Security
- Add duckdb S3 + HTTP-header secrets and pin extensions (#2821)
- secure SAML signing defaults (#2824)
- harden SAML deployment defaults (#2825)
- hardcode require signed saml responses (#2826)
Integrations
- update integration SDK deps (#2745)
- add Google API SDK UDFs (#2746)
- split MCP servers into own page (#2765)
- Exa registry templates (#2803)
- add Cloudflare admin SDK (#2818)
- add Kubernetes admin SDK (#2820)
- LeakCheck secret name (#2830)
- test http mcp integrations (#2848)
Agents
- drop pydantic ai runtime in title generation (#2688)
- add DuckDB CLI to sandbox (#2749)
- add session artifact storage (#2772)
- normalize sandbox runtime paths (#2773)
- persist sandbox work dirs (#2774)
- add workspace chat artifact streams (#2782)
- mount workspace chat artifacts (#2784)
- bind workspace chat domain tools (#2787)
- create workflow artifacts from chat (#2794)
- mcp catalog overhaul (#2807)
- add agent folder tools (#2823)
- bump model catalog (#2845)
- workspace model selection scroll (#2846)
Performance improvements
- prebuild builtin sync artifacts (#2753)
- bound for_each iteration concurrency (#2780)
- smooth workspace chat streaming (#2800)
- smooth reasoning token streaming (#2805)
Enhancements
- add per-session tools and MCP integrations (#2797)
- capabilities-first tools picker, browsable integrations (#2804)
- Restructure Tracecat best practices (#2834)
- add include_headers toggle to webhook trigger (#2837)
- add case dropdown management tools (#2847)
Bug fixes
- extend dev seed readiness timeout (#2744)
- drop destructive case delete tools (#2747)
- surface registry sync discovery errors (#2757)
- reconcile current startup artifact URI (#2764)
- support custom AWS regions in AWS UDFs (#2778)
- remove MCP tool namespaces (#2791)
- collect for_each loop errors (#2795)
- resolve current org for multi-org users (#2813)
- clean up org-scoped user removal (#2814)
- delete users with dependency cleanup (#2815)
- don't mark actions unconfigured for optional secrets (#2832)
- avoid portless port collision (#2844)
- expire stale schedules during update_workflow YAML updates (#2850)
Dependencies
Other
- add agent skill CRUD UDFs (#2595)
- add _source field filter to list_detection_signals (#2715)
- tests: init ux smoke testing (#2738)
- update Helm chart registry access (#2748)
- chat subagent binding backfill (#2750)
- allow API keys to fetch workflow details (#2755)
- prevent new chat from submitting preset form (#2758)
- allow API keys to manage workspace variables and case attachments (#2759)
- allow API keys to manage case rows (#2760)
- allow API keys to manage agent resources (#2761)
- allow API keys to manage workspace tables (#2762)
- schedule action doc link test (#2769)
- scope org-wide user RBAC assignments by organization (#2775)
- enable cluster sandbox by default (#2776)
- Update Tracecat MCP automation guidance (#2779)
- build workspace chat artifact shell (#2783)
- support custom AWS regions in AWS UDFs (#2790)
- add batch table row tools (#2796)
- serialize restore expects (#2799)
- yield while spawning scheduler tasks (#2802)
- Add MCP skill management tools (#2812)
- support multi-org workspace discovery (#2816)
- refresh generated tool docs (#2822)
- report OAuth-backed registry actions as configured (#2829)
- update LeakCheck secret name (#2831)
- remove unused isSuperuser/eeMultiTenant params from post-auth redirect (#2849)
Full changelog: 1.0.0-beta.48...1.0.0-beta.49