- Add case field kind to udf and drop col uuid / timestamp type (#2434)
- enforce RLS on dynamic workspace schemas (#2212)
- show tiers settings page regardless of multi-tenant mode (#2435)
- Support case closure requirements on fields and dropdowns (#2433)
- Add custom fields long text and url support (#2431)
- add bulk comment, append description, and custom dropdown actions (#2430)
- bump claude-agent-sdk to 0.1.51 (#2428)
- fail immediately when workflow definition is missing (#2423)
- harden GitHub Actions workflows (#2419)
- codex mcp (#2417)
- Remove provider assume-role vars from Fargate (#2416)
- Version sync for beta.35 (#2415)
- Pin github actions shas (#2414)
- Clean up local registry compose wiring (#2404)
- drop unsafe no auth (#2413)
- remove auto-update.sh from production image (#2411)
- support enterprise SSH users in git URLs (#2407)
- enforce entitlements in UI (#2381)
- MCP preset tools and pagination (#2405)
- stop workflow graph layout drift (#2401)
- local registry support (#2337) (#2338)
- skip Claude SDK version check on hot path (#2399)
- wrap long sync repository URLs (#2396)
- consume k8s chart releases from submodule (#2397)
- Add MCP service deployment (#2331)
- merge required OIDC scopes into client registration and aut… (#2391)
- split agent-executor into agent-worker and agent-executor services (#2380)
Security
- pin patched versions for Dependabot security alerts (#2462)
Integrations
- use workspace variable as default CrowdStrike base_url with parameter override (#2437)
Agents
- drop parallel_tool_calls param for custom model providers (#2455)
- clamp max tokens >= 1 (#2450)
- flush session jsonl at turn end (#2442)
- passthrough the agent sdk headers (#2441)
- Tracecat-owned llm proxy (#2424)
- litellm hardening and logging (#2410)
Performance improvements
- reduce chat session CPU usage from tool call re-renders (#2452)
Enhancements
- add Temporal heartbeating to execute_action_activity (#2451)
- simplify cell editing UX and quote DDL column names (#2439)
- Move persistent dedup behind trusted internal API (#2427)
- add backend-explicit secret types and unify to snake_case (#2425)
Bug fixes
- MCP instruction expression brace syntax (#2461)
- drop parallel_tool_calls param for custom model providers (#2455)
- add graceful_shutdown_timeout to Temporal workers (#2449)
- clamp max tokens >= 1 (#2450)
- widen bulk case action dialogs to prevent toolbar overflow (#2448)
- flush session jsonl at turn end (#2442)
- passthrough the agent sdk headers (#2441)
- use backend entitlements for agent preset action locking (#2426)
- litellm hardening and logging (#2410)
- loosen CIMD loopback redirects and required scopes (#2409)
- exclude agent workflows from workflow runs (#2408)
- avoid lazy load on index update (#2398)
Documentation
- add scaling guide and restore cheatsheet pages (#2454)
- Add FAQ guidance for common docs gaps (#2444)
- Registry OAuth/secrets snippet and Custom OAuth guidance (#2436)
- replace broken external links in tool docs and templates (#2432)
- SQL secret and clarify SQL action connection URLs (#2429)
- Update product description (#2420)
Build system
- pin patched versions for Dependabot security alerts (#2462)
- Pin pyasn1 and requests for security fix (#2422)
- frontend security dependency pins (#2421)
Thank you to all our contributors for making this release possible!
@boyazhang314, @chanster, @daryllimyt, @jordan-umusu, @mcm and @topher-lo