Breaking changes
- fix(api)!: Scope user email search to the caller's organization (#3862)
- fix(rbac+agents)!: Drop agent scopes from the org member floor (#3826)
- feat(skills)!: Redo ai.skill actions to match the MCP server (#3886)
Security
- security(deps): Patch Next.js image RCE, DOMPurify, OTel, virtualenv (#3965)
- security(mcp): Revoke MCP access when any granted org removes a user (#3962)
- security(api): Add AES-256-GCM option for database encryption (#3983)
Deprecations
- deprecation(skills): Legacy ai.skill actions in favour of MCP actions (#3899)
Case management
- feat(cases+ui): Review workflow runs for a case task (#3843)
- fix(cases): Keep select field options and defaults on edit (#3856)
- perf(cases): Load case search results more efficiently (#3801)
- feat(cases+mcp): Add sub-case MCP tools and docs (#3872)
- feat(cases): Select payload fields in case list and search (#3867)
- fix(cases): Sort assignees and tags across all matching cases (#3802)
- feat(cases): Combine conditions in case search (#3804)
- feat(cases): Search cases by words, phrases, and misspellings (#3808)
- docs(cases): Document task workflow runs and refresh screenshots (#3882)
- feat(cases): Add grouped filters and payload equality search (#3883)
- fix(cases): Ignore punctuation-only words in case search (#3951)
- fix(cases): Keep search focused while results load (#3978)
- fix(cases): Show a neutral empty state when case search times out (#3980)
- perf(cases): Speed up case text search with stored search vectors (#3998)
- perf(cases): Match case search typos through stored word lists (#4004)
- fix(infra+cases): Support IBM Cloud's ibm_extension schema (#4014)
Tables
- fix(tables): Bump updated_at on row upserts and updates (#3889)
Agents
- fix(agents): Restore preset builder tabs and playground version picker (#3854)
- fix(agents): Run chat sessions up to the agent timeout ceiling (#3874)
- perf(agents+ui): Stop chat freezing on large streamed tool inputs (#3887)
- fix(agents): Run agent tool calls at highest priority (#3876)
- feat(agents): Refresh agent chat ui and approvals (#3884)
- fix(agents): Drop SDK-unsupported content blocks from chat history (#3896)
- fix(agents): Classify interrupted LLM streams, correlate gateway logs (#3914)
- feat(agents): Raise agent timeout default to 2h and ceiling to 3h (#3915)
- feat(agents): Tag LLM gateway responses and log gateway drain (#3918)
- feat(ui+agents): Add agent filter to skills viewer (#3923)
- fix(agents): Show chat turn errors inline instead of collapsing (#3920)
- feat(agents+enterprise): Route agent MCP and tool calls through tunnels (#3910)
- refactor(agents): Share the LLM routing plan builder (#3929)
- feat(agents): Trace LLM proxy upstream requests (#3930)
- feat(ui+agents): Improve form config editor and chat forms support (#3927)
- perf(agents): Share one TLS context across LLM proxy clients (#3940)
- feat(agents): Record first-token time on LLM proxy upstream spans (#3938)
- feat(agents): Configure the default backend for new chat sessions (#3942)
- docs(agents): Add Timeouts page under Building agents (#3947)
- feat(agents): Steer a running turn from chat (#3944)
- feat(agents): Add session command table and store (#3961)
- feat(agents): List pending messages and expose withdraw to UI extensions (#3970)
- fix(agents): Show missing provider credentials as a chat error (#3975)
- fix(agents): Route managed OpenRouter, Ollama, vLLM, LiteLLM models (#3981)
- feat(agents): Run stdio MCP servers through a pluggable runner (#3986)
- feat(agents): Share the session sink and add caller-owned turn results (#3992)
- feat(agents): Gate non-default agent backends by entitlement (#3991)
- fix(agents): Enforce the shared MCP tool discovery timeout (#3744)
- refactor(agents): Drop the agent-runtime feature flag (#3993)
- feat(agents): Run Slack, comment and MCP agents on the selected backend (#3990)
- feat(agents+ui): Restore builder chat tab on agent presets (#3963)
Tracecat MCP
- fix(ui+mcp): Leave room below the trigger node in auto layout (#3863)
- feat(mcp): Add tool to configure workspace attachment file types (#3811)
- fix(mcp): Connect multi-org users to their active organization (#3935)
- feat(mcp): Let one OAuth connection cover multiple organizations (#3957)
Core actions
- fix(actions): Explain DuckDB out-of-memory errors instead of retrying (#3875)
- fix(actions): Deduplicate by whole item when keys is empty (#3943)
- revert(actions): Deduplicate by whole item when keys is empty (#3966)
Integrations
- feat(integrations): Add GitHub create git ref action (#3861)
- feat(integrations): Add Proofpoint TAP and Threat Protection actions (#3866)
- feat(integrations): Add ServiceNow ITSM, CSM, catalog, and CMDB actions (#3865)
- fix(integrations): Fail registry sync fast on dependency conflicts (#3892)
- perf(integrations): Cache parsed registry manifests per version (#3925)
- feat(integrations): Expand Elastic Security and Elasticsearch actions (#3936)
- feat(integrations): Add Spur Context API templates (#3997)
- feat(integrations): Expand Fleet REST API coverage (#3999)
Engine
- fix(engine): Reject workflow dependency cycles during validation (#3847)
- fix(engine): Surface workflow termination reasons (#3907)
- fix(engine): Attribute NsJail drain kills to the platform (#3906)
- fix(engine): Classify misreported user workflow errors (#3916)
- fix(engine): Don't cap address space where the cgroup bounds memory (#3921)
- perf(engine): Precompile sandbox stdlib, cache builtin manifest check (#3931)
- perf(engine): Import less in the sandbox action runner (#3932)
- fix(engine): Verify sandbox stdlib bytecode against its sources (#3934)
- feat(engine): Execute Git sync with durable background receipts (#3740)
API
- feat(api): Let org service accounts sync registry repositories (#3859)
- fix(api): Fall back to OIDC when org has no SAML IdP configured (#3868)
- feat(api): Let org service accounts list organization members (#3870)
- fix(api): Resolve webhook allowlist client IP behind proxies (#3893)
- feat(api+ui): Add platform admin IP allowlist (#3909)
- feat(api+ui): Require security keys and passkeys for sign-in (#3941)
- fix(api): Preserve action descriptions in workflow definitions (#3928)
- fix(api+ui): Require Publish before first workflow Git push (#3950)
- fix(api): Map named unique violations and sanitize database errors (#3911)
- fix(api): Guard workspace Git writes against branch races (#3737)
- refactor(api): Separate Git sync preparation from import commits (#3738)
- feat(api): Preserve reviewed Git sync snapshots and stale guards (#3739)
- feat(api): Expose durable Git sync operations and paginated diffs (#3741)
- fix(api): Release the database session before streaming chat events (#4013)
- feat(api): Configure managed resources source and list its tags (#4009)
User interface
- fix(ui): Disallow crawling via robots.txt (#3853)
- feat(ui): Link table actions to their table on the canvas (#3844)
- fix(ui): Fix dialog regressions from fixed-height panels (#3855)
- feat(ui): Split workspace sidebar into Workspace and Configure (#3869)
- fix(ui): Keep quoted on/off/yes/no action inputs as strings (#3771)
- fix(ui): Tighten auto layout spacing and cover branch ordering (#3890)
- fix(ui): Widen agent preset artifact document in workspace chat (#3888)
- fix(ui): Make Open subflow menu item visible and clickable (#3895)
- fix(ui): Keep workspace sidebar mounted during route loading (#3897)
- feat(ui): Show agent preset in workflow runs panel (#3924)
- perf(ui): Virtualize action pickers and registry list for 1k+ actions (#3939)
- fix(ui): Stretch code editors to their container height (#3946)
- fix(ui): Make list page search bars fill the header row (#3952)
- feat(ui): Standardize created and updated timestamps on list rows (#3954)
- fix(ui): Keep disabled header actions to stop tab layout shift (#3953)
- fix(ui): Show one thinking marker while the agent starts reasoning (#3948)
- fix(ui): Use muted gray for all controls header titles (#3958)
- feat(ui): Make delete confirmations consistent across resources (#3955)
- feat(ui): Move workflow published time into row timestamps (#3976)
- refactor(ui): Standardize create and delete button labels (#3979)
- feat(ui): Review and resume background Git sync operations (#3742)
Infrastructure
- ci: Stabilize sandbox smoke tests (#3881)
- ci: Bump uv to 0.13.4 and remove unused sandbox rootfs builder (#3960)
- fix(infra): Reparent the WebAuthn MFA migration onto the command table (#3973)
- docs(infra): Add self-hosting support checklist page (#3974)
- infra: Run the Git sync background worker (#3708)
- refactor(infra): Use transaction-scoped advisory locks (#4003)
- feat(infra): Add managed resource side tables (#4008)
Observability
- fix(logging): Stop logging secret ciphertext in workflow validation (#3988)
- fix(logging): Stop logging decrypted GitHub and GitLab credentials (#3989)
Documentation
- docs: Add screenshots and step-by-step guide to Forms page (#3864)
- docs: Add a Sublime phishing triage example (#3898)
- docs: Move tunnel gateway Helm setup to Kubernetes docs (#3908)
- docs: Note custom registry requires Ed25519 SSH keys (#3917)
Dependencies
- build(deps): Patch handlebars, next, sharp, pymongo, mcp alerts (#3851)
- build(deps): Bump aiohttp to 3.14.5 (#3880)
- build(deps): Enforce 7-day release cooldown for uv and pnpm (#3900)
- build(deps): Bump bundled Node.js to 22.23.4 (#3901)
- build(deps): Patch certifi, uv, Pillow, and follow-redirects CVEs (#3905)
- build(deps): Bump pytest to 9.0.3 and override katex to 0.18.11 (#3913)
- build(deps): Bump temporalio to 1.34.0 (#3996)
- build(deps): Pin temporalio to 1.32.0 (#4001)
- build(deps): Bump authlib, litellm, pymongo and others for advisories (#4002)
Other changes
- test: Cut ~42k LOC of redundant and mock-only unit tests (#3840)
- test: Halve unit DB fixture cost and run sandbox tests as own CI job (#3850)
Contributors
@daryllimyt, devin-ai-integration[bot], @topher-lo, @aaron-tracecat, @jordan-umusu and @sk-tracecat
Full changelog: 1.2.4...1.3.0