twentyhq/twenty twenty/v2.30.0

on GitHub

⚠️ Breaking changes

• The GraphQL metadata API no longer uses nestjs-query cursor types. Remove ObjectConnection, FieldConnection, CursorPaging, and related cursor inputs from metadata queries and switch to the new resolver-based shape. (#23925) by @abdulrahmancodes
• Server image security update: undici bumped from v6/v7 to v8 (potentially breaking for direct callers), plus js-yaml, sharp, brace-expansion, ip-address, and dompurify patched for critical and high CVEs. Self-hosters should update. (#23963) by @charlesBochet

🌟 Highlights

• Hidden records no longer surface as chart labels through unfiltered relation joins. (#23369)
• A new /chat mode keeps the conversation front and center with records opening as side-panel artifacts. (#23929)
• Campaign email bodies now have a canvas editor with sections, columns, buttons, and image blocks. (#23657)
• Views can now be displayed as a List, alongside table, board, and calendar. (#23829)
• Records that no longer match an active filter disappear from the open table in real time. (#23858)
• Opening and closing a currency field editor without typing no longer corrupts the stored amount. (#23874)

✨ New features

• The runAgent API now accepts a messages array for multi-turn bot conversations alongside the existing single-prompt form. (#23395) by @abdulrahmancodes
• Apps can now run an agent on behalf of a specific workspace member, scoping the run to that person's permissions. (#23470) by @abdulrahmancodes
• Large-company signups now see an optional Cal.com call-booking step during onboarding, between the team invite and plan selection. (#23521) by @bosiraphael
• The Slack bot now includes direct links to records it creates or surfaces, so you can open them from the reply. (#23539) by @abdulrahmancodes
• Fireflies calls missed by webhooks can be backfilled via POST /fireflies/backfill; the work fans out as batched background jobs. (#23622) by @ehconitin
• Campaign email bodies now open in a canvas editor with sections, columns, buttons, dividers, and image blocks that render to email-safe HTML per recipient. (#23657) by @ijreilly
• Navigating away from the workspace setup chat now carries the conversation into the Ask AI side panel instead of losing it. (#23744) by @bosiraphael
• The transcript provider for call recordings is now a workspace-admin setting. The default is Recall.ai; Gladia remains available for mixed-language calls. (#23789) by @ehconitin
• Record pages can now show a field widget listing records two relation hops away — e.g. a Client page listing Transactions of the Client's Wallets. (#23815) by @FelixMalfait
• A sending domain waiting on DKIM record propagation now shows as Pending instead of Failed in email domain settings. (#23818) by @ijreilly
• Views can now be displayed as a List, alongside the existing Table, Board, and Calendar layouts. (#23829) by @neo773
• The Slack bot now answers empty mentions and DMs with example prompts, and notifies lapsed threads rather than dropping them silently. (#23835) by @abdulrahmancodes
• The bot's own mention is stripped wherever it appears in a Slack message, not just at the very start. (#23837) by @abdulrahmancodes
• The Slack bot now uses Slack's native agent surface, gaining a built-in thinking indicator, suggested prompts, and thread titles. (#23838) by @abdulrahmancodes
• A new /chat mode keeps the AI conversation in the main pane; records and views the agent surfaces open as side-panel artifacts next to the thread. (#23929) by @FelixMalfait
• List-layout views now render as a proper list widget instead of silently falling through to a table renderer. (#23940) by @FelixMalfait
• Recipient chips in the email composer can be dragged to reorder, moved across To/Cc/Bcc, range-selected with shift or cmd/ctrl, and deleted as a group. (#23947) by @FelixMalfait
• The email composer header is restyled with flush rows, inline labels, and a clean divider — closer to a mail client than a settings form. (#23948) by @FelixMalfait

💅 Improvements & UX

• A failed page chunk load no longer shows a raw browser error string in a snackbar. (#23571) by @bosiraphael
• Microsoft Graph webhook lifecycle events now route correctly: subscriptionRemoved recreates the subscription, reauthorizationRequired renews it in place. (#23707) by @neo773
• Onboarding no longer shows free-credit tags or reward prompts when billing is disabled on the instance. (#23717) by @bosiraphael
• The Slack bot no longer calls the Slack API to identify itself on every channel-join event; the bot user id is cached at connect time. (#23726) by @abdulrahmancodes
• Expired invitations are no longer treated as active and no longer count toward the onboarding invitation limit. (#23749) by @prastoin
• Drag-and-drop across the app now uses a single consistent drop-position algorithm; table rows, Kanban cards, and tabs drop where you aim them. (#23752) by @git-init-priyanshu
• Disconnecting a Slack workspace now releases the team claim so another Twenty workspace can connect to the same Slack team. (#23753) by @abdulrahmancodes
• A new cross-workspace chat list in the admin panel (AI tab) shows all AI conversations, filterable by onboarding status, errors, and workspace. (#23757) by @bosiraphael
• Dragged table rows and Kanban cards now share a consistent background and opacity treatment. (#23772) by @Bonapara
• During workspace setup, only display name, subdomain, and logo can be changed; all other fields are locked until the workspace is activated. (#23781) by @prastoin
• A stray ] that sometimes appeared after AI chat record chips is fixed. (#23798) by @bosiraphael
• Recall call recordings that end due to bot-detection timeout are now processed normally instead of being marked as not recorded. (#23812) by @ehconitin
• Streaming AI chat messages now render at constant cost per chunk instead of slowing down as the message grows. (#23831) by @FelixMalfait
• The button that opens the credit package picker is renamed from 'Increase' to 'Manage'. (#23840) by @FelixMalfait
• The active session list and 'Log out all devices' in Settings → Devices now apply only to the current workspace. (#23843) by @FelixMalfait
• The bottom border of the last row in a record table is no longer missing. (#23846) by @FelixMalfait
• Opening the Ask AI panel with a fast-model preselection no longer silently falls back to the smart model. (#23854) by @charlesBochet
• Opening Monaco-backed editors (code logic, MCP settings, workflow code) no longer causes worker method errors from having two Monaco instances loaded. (#23855) by @FelixMalfait
• Fonts are now served from Twenty's own servers; no browsing data is shared with Google Fonts when loading any Twenty page. (#23859) by @FelixMalfait
• JSON-LD structured data in page heads is now properly escaped, closing a potential XSS path from crafted string values in page titles or names. (#23865) by @FelixMalfait
• The HTML block preview sanitizer now removes template, slot, and portal elements to close a parser-differential gap. (#23866) by @FelixMalfait
• Workspace subdomains can now be as short as one character (previously the minimum was three). (#23871) by @ijreilly
• Invitees who complete onboarding are no longer routed to a dead-end workspace setup page. (#23881) by @bosiraphael
• On mobile, the record page header shows only the record title; the object type and pagination count are hidden where there is not enough room. (#23902) by @FelixMalfait
• Webhook subscriptions backed by an invalid OAuth refresh token are now expired rather than retried indefinitely. (#23907) by @neo773
• Command menu item labels can now be translated. (#23913) by @Dumeng
• Lab feature flags must now declare an icon server-side; the List View toggle now shows the correct icon in Settings → Lab. (#23930) by @FelixMalfait

🐛 Bug fixes

• Hidden records no longer appear as chart labels — charts grouped by a relation field now filter the join and show only records the viewer is allowed to see. (#23369) by @bosiraphael
• A view grouped by a field with only one groupable option (e.g. People grouped by Company) can now have its grouping changed or removed. (#23619) by @abdulrahmancodes
• App-manifest RECORD_TABLE widgets can now reference a view by viewUniversalIdentifier, matching the portability that FIELDS widgets already had. (#23634) by @thomtrp
• HTML and HTM file previews now expand to fill the preview modal instead of rendering at the default inline iframe size. (#23676) by @Shinu-Cherian
• Advanced filters on relation fields (e.g. Assignee 'Is Me') now show a readable chip instead of raw JSON. (#23718) by @charlesBochet
• Settings → AI → Tools no longer shows a misleading 'App version mismatch' error. (#23731) by @FelixMalfait
• Passing a single object (not an array) to a GraphQL or filter no longer throws a runtime error. (#23738) by @bosiraphael
• The 'Discard Draft' workflow action is now hidden when the draft is the workflow's only version. (#23756) by @thomtrp
• An If/Else workflow step with a filterGroupId that resolves to nothing now correctly rejects the branch instead of matching unconditionally. (#23758) by @blockgroot
• If the install-apps onboarding job fails to enqueue, the step is restored so users can retry instead of being silently skipped past it. (#23759) by @bosiraphael
• fix(twenty-front): stop field widget layout dropdown from crashing th… (#23784) by @FelixMalfait
• Draft and send email agent actions now use the current user's connected account rather than whichever account the database returns first. (#23793) by @charlesBochet
• Logic function dependency layers that pull in large packages no longer crash the build Lambda with out-of-memory errors. (#23805) by @charlesBochet
• The Body editor in the Send Email workflow action panel no longer overlaps the Attachments section on short panels. (#23810) by @ijreilly
• AI-generated email campaigns can now be saved from queue workers; the workspace auth context is set correctly outside HTTP requests. (#23811) by @FelixMalfait
• Relation-traversal filters on record table widget views are no longer silently dropped when the layout is saved or filters are edited in the side panel. (#23814) by @FelixMalfait
• Starting a drag on a row that unmounts before the gesture activates no longer crashes with 'Cannot start a drag operation without a drag source'. (#23816) by @FelixMalfait
• Editing an advanced filter rule on a freshly loaded page — changing the operand or toggling a relation value — now actually applies. (#23819) by @charlesBochet
• Creating a record from a view with a nested-relation filter no longer fails with 'Unexpected value for UUID filter'. (#23832) by @FelixMalfait
• A record that no longer matches the active filter (e.g. a task marked Done in an Open-status view) now disappears from the open table without a manual reload. (#23858) by @charlesBochet
• Clearing a to-one relation field in a Create Record or Upsert Record workflow step now removes the value; previously it stored {id: null} and failed at runtime. (#23869) by @thomtrp
• Opening and closing a currency field editor without typing no longer corrupts the stored amount. (#23874) by @thomtrp
• Adding, editing, or deleting an item in a multi-value field (e.g. phone numbers, links) and pressing Enter now saves the change immediately. (#23943) by @FelixMalfait
• A record page whose title field holds a non-string value no longer crashes the app with 'trim is not a function'. (#23950) by @thomtrp
• When the AI agent's find_many tool returns a truncated page, it now tells the model results were cut off, so the model no longer reports records as missing. (#23955) by @thomtrp

⚡ Performance

• Event-loop delay (mean, p50, p99, max) and workspace cache recompute times are now exported to Prometheus. (#23751) by @charlesBochet
• Per-pod workspace metadata cache occupancy — entry count, size, distinct workspaces, and per-provider bytes — is now tracked in Prometheus, with heavy providers capped by entry count. (#23778) by @charlesBochet
• AWS SDK clients now have an explicit request timeout; a stuck request can no longer exhaust the connection pool and hang the process. (#23857) by @charlesBochet
• V8 GC pause duration and heap metrics are now exported to Prometheus to help attribute high-p99 latency stalls to garbage collection. (#23879) by @charlesBochet
• A new IS_WORKSPACE_CACHE_COMPACT_STORAGE_ENABLED flag enables compacted cache payloads that reduce GC pressure on large deployments. (#23880) by @charlesBochet
• The workspace cache now tracks entry count per provider in Prometheus, making it possible to attribute memory growth to specific providers. (#23883) by @charlesBochet

🔧 Developer & API

• A new server upgrade command repairs orphan workflowVersion rows in the core schema before dispatch-from-core is enabled on a workspace. (#23739) by @thomtrp
• A new IS_FEATURE_FLAG_MANAGEMENT_ENABLED environment variable enables the feature flag admin tab on self-hosted and preview instances. (#23750) by @FelixMalfait
• The Vite dev server now proxies API routes so local development runs same-origin without CORS errors when cookie auth is enabled. (#23779) by @prastoin
• Workspace migration build and run timings are now exported as OpenTelemetry histograms via MetricsService. (#23797) by @prastoin
• Six npm packages with critical or high CVEs are patched in the server image: undici (v6/v7 to v8), js-yaml, sharp, brace-expansion, ip-address, and dompurify. Self-hosters should update; the undici major bump may affect custom code using it directly. (#23813) by @charlesBochet
• CALL_RECORDING_SUMMARY and CALL_RECORDING_TRANSCRIPT widget types are registered with their configuration schemas; UI components come in a follow-up. (#23864) by @ehconitin
• subdomainMinLength is removed from ClientConfig; nothing has read this field since v2.30.0 and client-side parsing of it can be dropped. (#23915) by @ijreilly

🎉 New contributors

• @blockgroot made their first contribution in #23758
• @Dumeng made their first contribution in #23913

Full Changelog: twenty/v2.27.0...twenty/v2.30.0