v1.831.0

1.831.0 (2026-10-13)

Features

• add python 3.14 and 3.15 to the supported instance versions (#11654) (74c9b0c)
• add the viewer's roles to unnamed data table connections (#11709) (a298ed3)
• audit declarative instance config writes (#11684) (afbbc0b)
• cli: declare app sandbox and frontend api scopes in app yaml (#11703) (26afeec)
• data table migration tools in ai sessions (#11723) (3d74f6e)
• encrypt workspace secrets with AES-256-GCM (#11678) (4942149)
• external signer for OIDC tokens and a log line per mint (#11614) (157183a)
• give app builder operators app tools in AI sessions (#11716) (133613c)
• redesign the s3 explorer and show data files as tables (#11642) (9fa9b77)
• support array arguments in snowflake scripts (#11702) (1451988)

Bug Fixes

• bump git sync hub scripts to cli 1.830.0 (#11681) (7bbe032)
• end other sessions when a user changes their password (#11710) (add042e)
• fill app ctx inputs from the viewer's session, not the request (#11698) (7627c1b)
• groups: recompute member roles when an instance group role is cleared (#11708) (4be67fe)
• hide the sidebar triggers header when no trigger entry is visible (#11715) (e443eb3)
• keep a custom error handler's slack argument on save (#11696) (c6692ac)
• keep ai agent schema property order stable across jobs (#11687) (a8e2f1f)
• keep preserve_step_tags on saved branch and loop flow nodes (#11660) (dedd775)
• keep the app editor's parent_version out of deployed apps (#11719) (2c6de9d)
• keep the resource type index whole when a refresh fails (#11727) (71caac7)
• keep the resource type search current between daily fills, and serve it without an index (#11712) (a365359)
• load the s3 explorer table lazily to keep monaco out of the app shell (#11701) (a92b29d)
• parse python 3.12-3.15 syntax in the python parsers (#11675) (aae5f2e)
• persist hidden languages in edit default scripts drawer (#11693) (aeeeb04)
• pin the floating sidebar and let page clicks through it (#11711) (ce45ab5)
• resolve $var: references in mcp resource headers (#11679) (478eef7)
• resolve a new item's chosen name in session preview tools (#11688) (cd502a5)
• resolve variables in the url and headers of an mcp resource (#11680) (4bc2394)
• run a workflow-as-code task called from inside a task in place (#11699) (72d1092)
• stop marking run form fields as disabled for assistive tech (#11714) (c7df009)
• stop session dom tools reading a raw app preview that is not current (#11700) (05c7b68)
• surface oauth provider errors returned with http 200 (#11713) (d8ac4f5)

Performance Improvements

• run shellcheck directly from the lsp launcher (#11707) (8cdb42a)