Features
- feat(library): Best No-Code and Low-Code AI Agent Builders in 2026 (#7003)
- feat(bitbucket): add repository webhook triggers (#6934)
- feat(status): surface major service incidents (#6987)
- feat(tables): return only selected columns from the Table block query (#6954)
- feat(custom-blocks): let a publisher decide whether their block's runs reach consumer traces (#6950)
- feat(secrets): show where a secret is referenced, beside its usage log (#6947)
- feat(workflows): generate short machine-nature names (#6906)
- feat(cli): add chat command (#6937)
- feat(library): Best AI Agent Platforms for Connecting Your Existing Tools (#6946)
Improvements
- improvement(perf): eight verified cuts to workspace cold-load JavaScript (#6996)
- improvement(secrets): gate Copilot code mounting at use level (#7004)
- improvement(navigation): eliminate hidden workspace requests (#6979)
- improvement(settings): reduce navigation and section load latency (#6992)
- improvement(menus): band by what the action acts on, not by verb (#6994)
- improvement(files): improve file sharing UI (#6983)
- improvement(ship): skip confirmation prompts (#6977)
- improvement(menus): one separator per menu, before the destructive action (#6974)
- improvement(perf): cut server-only and unused code out of the workspace client bundles (#6975)
- improvement(settings): make workspace settings navigation feel instant (#6964)
- improvement(files): match the preview toolbar's height to the tab strip above it (#6973)
- improvement(menus): tighten dropdown spacing and cap the @ mention list (#6972)
- improvement(tabs): fade the tab strip with a mask, and shrink the tab chip (#6971)
- improvement(tables): backfill default views for existing tables (#6899)
- improvement(tabs): give the resource tabs a quieter floating look (#6960)
- improvement(mship): preview recent runs in @ mention, with the logs icon (#6951)
- improvement(tabs): port resource tabs onto the shared TabStrip (#6953)
Bug Fixes
- fix(security): isolate rejected OTP attempts (#7008)
- fix(inbox): stop an unattributed sender inheriting owner write authority (#7006)
- fix(copilot): enforce the chat's delegated workspace scope across model-steerable server tools (#6995)
- fix(desktop): stop the OAuth connect callback from failing on a bare-path callback URL (#7005)
- fix(security): harden public auth rate limits (#6997)
- Fix knowledge connector sync follow-up (#6927)
- fix(deployments): stop superseded activations from dead-lettering (#6522)
- fix(media): stop the ffmpeg output format from choosing its own path (#7001)
- fix(chat): copy workspace resources as portable links (#6956)
- fix(chat): copy orchestrator responses as markdown (#6903)
- fix(charts): confine untrusted chart options to canvas render paths (#6998)
- fix(terminal): keep running-command tooltips concise (#6991)
- fix(workflows): scope the canonical sub-block index to the active surface (#6990)
- fix(media): bound the ffmpeg tool's child processes, inputs and scale targets (#6989)
- fix(analytics): stop dropping client events captured before PostHog init (#6988)
- fix(resources): make context menus selection-aware (#6980)
- fix(csv): neutralize formula-leading exports (#6993)
- fix(files): read a file nobody vouched for, as an untracked one already is (#6986)
- fix(uploads): require an explicit byte ceiling on workspace-file downloads (#6985)
- fix(deploy): resolve subblock values to their configuration on both sides of change detection (#6984)
- fix(provenance): clear the rows that went unknown after the first repair (#6982)
- fix(provenance): stop requiring a projection of roots no model sees (#6981)
- fix(utils): prevent randomInt power-of-two hangs (#6955)
- fix(auth): recover from SSO provider lookup errors (#6966)
- fix(kb): let the server say a connector sync is queued (#6968)
- fix(tables): omit ignored column diagnostics (#6970)
- fix(knowledge): prevent processing status overlap (#6958)
- fix(invitations): break outbox import cycle (#6969)
- fix(tabs): restore the resource header's spacing and clear the scroll fades (#6967)
- fix(tables): disable dispatcher task retries (#6963)
- fix(selectors): respect trigger credentials in trigger mode (#6952)
- fix(workflows): deduplicate generated workflow names (#6935)
- fix(knowledge,tables): recover abandoned dispatches, bound the sweep and the workbook preview (#6945)
- fix(delivery): stable provider idempotency tokens, and correctness fixes around them (#6943)
- fix(security): stop redirects replaying request bodies and leaking credentials (#6941)
- fix(billing): separate Enterprise reporting periods from Stripe terms (#6942)
- fix(setup): bump sim-setup to 1.0.1 (#6944)
Contributors
Contributors
icecrasher321, TheodoreSpeaks, and 4 other contributors