby Glyph