Improvements
- improvement(logs): move per-block progress markers to Redis to cut write amplification (#5248)
- improvement(clickhouse): expand block templates and skills, normalize tool versions (#5246)
- perf(dev): SIM_DEV_MINIMAL_REGISTRY mode to slash local dev-server RAM (#5223)
- improvement(execution): stop rewriting execution snapshots on reuse + skip redundant actor lookup (#5242)
- perf(db): per-role Postgres connection-pool profiles (#5232)
- improvement(webhooks): add trigger-age instrumentation + guard env decryption (#5236)
- perf(trigger): cap concurrency on background DB tasks (#5231)
Bug Fixes
- fix(webhooks): run inactive deployment-version cleanup inline on deploy (#5250)
- fix(webhooks): cast json provider_config for atomic jsonb merge (#5249)
- fix(sso): keep an exit affordance in edit mode when clean (#5247)
- fix(security): gate credential-set invitation listing to admins and drop token (#5243)
- fix(mcp): pin public IP-literal server URLs to block SSRF redirect bypass (#5244)
- fix(copilot): gate post-tool output writes behind write permission (#5241)
- fix(file-parsers): guard OOXML parsers against decompression-bomb memory exhaustion (#5239)
- fix(security): cap KB document download size to prevent memory-exhaustion DoS (#5240)
- fix(connectors): harden Zendesk connector against SSRF (#5237)
Other Changes
- chore(data-drains): remove settings callout and unused InfoNote component (#5235)
Contributors
Contributors
TheodoreSpeaks and waleedlatif1