v1.852.0

1.852.0 (2026-10-28)

Features

• accept the google_service_account resource type alongside gcp_service_account (#12070) (e480501)
• add ai review to drafts, draft diffs and session review (#12063) (77c0a26)
• gate guest apps by their mode and the protection rule alone (#12061) (d3869fc)

Bug Fixes

• check session admin rights in the session's workspace (#12071) (09ddf1e)
• cli: flow preview hub steps and windmill paths, trigger templates (#12075) (65f3c5e)
• give GLM models a 32K output budget, including through Custom AI (#12068) (80a49f9)
• honor a step's timeout when it is the only step of a loop (#12058) (499c756)
• keep a deleted session's data in its components until they unmount (#12062) (9c6c201)
• keep a new app's AI session unsaved until it is started (#12065) (f46b3a7)
• keep retry and branch settings intact when a flow is reserialized (#12077) (20def22)
• rebuild service log index without a hash dedupe that cannot spill (#12080) (26888e8)
• scope rename's group membership update to the user's workspace (#12043) (ad571c6)
• show not deployed yet for undeployed apps in session preview tabs (#12076) (bda59e6)
• show the server's error when user offboarding fails (#12069) (7765913)
• wait for access before opening a draft-only item from the picker (#12064) (bfd31df)