Breaking changes
- feat(skills)!: Redo ai.skill actions to match the MCP server (#3886)
- fix(rbac+agents)!: Drop agent scopes from the org member floor (#3826)
- fix(api)!: Scope user email search to the caller's organization (#3862)
Deprecations
- deprecation(skills): Legacy ai.skill actions in favour of MCP actions (#3899)
Case management
- feat(cases): Add grouped filters and payload equality search (#3883)
- docs(cases): Document task workflow runs and refresh screenshots (#3882)
- feat(cases): Search cases by words, phrases, and misspellings (#3808)
- feat(cases): Combine conditions in case search (#3804)
- fix(cases): Sort assignees and tags across all matching cases (#3802)
- feat(cases): Select payload fields in case list and search (#3867)
- feat(cases+mcp): Add sub-case MCP tools and docs (#3872)
- perf(cases): Load case search results more efficiently (#3801)
- fix(cases): Keep select field options and defaults on edit (#3856)
- feat(cases+ui): Review workflow runs for a case task (#3843)
Tables
- fix(tables): Bump updated_at on row upserts and updates (#3889)
Agents
- fix(agents): Drop SDK-unsupported content blocks from chat history (#3896)
- feat(agents): Refresh agent chat ui and approvals (#3884)
- fix(agents): Run agent tool calls at highest priority (#3876)
- perf(agents+ui): Stop chat freezing on large streamed tool inputs (#3887)
- fix(agents): Run chat sessions up to the agent timeout ceiling (#3874)
- fix(agents): Restore preset builder tabs and playground version picker (#3854)
Tracecat MCP
- feat(mcp): Add tool to configure workspace attachment file types (#3811)
- fix(ui+mcp): Leave room below the trigger node in auto layout (#3863)
Core actions
- fix(actions): Explain DuckDB out-of-memory errors instead of retrying (#3875)
Integrations
- fix(integrations): Fail registry sync fast on dependency conflicts (#3892)
- feat(integrations): Add ServiceNow ITSM, CSM, catalog, and CMDB actions (#3865)
- feat(integrations): Add Proofpoint TAP and Threat Protection actions (#3866)
- feat(integrations): Add GitHub create git ref action (#3861)
Engine
- fix(engine): Surface workflow termination reasons (#3907)
- fix(engine): Reject workflow dependency cycles during validation (#3847)
API
- fix(api): Resolve webhook allowlist client IP behind proxies (#3893)
- feat(api): Let org service accounts list organization members (#3870)
- fix(api): Fall back to OIDC when org has no SAML IdP configured (#3868)
- feat(api): Let org service accounts sync registry repositories (#3859)
User interface
- fix(ui): Keep workspace sidebar mounted during route loading (#3897)
- fix(ui): Make Open subflow menu item visible and clickable (#3895)
- fix(ui): Widen agent preset artifact document in workspace chat (#3888)
- fix(ui): Tighten auto layout spacing and cover branch ordering (#3890)
- fix(ui): Keep quoted on/off/yes/no action inputs as strings (#3771)
- feat(ui): Split workspace sidebar into Workspace and Configure (#3869)
- fix(ui): Fix dialog regressions from fixed-height panels (#3855)
- feat(ui): Link table actions to their table on the canvas (#3844)
- fix(ui): Disallow crawling via robots.txt (#3853)
Infrastructure
- ci: Stabilize sandbox smoke tests (#3881)
Documentation
- docs: Move tunnel gateway Helm setup to Kubernetes docs (#3908)
- docs: Add a Sublime phishing triage example (#3898)
- docs: Add screenshots and step-by-step guide to Forms page (#3864)
Dependencies
- build(deps): Patch certifi, uv, Pillow, and follow-redirects CVEs (#3905)
- build(deps): Bump bundled Node.js to 22.23.4 (#3901)
- build(deps): Enforce 7-day release cooldown for uv and pnpm (#3900)
- build(deps): Bump aiohttp to 3.14.5 (#3880)
- build(deps): Patch handlebars, next, sharp, pymongo, mcp alerts (#3851)
Other changes
- test: Halve unit DB fixture cost and run sandbox tests as own CI job (#3850)
- test: Cut ~42k LOC of redundant and mock-only unit tests (#3840)
Contributors
@jordan-umusu, @sk-tracecat, @aaron-tracecat, @daryllimyt, @topher-lo and devin-ai-integration[bot]
Full changelog: 1.2.2...1.3.0-alpha.1