1.831.0 (2026-10-13)
Features
- add python 3.14 and 3.15 to the supported instance versions (#11654) (74c9b0c)
- add the viewer's roles to unnamed data table connections (#11709) (a298ed3)
- audit declarative instance config writes (#11684) (afbbc0b)
- cli: declare app sandbox and frontend api scopes in app yaml (#11703) (26afeec)
- data table migration tools in ai sessions (#11723) (3d74f6e)
- encrypt workspace secrets with AES-256-GCM (#11678) (4942149)
- external signer for OIDC tokens and a log line per mint (#11614) (157183a)
- give app builder operators app tools in AI sessions (#11716) (133613c)
- redesign the s3 explorer and show data files as tables (#11642) (9fa9b77)
- support array arguments in snowflake scripts (#11702) (1451988)
Bug Fixes
- bump git sync hub scripts to cli 1.830.0 (#11681) (7bbe032)
- end other sessions when a user changes their password (#11710) (add042e)
- fill app ctx inputs from the viewer's session, not the request (#11698) (7627c1b)
- groups: recompute member roles when an instance group role is cleared (#11708) (4be67fe)
- hide the sidebar triggers header when no trigger entry is visible (#11715) (e443eb3)
- keep a custom error handler's slack argument on save (#11696) (c6692ac)
- keep ai agent schema property order stable across jobs (#11687) (a8e2f1f)
- keep preserve_step_tags on saved branch and loop flow nodes (#11660) (dedd775)
- keep the app editor's parent_version out of deployed apps (#11719) (2c6de9d)
- keep the resource type index whole when a refresh fails (#11727) (71caac7)
- keep the resource type search current between daily fills, and serve it without an index (#11712) (a365359)
- load the s3 explorer table lazily to keep monaco out of the app shell (#11701) (a92b29d)
- parse python 3.12-3.15 syntax in the python parsers (#11675) (aae5f2e)
- persist hidden languages in edit default scripts drawer (#11693) (aeeeb04)
- pin the floating sidebar and let page clicks through it (#11711) (ce45ab5)
- resolve $var: references in mcp resource headers (#11679) (478eef7)
- resolve a new item's chosen name in session preview tools (#11688) (cd502a5)
- resolve variables in the url and headers of an mcp resource (#11680) (4bc2394)
- run a workflow-as-code task called from inside a task in place (#11699) (72d1092)
- stop marking run form fields as disabled for assistive tech (#11714) (c7df009)
- stop session dom tools reading a raw app preview that is not current (#11700) (05c7b68)
- surface oauth provider errors returned with http 200 (#11713) (d8ac4f5)