Features
- feat(snowflake): credential-based auth, object pickers, and 9 new operations (#6474)
- feat(mship): mship sysprompt override (#6469)
- feat(library): Best AI Agent Platforms for Enterprise Teams in 2026 (#6472)
- feat(pi): add plan mode (#6372)
- feat(integrations): add Snowflake PAT integration (#6407)
- feat(mintlify): add Mintlify integration (#6457)
- feat(library): Best AI Agents for Customer Support Ticket Triage and Routing (#6408)
- feat(demo): fire the X conversion event when a demo is booked (#6401)
- feat(workspaces): pin workspaces and widen the switcher to six rows (#6397)
- feat(dynatrace): add the write and configuration surfaces (#6398)
- feat(dynatrace): add the Dynatrace integration (#6393)
Improvements
- improvement(copilot): bound image decode work on the VFS file read path (#6421)
- refactor(tiktok): align webhook routing with shared dispatcher (#6261)
- refactor(instagram): align publishing with codebase patterns (#6270)
- improvement(ui): consolidate the disclosure chevron and order resource menus like the sidebar (#6447)
- improvement(files): extend the OOXML size limits to the client previews (#6445)
- improvement(execute): reuse the resolved workspace access and dedupe export failures (#6444)
- improvement(files): share bubble-menu chrome and stabilize shouldShow (#6443)
- improvement(api): share the API key workspace policy messages and align MCP discover (#6439)
- improvement(files): harden untrusted document preview and parsing (#6420)
- improvement(file-parsers): bound PDF text extraction (#6425)
- improvement(execute): enforce workspace permissions on function file exports (#6427)
- improvement(chat): rename "Branch in new chat" to "Fork in new chat" (#6417)
- improvement(ci): run the CodeQL cron weekly and cancel superseded scans (#6406)
- improvement(ui): unbold the app, align the folder chevron, tidy the feedback modal (#6400)
- improvement(provenance): cleanup secrets boundary (#6374)
- improvement(admin): move user row actions into an overflow menu with confirm modals (#6384)
- improvement(mship): questions improvement (#6385)
Bug Fixes
- fix(snowflake): drop the oversized credential modal help text (#6475)
- fix(og): read OG fonts from the repo instead of fetching Google Fonts at build (#6471)
- fix(condition): stop shipping all block outputs in every evaluation (#6468)
- fix(pi): compact cloud event streams before sandbox retention (#6464)
- fix(dynatrace): send the only unmute reason the API accepts and request the detail fields the tools map (#6463)
- fix(uploads): bound the HEIF fallback decode by declared pixels, not just bytes (#6456)
- fix(knowledge): stop listing workspace knowledge bases on stale creator identity (#6454)
- fix(files): stop rejecting ordinary HTML documents at the parser limits (#6446)
- fix(knowledge): validate tag slots and share the tag-name length limit (#6448)
- fix(file-parsers): stop deleting non-BMP characters when sanitizing parsed text (#6442)
- fix(cli): validate each install secret against its own requirement (#6440)
- fix(inbox): disable the inbox atomically and simplify its webhook tests (#6441)
- fix(webhooks): drop the AgentMail-specific webhook body cap (#6436)
- fix(files): make the rich-markdown-field container a positioning context (#6435)
- fix(cli): generate per-install secrets instead of using fixed values (#6433)
- fix(files): pin editor bubble menus to the cursor during scroll (#6434)
- fix(webhooks): resolve the AgentMail tenant before verifying the signature (#6431)
- fix(files): bound HTML parser input before building the DOM (#6423)
- fix(files): escape user filenames in the Content-Disposition header (#6430)
- fix(mcp): apply the workspace personal API key setting to MCP serve auth (#6429)
- fix(webhooks): centralize the path-delivery rule for trigger providers (#6428)
- fix(knowledge): apply knowledge-base access checks consistently across auth types (#6426)
- fix(files): anchor the editor bubble menus to the selection on scroll (#6419)
- fix(docs): stop the pinned sidebar running under the site footer (#6422)
- fix(provenance): stop short secret values from rewriting unrelated log text (#6416)
- fix(tables): keep row context menu labels on one line (#6418)
- fix(files): read the Files prefetch from the data layer and bound invitation previews (#6415)
- fix(mship): return the chat connect flow to the tab that started it (#6403)
- fix(workspaces): give the pin and options button one shared slot (#6402)
- fix(agent): overly broad check for secrets protection (#6399)
- fix(files): stop the file-viewer image reshift on open (#6390)
- fix(chunkers): preserve FAQ prose in docs chunks (#6383)
- fix(providers): stop reporting an absent Ollama as an error (#6387)
- fix(jsm): accept the numeric pagination the JSM tools actually send (#6386)
Other Changes
- chore(snowflake): drop the local write caps in favor of the shared limit (#6461)
- chore(pi): organize mode implementations (#6362)
- test(triggers): guard the provider granularity the path route depends on (#6437)