Features
- feat(library): Microsoft Copilot Studio vs Power Automate: Which Should You Use? (#10047)
- feat(library): How Do You Build a Governed AI Agent for Microsoft Intune Device Management? (#10045)
- feat(desktop): quick chat window on a global shortcut (#10025)
Improvements
- improvement(computer-use): keep an element's id stable across observations (#10046)
- improvement(egress): route workspace requests through the organization's egress gateway (#10040)
- improvement(search): log the shape of each search and the source, kind, and size of each read (#10042)
- improvement(api): log the v2 error code, field, and refusal reason on the request's closing line (#10033)
- improvement(chat): show background task and scheduled job turns as messages (#10032)
Bug Fixes
- fix(sandbox): skip interval ticks while the previous one is still in flight (#10063)
- fix(realtime): keep admin block locks out of write-role graph replaces (#10062)
- fix(sso): admit callbacks under the provider id the plugin resolved (#10054)
- fix(copilot): hold callerless runs to the read grant for server tool writes (#10061)
- fix(sso): refuse SSO callback user writes outside the provider's verified domain (#10060)
- fix(executor): resume a paused draft run on the graph it paused on (#10057)
- fix(inbox): require an authenticated sender before an email acts as a workspace member (#10059)
- fix(helm): reject placeholder secrets and stop shipping them in example values (#10052)
- fix(webhooks): reject auth that reads an unresolved env-var secret (#10055)
- fix(workspaces): stop workspace admins from moving the billed account (#10058)
- fix(mcp): gate public workflow MCP servers on public API governance (#10056)
- fix(mcp): bound legacy mcp server name and description like the v2 contract (#10053)
- fix(helm): confine the PII service with its NetworkPolicy whenever pii is enabled (#10051)
- fix(csp): remove shadowed permissive policy from workflow execute routes (#10050)
- fix(files): compare Markdown toolbars with their current selection (#10049)
- fix(computer-use): stop reporting closed menu items past the cap as a truncated state (#10043)
- fix(files): keep Markdown tables readable while scrolling (#10041)
- fix(integrations): address release review findings on the integration sweep (#10039)
- fix(workspaces): hand off a departing member's files without binding every file id (#10038)
- fix(integrations): resolve agent tool-call operations and align remaining requests with vendor specs (#10036)
- fix(integrations): address the final release audit findings (#10035)
- fix(integrations): validate monday, asana, clickup, airtable, notion, supabase, amplitude, box, docusign, and dropbox (#10030)
- fix(computer-use): read elements reported at infinity without a frame instead of crashing the helper (#10034)
- fix(integrations): validate zendesk, pipedrive, and intercom against vendor specs (#10028)
- fix(mailchimp): archive members correctly, add permanent delete, and align requests with the marketing api (#10031)
- fix(integrations): validate square, quickbooks, oracle fusion, sap, and workday; show the oracle fusion icon (#10029)
- fix(integrations): validate servicenow, salesforce, and hubspot against vendor docs (#10027)
- fix(knowledge,files): count knowledge base documents per base and index the modified-order file list (#10026)
Other Changes
- docs(library): update apache-2-0-vs-fair-code (#10048)
- docs(library): update can-ai-agents-talk-to-each-other-multi-agent-communication-explained (#10044)