v2.41.0

Features

• Drift detection for Terraform workspaces. Turn on a schedule per workspace and Devhub runs a refresh-only check against your default branch, reporting exactly what changed outside Terraform. A new Drift detection page groups every workspace by standing — needs attention, checking now, in sync, not checked — and each workspace page gets drift tiles showing the current count, when it was last checked, and how many resources it manages. Drift runs never apply and never wait on approval; to fix drift, tick the affected resources and start a targeted plan that goes through the normal approval gate. Optional Slack notification posts only when drift is actually found, and drift settings are configurable through the Terraform provider.

Improvements

• Applying a plan now cancels every other pending plan in that workspace, on any branch, since they were all built against state the apply moves. A new plan on a branch no longer cancels a targeted plan someone scoped to a handful of resources.
• The resource inventory is now rebuilt from Terraform's own state after every apply, so it's exact rather than inferred — including after targeted applies. A failed apply automatically refreshes the inventory it may have left inconsistent.
• User pickers for approvals, dashboards, roles, workflows, and resource policies now only offer people who can actually sign in. Someone already named on a policy who has since been archived stays visible, marked "No longer active", so they can be removed.

Bug Fixes

• Workspace commands that override the image entrypoint (e.g. op run -- terraform) are now used when listing state, so those workspaces can read their inventory.
• Failed Kubernetes pods with no container status no longer crash log retrieval.
• A query that fails before it runs is recorded as failed history instead of lingering as a pending query.