What's new
The latest twenty releases, read from the changelog at build.
reference~2 minVerified v0.66.1
The newest release first. Each line is one change as it was merged.
| Release | Date | What changed |
|---|---|---|
| v0.123.3 | 2026-10-20 | unit-test the verify gate's per-check env and fix the keys note |
| v0.123.2 | 2026-10-20 | a key minted through an OAuth client no longer outlives the client |
| v0.123.1 | 2026-10-20 | narrow the session insert on api_keys to live agents and minted columns; export, analytics and scope read the named stream's audience; refuse filesystem and non-ASCII whitespace redirect URIs |
| v0.123.0 | 2026-10-20 | import CSV and NDJSON files into a collection; viewer opens one surface at a time and closes the phone sheet on an outside press |
| v0.122.2 | 2026-10-20 | send a top-level open of the project relay to the project page |
| v0.122.1 | 2026-10-20 | revoke keys minted through OAuth clients disabled before the trigger |
| v0.122.0 | 2026-10-19 | seal the frame capability's claims so a URL shows nothing of the reader, closes #1177; revoke the keys and agents of an OAuth client when it is disabled |
| v0.121.0 | 2026-10-19 | frame capabilities last 15 minutes and renew without a reload; the gate's vitest lane waits for migrations:apply before reading the stack |
| v0.120.0 | 2026-10-19 | public blog with video playbooks, templates and SEO/GEO surfaces; a frozen workspace can no longer add dashboard tiles, and tile copy is accurate |
| v0.119.0 | 2026-10-19 | post a workspace's first activation milestones to a private Slack channel |
| v0.118.2 | 2026-10-19 | rate limit comment screenshot uploads and reuse one on resend |
| v0.118.1 | 2026-10-19 | list artifacts that name you as collaborator or editor in the gallery |
| v0.118.0 | 2026-10-19 | build dashboards from saved questions; one source policy, and prepareEntry split out of saveEntry |
| v0.117.0 | 2026-10-19 | Insights explains sources with no measures and reopens saved views; say when a project's rule is leaving private artifacts out |
| v0.116.1 | 2026-10-19 | revoked keys and agents cannot be un-revoked by their owner; key the recipient tag in every email log line; OAuth redirect URIs can only be https, loopback or an app scheme; platform security audit, October 2026 |
| v0.116.0 | 2026-10-19 | label shared-in gallery rows and offer a switch to the artifact's own workspace; harden viewer pins against spoofed PNG sizes, anchors and frame messages |
| v0.115.0 | 2026-10-19 | capture activation milestones for the PostHog Slack destination |
| v0.114.1 | 2026-10-19 | email sign in code failures now show on screen and in the log |
| v0.114.0 | 2026-10-19 | MCP resources, so a person can attach a help topic, artifact, file or template brief; project viewer pins comments to the page and keeps its popovers apart; every collecting artifact gets its own collection |
| v0.113.1 | 2026-10-19 | drop the code suffix from a refused multi-part publish message |