H
HeyForm
MARKETING
Velocity0.0
Open-source conversational form builder
HeyForm's v3 has been in release candidates for months, now moving mostly on community fixes.
formsopen-sourcelocalizationsecurityrelease-candidate
◆Current state
HeyForm has been on v3.0.0 release candidates since at least March 2026, and the recent cuts are small: Italian and Brazilian Portuguese localization, an IPv6 bypass fix in the outbound SSRF guard, and plain-text rendering of group page titles. Most recent changes come from first-time contributors.
◆Where it's heading
The v3 line is in a long stabilization phase with localization and security patches rather than new form features. Releases have slowed to roughly one every three to six weeks, and nothing has shipped since mid-July.
◆Prediction
The entries do not show what is blocking a v3.0.0 final; the next release is more likely another RC with community fixes than a stable cut.
◆Recent moves
- 3mo ago
v3 RC10 renders group page titles as plain text
RC10 renders group page titles as plain text, a one-line contributor fix that continues the slow stabilization of v3.
View source ↗ - 3mo ago
v3 RC9 blocks IPv6 encoding bypass in SSRF guard
RC9 closes a gap in the server's outbound SSRF guard where alternate IPv6 encodings could slip past it. It is the only security change in the recent v3 cuts and matters for anyone self-hosting webhooks or integrations.
View source ↗ - 4mo ago
v3 RC8 adds Brazilian Portuguese app and email localization
RC8 adds Brazilian Portuguese to the web app and to transactional emails, extending the localization push that RC7 started with Italian.
View source ↗ - 5mo ago
v3 RC7 adds Italian language support
RC7 adds Italian language support, the first of two consecutive community localization releases on the v3 line.
View source ↗ - 7mo ago
v3 RC6 bug fixes and smoother form transitions
RC6 lists only unspecified bug fixes and smoother form transitions, so there is little to tell users about what changed.
View source ↗