v1.865.0

1.865.0 (2026-11-09)

Features

• explain row filter update rewrites in the postgres trigger editor (#12033) (570ead4)
• let dedicated_workers take folder patterns like ws:f/dw/* (#12268) (1f92c4f)
• let integration triggers use any connection of their type (#11968) (6f04292)
• optional Vault AppRole secret_id setting, env var as fallback (#12276) (e4671f7)
• reload dedicated workers in place and restart them one at a time (#12208) (04230c2)

Bug Fixes

• give build-and-run MCP tokens made in the UI the session toolset (#12295) (d925b22)
• mask secrets in the instance settings review changes diff (#12287) (5419d36)
• mint an RDS IAM token for DuckDB postgres attaches (#12260) (e6183f5)
• move azure triggers when a script or flow is renamed (#12297) (8364402)
• python: reject incomplete S3 URI matches (#12290) (098da3b)
• retry every trigger's connection in the shared listener loop (#12180) (7127cb7)
• revoke MCP OAuth grants when their token or user goes away (#12282) (0c87c65)
• show native trigger pages in the sidebar on CE (#12294) (d97df58)
• show resource properties missing from the resource type schema (#12265) (2a4724d)
• store trigger targets parsed so rename, list and count see them (#12296) (ca24409)
• warn instead of error on isolation probe failure when not requested (#12288) (e8034a1)