Features

• feat(salesforce): add Tooling API schema tools (custom field/object) + metadata query (#5209)
• feat(file): workspace-scoped inline images + public-share cascade (#5203)
• feat(gitlab): add repository, code-review, and CI job tools + validation fixes (#5205)
• feat(secrets): ingest env secrets at container runtime instead of fanning into ECS taskdef (#5189)
• feat(gitlab): support self-managed GitLab host across tools, block, triggers, webhook, and connector (#5200)

Improvements

• refactor(realtime): type the socket event-handler boundary with @sim/realtime-protocol (#5208)
• improvement(sandbox): mount workspace files by presigned URL instead of buffering bytes (#5202)
• refactor(sse): consolidate client SSE readers behind a single typed primitive (#5195)
• refactor(stores): model execution and workflow-diff state as status enums (#5197)
• perf(workspace): server-prefetch home, knowledge, tables, and files list pages (#5196)
• improvement(mistral): update OCR pricing to OCR 4 rate ($4/1,000 pages) (#5193)
• improvement(pi): minor improvements to docs (#5192)

Bug Fixes

• fix(workspace): add granular error boundaries to 7 more workspace segments (#5207)
• fix(ssr): harden credential query-key factory + fetchers against the 'use client' stub bug (#5206)
• fix(tables): SSR crash from tableKeys in a 'use client' module + drop redundant flushChunks (#5204)

Contributors

• @TheodoreSpeaks
• @icecrasher321
• @waleedlatif1

View changes on GitHub

Features

• feat(file): include public share status in File read output (#5191)
• feat(file): add Manage Sharing operation to the File block (#5177)
• feat(pii): publish PII image to GHCR and add Presidio sidecar to Helm chart (#5188)
• feat(data-retention): workspace-level overrides for retention and PII (#5186)
• feat(billing): unify upgrade routing with reason context + storage/tables limit emails (#5171)
• feat(guardrails): PII redaction via Presidio sidecar (native VIN, per-rule language) (#5174)
• feat(pii): build & own combined PII (analyzer + anonymizer) image (#5176)
• feat(pi): add pi coding agent harness (#5178)
• feat(trigger): add trigger-eu-region flag to switch runs to eu-central-1 (#5173)
• feat(providers): add Sakana AI provider with Fugu models (#5169)

Improvements

• improvement(access-controls): ui/ux improvements (#5190)
• improvement(pi): prompting to ensure harness knows push is deterministic (#5180)
• refactor(frontend-arch): migrate server state to React Query, collapse duplicate workflow-state cache, granular error boundaries (#5168)

Bug Fixes

• fix(enrichment): stop PDL billing on no-match via required-field gating (#5184)
• fix(skills): fix skills icon showing up (#5187)
• fix(trigger): mark cpu-features external to fix deploy build (#5185)
• fix(pii): listen on 5001 to avoid app :3000 collision (awsvpc) (#5182)

Contributors

• @Sg312
• @TheodoreSpeaks
• @icecrasher321
• @waleedlatif1

View changes on GitHub

Features

• feat(url-state): adopt nuqs for type-safe URL query-param state (#5163)

Bug Fixes

• fix(state): align server/client state with best practices (query-key bugs, persist hygiene, useState) (#5166)
• fix(mcp): missing isDeployed in contract breaking settings, parameter overrides lack of clarity (#5164)

Contributors

• @icecrasher321
• @waleedlatif1

View changes on GitHub

Features

• feat(triggers): add GitLab, PagerDuty, and Zendesk webhook triggers (#5150)
• feat(connectors): add Google Meet knowledge base connector (#5149)
• feat(scheduled-tasks): expose Google Calendar-style recurrence options (#5146)
• feat(pii): gate data retention PII redaction behind feature flag (#5144)
• feat(files): inline rich markdown editor (#5133)
• feat(files): password, email-OTP, and SSO auth for public file shares (#5140)
• feat(vfs): add lazy vfs + remove dynamic fields for prompt caching hits (#5138)
• feat(enrichment): add enrichment details sidebar with cost + provider cascade (#5139)
• feat(logs): redact PII from workflow logs via configurable rules (#5136)
• feat(tables): raise per-plan table limits (free 5/50k, pro 100/100k, max 1k/500k) (#5135)
• feat(files): public share links for workspace files (#5130)
• feat(mship): add parallel subagents, improve streaming performance (#5122)

Improvements

• improvement(path): append, patch snapshot based streaming (#5161)
• improvement(scheduled-tasks): render prompt chips in task details and align weekday picker (#5159)
• improvement(rich-md-editor): stabilize bubble-menu plugin key + comment cleanup (#5158)
• improvement(rich-md-editor): streaming, performance, minor bugfixes (#5148)
• improvement(auth): make Microsoft emailVerified derivation total (#5157)
• improvement(access-controls): default workspace experience includes all members (#5153)
• improvement(access-controls): docs, terminology, fix delete bug (#5141)
• improvement(governance): derived access (#5134)
• improvement(workspaces): auto-add without invite if part of organization (#5132)
• improvement(block): table empty-state filter/sort builders + upsert conflict-column selection (#5123)
• improvement(misc): add more sportmonks tools, improvestreaming ux (#5129)

Bug Fixes

• fix(files): render embedded workspace images in markdown (#5162)
• fix(rich-md-editor): stop the editor flashing during an agent rewrite (#5160)
• fix(auth): close nOAuth account takeover via email-based OAuth linking (#5156)
• fix(uploads): close multipart storage-quota bypass via quota-exempt contexts (#5155)
• fix(file-decompress): enforce decompression caps on inflated stream, not declared zip size (#5154)
• fix(executor): stop HITL error edges from firing on successful resume (#5152)
• fix(files): only show Share in context menu for files, not folders (#5147)
• fix(mship): add folder rename tools and locked workflow status (#5126)

Contributors

• @Sg312
• @TheodoreSpeaks
• @icecrasher321
• @waleedlatif1

View changes on GitHub

Features

• feat(files): stream large CSV previews and add import-as-table (#5125)
• feat(connectors): use resource selectors for KB connector config (#5116)
• feat(google): Maps Pollen/Solar, Custom Search expansion, and live-API fixes across Google integrations (#5113)
• feat(search): actions, fuzzy matching, and highlighting in cmd+k palette (#5110)
• feat(integrations): hosted email-enrichment providers + cascade wiring (#5087)
• feat(file): add Compress and Decompress operations to the File block (#5100)

Improvements

• improvement(mothership): user_table speed parity — limit bounds, background import/delete/update jobs (#5012)
• improvement(knowledge): align connected-sources rows and move source chip left of filter/sort (#5117)
• improvement(tables): versioned CSV snapshot cache for table mounts + parallel multipart uploader (#5108)
• improvement(supabase): add Edge Functions tool; correct storage output shapes + harden tools (#5112)
• improvement(search): align cmd+k action icons + highlight with the design system (#5114)
• improvement(integrations): validate BigQuery/Forms/PageSpeed + regenerate integration docs (#5109)
• perf(db): logs-list index, drop redundant indexes, replica routing, hot-path write cleanups (#5105)
• improvement(models): add DeepSeek V4 + Mistral Medium 3.5, fix Codestral context window (#5103)
• improvement(execution, connectors): offload large function inputs, increase connector limits + better error propagation (#5089)
• perf(execution): parallelize preflight gates, cache deployed state, memoize Anthropic client (#5098)
• improvement(models): sort model dropdown by latest release date within each provider (#5099)

Bug Fixes

• fix(tables): enforce row limits against the current plan, not a frozen per-table cap (#5120)
• fix(resource): left-align table filter/sort when there's no search (#5128)
• fix(copilot): mount input tables with display-name CSV headers, not column IDs (#5121)
• fix(azure): replace Azure DevOps icon with Azure icon and remove AzureDevOpsIcon (#5118)
• fix(realtime): debounce the reconnecting toast to stop transient-blip flashes (#5111)
• fix(locks): enforce workflow/folder locks on the agent + close manual-UI create gaps (#5107)
• fix(sidebar): prefetch chats + workflows so cold loads don't flash skeletons (#5104)
• fix(input-format): field not editable race condition (#5102)

Other Changes

• chore(deps): remove unused dependencies and harden CI supply chain (#5119)

Contributors

• @TheodoreSpeaks
• @icecrasher321
• @waleedlatif1

View changes on GitHub

Features

• feat(providers): support large agent-block attachments via Files APIs and remote URLs (#5092)

Improvements

• improvement(providers): tighten Gemini and vLLM agent-attachment ceilings (#5095)

Bug Fixes

• fix(kb): canonicalize knowledge-base upload keys (#5096)
• fix(realtime): re-check workspace role on mutating socket events (#5080)
• fix(chat): autoscroll follow-ups — re-engage threshold + keep end-of-turn options in view (#5094)
• fix(chat): keep autoscroll pinned when the virtualizer re-scrolls during streaming (#5093)

Contributors

• @icecrasher321
• @waleedlatif1

View changes on GitHub

Features

• feat(scheduled-tasks): migrate jobs agent to scheduled tasks agent (#5090)
• feat(google-calendar): wire freebusy, align tools with API v3, add calendar + sharing tools (#5084)
• feat(feature-flags): migrate 3 env-flags to AppConfig-backed runtime flags (#5086)
• feat(grafana): validate integration and add folder, health, and contact-point tools (#5082)
• feat(feature-flags): AppConfig-backed gated feature flags (#5059)
• feat(ci): mship companion pr check (#5079)
• feat(db): zero-downtime migration safety lint + db-migrate skill (#5041)
• feat(auth): OAuth-only signup with Microsoft provider (#5073)
• feat(jsm): add Atlassian Assets (Insight/CMDB) tools for asset management (#5072)
• feat(copilot): server-side mothership tool/vfs/file metrics (#5071)

Improvements

• improvement(perm-groups): allow workspace filter for permission groups (#5070)
• refactor(connectors): split client metadata from server runtime (#5076)
• improvement(ci): fix companion regex (#5083)
• improvement(ci): rename companion tags to be more descriptive (#5081)
• refactor(table): split the 5.3k-line service.ts god-file into per-concern modules (#5069)

Bug Fixes

• fix(scheduled-tasks): fix scheduled tasks schema validation (#5091)
• fix(providers): allow HTTP for self-hosted vLLM endpoints (#5078)
• fix(providers): pin vLLM provider endpoint to validated IP (#5077)
• fix(webhooks): cap request body size on public webhook receivers (#5075)
• fix(uploads): authorize internal file URLs before download (#5049)
• fix(credential-sets): stop leaking open-invite tokens to all users (#5074)
• fix(providers): pin Azure OpenAI/Anthropic endpoints to validated IP (#5060)
• fix(execute): reject only cross-site session execution (CSRF guard) (#5068)

Other Changes

• chore(deps): bump js-yaml to 4.2.0 and nodemailer to 8.0.9 in apps/sim (#5067)

Contributors

• @Sg312
• @TheodoreSpeaks
• @icecrasher321
• @waleedlatif1

View changes on GitHub

Features

• feat(square): add Square integration with 34 commerce operations (#5053)
• feat(context-dev): add Context.dev web + brand data integration (#5048)

Improvements

• refactor(sim): consolidate record guards + pure utils into @sim/utils (#5061)
• improvement(mship): add enrichment tool, clean up dead tools (#5058)
• Revert "improvement(mship): clean up dead tools, add enrichments (#5056)" (#5056)
• improvement(mship): clean up dead tools, add enrichments (#5056)
• improvement(scheduled-tasks): move recurrence into modal body as a section (#5054)
• refactor(providers,executor): deepen three shallow modules (#5052)

Bug Fixes

• Revert "fix(execute): block cross-origin session-authenticated workflow runs (#5062)" (#5062)
• fix(access-control): exempt legacy blocks (#5063)
• fix(execute): block cross-origin session-authenticated workflow runs (#5062)
• fix(billing): deploy modal gates on workspace entitlement, not viewer plan (#5055)
• Revert "fix(realtime): re-validate socket role and evict revoked collaborator…" (#5051)
• fix(realtime): re-validate socket role and evict revoked collaborators (#5050)

Contributors

• @Sg312
• @TheodoreSpeaks
• @emir-karabeg
• @icecrasher321
• @waleedlatif1

View changes on GitHub

Features

• feat(scheduled-tasks): pause/resume, mutation toasts, submit guards, empty state (#5044)
• feat(scheduled-tasks): minute-granular calendar + user timezone preference (#5038)
• feat(billing): gate programmatic workflow execution behind a paid plan (#5036)
• feat(hubspot): add notes, emails, properties & associations tools (#5037)
• feat(scheduled-tasks): calendar views + persisted, runnable tasks (#4979)
• feat(blocks): add external-service url to block metadata (#5032)

Improvements

• improvement(settings): right-align timezone picker, order by popularity, drop tooltip (#5043)
• improvement(salesforce): align tools + block with Salesforce API and harden CRUD/analytics (#5040)
• improvement(perms): followup to org scoping of permission groups
• improvement(permissions): permission groups scoped to organization level (#5035)
• improvement(sim-trigger): change execution terminology to run (#5033)
• improvement(react-query): codebase-wide audit — server-state hooks, webhook coherence, resume migration (#5024)
• perf(mothership): virtualize chat transcript and isolate input from stream re-renders (#5019)

Bug Fixes

• fix(chat): fail closed when embed gate cannot resolve workspace (#5046)
• fix(mothership): streaming completion-flash fix + Tavily brand icon (#5030)
• fix(db-part-4): enforce consistent cross-resource lock ordering (#5027)
• fix(chat): escape attachment filename and validate file URL scheme to prevent XSS (#5028)
• fix(skills): reuse shared upload field in skill import modal; logo-only Quartr icon (#5026)
• fix(db): correct misleading error message when DATABASE_REPLICA_URL is malformed (#5023)
• fix(db-part-3): bound cross-request shared promises against pool wedge (#5021)

Contributors

• @TheodoreSpeaks
• @emir-karabeg
• @icecrasher321
• @salarkhannn
• @waleedlatif1

View changes on GitHub

Features

• feat(mailer): gate outbound email on AppConfig access-control ban list (#5018)
• feat(deployments): add v1 deployment endpoints and Deployments block (#5009)
• feat(integrations): add Documentation link to service-account connect modals (#5004)
• feat(integrations): add Vanta integration with compliance, evidence file, people, vendor, vulnerability, and risk tools (#4993)
• feat(tables): background jobs (delete/export/backfill on trigger.dev) + tenant-scoped query performance (#4915)

Improvements

• Revert "improvement(auth): layer disposable-email-domains into signup email validation (#5010)" (#5010)
• refactor(deployments): consolidate version reads, status mapping, and v1 auth prologue (#5013)
• improvement(auth): layer disposable-email-domains into signup email validation (#5010)
• improvement(organization): invite validation experience (#5008)
• improvement(files): fit-width previews and chip-chrome viewer controls (#5002)
• improvement(billing): self-heal null usage limits and debounce api-key last-used writes (#5000)
• improvement(emcn): show per-chip error tooltips on invalid email chips (#4998)
• improvement(tables): migrate inputs to emcn chip components and clean up tables feature (#4995)

Bug Fixes

• fix(mothership): tenant-check outputTable writes and route them through replaceTableRows (#5011)
• fix(tables): heartbeat export job before upload so the stale janitor can't kill a live finalize (#5017)
• fix(jira): add classic JSM scopes to close granular scope-set gap (#5005)
• fix(tables): header "T…" flicker — emcn barrel Table component shadowed the Table icon in loading fallbacks (#5007)
• fix(tables): scope optimistic stop-cancel to the active filtered view (#4996)
• fix(tables): align sidebar dividers, disclosure spacing, and header height with the editor and page header (#5003)
• fix(integrations): resolve OAuth connect UI by service id instead of display name (#5001)
• fix(tables): per-batch delete-job commits, real trigger.dev retries, post-index ANALYZE guard (#4997)

Other Changes

• chore(providers): remove claude-fable-5 model (#5020)

Contributors

• @TheodoreSpeaks
• @icecrasher321
• @waleedlatif1

View changes on GitHub