This release adds 4 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+7 more
Affected surfaces
ReleasePort's take
Moderate signalThis release enforces stricter table permissions on field endpoints and now requires write permission to create records in tables.
Why it matters: Security impact: enforce tableβlevel permissions (severityβ―70) and breaking change: require write access for record creation (severityβ―80).
Summary
AI summaryBroad release touches π Pieces, π¨ Enhancements & Polish, pieces, and π€ AI & Chat.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Enforce table permissions on field endpoints. Enforce table permissions on field endpoints. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Breaking | High |
Require write permission to create records in tables. Require write permission to create records in tables. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Feature | Medium |
Add Mistral AI as a platform AI provider. Add Mistral AI as a platform AI provider. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Feature | Medium |
Platform admins can now view run success rates, live queue depth, and 30βday health history in one dashboard. Platform admins can now view run success rates, live queue depth, and 30βday health history in one dashboard. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Feature | Medium |
Show internal error to platform admin in run details. Show internal error to platform admin in run details. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Feature | Medium |
Show a clear error with oneβclick AI help when a step fails. Show a clear error with oneβclick AI help when a step fails. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Performance | Medium |
Speed up piece-property validation by removing perβcall schema overhead. Speed up piece-property validation by removing perβcall schema overhead. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Bugfix | Medium |
Prevent silent run corruption during rolling upgrades by gating dispatch on workerβapp version. Prevent silent run corruption during rolling upgrades by gating dispatch on workerβapp version. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Bugfix | Medium |
Prevent browser freeze when typing unclosed `{{` in inputs. Prevent browser freeze when typing unclosed `{{` in inputs. Source: llm_adapter@2026-06-04 Confidence: high |
β |
| Bugfix | Medium |
Selfβexit on socket loss to break the OOMβorphan ratchet. Selfβexit on socket loss to break the OOMβorphan ratchet. Source: llm_adapter@2026-06-04 Confidence: high |
β |
Full changelog
β¨ New Features
- feat(ai): add Mistral AI as a platform AI provider (#13088) @onyedikachi-david
- feat: formula & data manipulation functions in flow builder (#12444) @Louai-Zokerburg
- feat: Platform admins can now view run success rates, live queue depth, and 30-day health history in one dashboard (#13481) @MrChaker
- feat: show internal error to platform admin in run details (#13452) @MrChaker
- feat: show a clear error with one-click AI help when a step fails (#13453) @AhmadTash
- feat(pieces-framework): add audience + aiMetadata optional fields to action & trigger contract (#13429) @ibrahim-abuznaid
π€ AI & Chat
- feat(chat): improve AI chat reliability with instant cancel, auto-resume after stop, and connection state fixes (#13523) @hazemadelkhalel
- feat(chat): stop AI responses mid-stream, auto-recover stuck chats, and polish chat UI (#13508) @hazemadelkhalel
- feat(chat): use different models per tier and native Anthropic thinking (#13501) @hazemadelkhalel
- feat(chat): polish tool calling UX with human-friendly titles and descriptions (#13489) @hazemadelkhalel
- feat(chat): replace dual-channel parsing with pure tool calling (#13474) @hazemadelkhalel
- feat(chat): run the same action on multiple items at once with live progress (#13464) @hazemadelkhalel
- feat(chat): make display tools block execution with agentic rendering (#13456) @hazemadelkhalel
- feat(chat): add AI credits warning and exhausted banners (#13419) @hazemadelkhalel
- feat(mcp): tag MCP-created flows with an AI badge (#13402) @utopianguide
π Pieces
- feat(pieces): add Slite piece (#13535) @onyedikachi-david
- feat(pieces): add Raindrop piece (#12501) @bst1n
- feat(pieces): add AddEvent piece (#13513) @onyedikachi-david
- feat(telegram-bot): add 13 actions + new trigger + fix bugs (#13267) @AhmadTash
- feat(slashed): add slashed.cloud video encoding piece (#13520) @sanket-a11y
- feat(klipy): add piece with Search GIFs, Stickers, and Clips actions (#13512) @sanket-a11y
- feat(pieces-discord): add topic to create channel (#13502) @Khizarshah01
- feat(claude): dynamic model dropdown (#13488) @AhmadTash
- feat(quizell): add piece quiz-based product recommendation and lead capture (#13487) @sanket-a11y
- feat(tables): add Download Table action with include/exclude headers β¦ (#13511) @sanket-a11y
- feat(promotekit): replace single webhook trigger with 3 entity-specific triggers (#12502) @bst1n
- feat(EditionGuard ): add piece with send protected eBook download link (#13485) @sanket-a11y
- feat(pieces): add FeedHive piece (#12558) @bst1n
- feat(pieces): extend Beehiiv piece with delete/list subscriptions and new-subscriber webhook trigger (#12683) @Tosh94
- fix(pieces): OpenAI imagegen deprecations (#13320) @AhmadTash
- fix(google-calendar): new event webhook trigger fires on real events (#13425) @majewskibartosz
- fix(pieces): remove temp file I/O in google-gemini to fix EACCES permission error (#13457) @ragini-pandey
- feat(UXsniff): add piece with feedback and survey response triggers (#13463) @sanket-a11y
- feat(pieces): connect Activepieces to Jungle Grid for async compute jobs, status monitoring, and artifact retrieval (#13433) @dejaguarkyng
- feat(pieces): migrate Maileroo piece to v2 API with JSON transport (#13459) @kishanprmr
- feat(pieces): add Wistia piece with media & project management (#13417) @sanket-a11y
- feat(pieces): add Salesloft piece (#12138) @Harmatta
- feat(pieces): add Gorgias customer service piece (#12131) @Harmatta
- feat(buffer): add Buffer piece with publish & idea bank support (#13384) @sanket-a11y
- feat(village): migrate piece to V2 API and use context.auth.secret_text (#13413) @sanket-a11y
- feat(pieces): add Omnisend piece (#12105) @Harmatta
- feat(piece-mailgun): add bulk bounce cleanup, domain health, and threshold trigger (#12666) @bst1n
- feat(resend): extended actions (#13405) @onyedikachi-david
π¨ Enhancements & Polish
- feat: bulk export for flows inside folders (#13420) @majewskibartosz
- chore: animate showing step data section and stop hiding the section when switching between steps in a run (#13461) @AbdulTheActivePiecer
- chore: make embed subdomain verification easier (#13454) @MrChaker
- fix(truncate): truncate long text in confirmation dilaogs and search filter badges (#13444) @exvillager
π Bug Fixes & Reliability
- fix(workers): prevent silent run corruption during rolling upgrades by gating dispatch on workerβapp version (#13518) @AbdulTheActivePiecer
- fix(engine): self-exit on socket loss to break the OOM-orphan ratchet (#13409) @abuaboud
- fix(server): enforce table permissions on field endpoints (#13521) @KhaledR57
- fix(tables): require write permission to create records (#13272) @KhaledR57
- fix(server): testing queue UI (#13519) @KhaledR57
- fix(builder): prevent browser freeze when typing unclosed
{{in inputs (#13536) @Louai-Zokerburg - perf(engine): speed up piece-property validation by removing per-call schema overhead (#13326) @abuaboud
- refactor: replace non-greedy regex with brace-counter in props-resolver (#13495) @Louai-Zokerburg
- fix(ai): strip models/ prefix from Google provider model ids so Run Agent picker populates (#13468) @majewskibartosz
- fix(web): MCP Tool test dialog crashes when trigger has no input parameters (#13471) @abuaboud
- fix(git-sync): allow protocol.file.allow config write (#13408) @abuaboud
- fix(git-sync): opt in to allowUnsafeSshCommand after simple-git 3.36 bump (#13407) @abuaboud
π Documentation
- docs(piece-builder): document audience and aiMetadata fields (#13517) @ibrahim-abuznaid
- docs(piece-builder): always pass auth to dynamic dropdowns (#13414) @sanket-a11y
- docs: Fix typo for 'Activepieces' in overview.mdx (#13479) @rimjhimyadav
Thanks β€οΈ
@AbdulTheActivePiecer, @AhmadTash, @Harmatta, @KhaledR57, @Khizarshah01, @Louai-Zokerburg, @MrChaker, @Tosh94, @abuaboud, @bst1n, @dejaguarkyng, @exvillager, @hazemadelkhalel, @ibrahim-abuznaid, @kishanprmr, @majewskibartosz, @onyedikachi-david, @ragini-pandey, @rimjhimyadav, @sanket-a11y, @utopianguide
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About activepieces
AI Agents & MCPs & AI Workflow Automation β’ (~400 MCP servers for AI agents) β’ AI Automation / AI Agent with MCPs β’ AI Workflows & AI Agents β’ MCPs for AI Agents
Related context
Related tools
Beta — feedback welcome: [email protected]