1.78.0

1.78.0 (2026-10-23)

What's Changed

Features

• feat(auth): OHE-3575 background jobs read OAuth v2 git tokens by @aivong-openhands in #919
• feat(auth): OHE-3575 map webhook senders to OAuth v2-linked users by @aivong-openhands in #920
• feat(auth): OHE-3575 start GitLab repo sync after OAuth v2 linking by @aivong-openhands in #921
• feat(llm-settings): add domain-gated free-model UI to org-defaults model selector by @juanmichelini in #535
• feat: restore admin user lifecycle API by @neubig in #665
• feat(super-admin): add help text for auth provider toggles by @tofarr in #977
• feat: add enabled flag to auth providers (OHE-3722) by @tofarr in #978

Bug Fixes

• fix: Add SUPER_ADMIN_EMAILS escape hatch for super-admin role grants by @tofarr in #930
• fix(azure-devops): tell the agent its provider, host and organizations by @ak684 in #958
• fix: report failed repository clones and set a default git identity by @ak684 in #959
• fix: fix conversation telemetry identity stitching by @malhotra5 in #937
• fix(mcp): resolve secret references in the MCP connection test by @ak684 in #967
• fix(auth): report the configured GitLab host for IdP-sourced tokens by @ak684 in #973
• fix(app-conversation): title conversations with the model they run on by @ak684 in #976
• fix(security): distrust compromised eMudhra/emSign CAs (certifi/pip/uv) by @neubig in #980
• fix(auth): log user out to retry when IdP broker tokens are unusable by @neubig in #840
• fix(app-conversation): prefer sandboxes on the advertised image when grouping by @hieptl in #966
• fix(frontend): keep the app starting when the mock service worker cannot register by @FraterCCCLXIII in #964
• fix(frontend): filter the first-install LLM provider picker as you type (OHE-3730) by @hieptl in #983
• fix(frontend): explain an empty Integrations page and how to add a provider (OHE-3731) by @hieptl in #984
• fix(integrations): load org and user skills for integration-started conversations by @ak684 in #970
• fix(mcp): resolve secret references in the MCP tool-call route by @ak684 in #972
• fix(sandbox): resolve an existing sandbox's spec with a default fallback by @hieptl in #965
• fix(super-admin): show linked user name in auth-provider user links by @tofarr in #974

Maintenance

• test: reduce unit-test infra overhead (pool, scheduling, capture) by @tofarr in #960
• chore(compose): use automation 1.24.0 and drop the /data workaround by @jlav in #969
• chore: bump SDK to 1.58.0 by @ak684 in #971

Full Changelog: 1.77.0...1.78.0

---

This PR was generated with Release Please. See documentation.