This release adds 4 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+7 more
Summary
AI summaryBroad release touches π Bug Fixes, chat, β¨ Exciting New Features, and π Pieces.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Users can rate chat replies with thumbs up/down and provide feedback. Users can rate chat replies with thumbs up/down and provide feedback. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Feature | Low |
Webhooks can receive large file uploads without memory limits. Webhooks can receive large file uploads without memory limits. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Feature | Low |
Truncated step inputs in flowβrun details are explained instead of showing a raw placeholder. Truncated step inputs in flowβrun details are explained instead of showing a raw placeholder. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Performance | Low |
Docker image size is optimized. Docker image size is optimized. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Bugfix | Medium |
File uploads no longer send empty or corrupted files. File uploads no longer send empty or corrupted files. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Bugfix | Medium |
Approval link creation shows "link expired" when email scanners prefetch approval emails. Approval link creation shows "link expired" when email scanners prefetch approval emails. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Bugfix | Medium |
Saving a variable no longer triggers Chrome's password breach warning. Saving a variable no longer triggers Chrome's password breach warning. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Bugfix | Medium |
Deletes platform users correctly even if they were the last active session. Deletes platform users correctly even if they were the last active session. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Bugfix | Medium |
Limits chat message sending frequency to prevent flooding. Limits chat message sending frequency to prevent flooding. Source: llm_adapter@2026-07-17 Confidence: high |
β |
| Bugfix | Medium |
Enforces project role for ap_execute_action and ap_run_code actions in chat. Enforces project role for ap_execute_action and ap_run_code actions in chat. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
| Bugfix | Medium |
Adds missing Prometheus queue metrics endpoint for selfβhosted workers. Adds missing Prometheus queue metrics endpoint for selfβhosted workers. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
| Bugfix | Medium |
Restricts provider changes to platform admins only. Restricts provider changes to platform admins only. Source: llm_adapter@2026-07-17 Confidence: low |
β |
| Bugfix | Low |
Shares one Redis subscriber for approvalβgate waits in chat. Shares one Redis subscriber for approvalβgate waits in chat. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
| Bugfix | Low |
Handles approval timeβouts gracefully instead of treating them as cancellations in chat. Handles approval timeβouts gracefully instead of treating them as cancellations in chat. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
| Bugfix | Low |
Prevents chat agent from acting on hidden external data instructions. Prevents chat agent from acting on hidden external data instructions. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
| Bugfix | Low |
Publishes embed SDK versions to the CDN automatically. Publishes embed SDK versions to the CDN automatically. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
| Bugfix | Low |
Recovers stuck STREAMING conversations and keeps gate cards visible on remount in chat. Recovers stuck STREAMING conversations and keeps gate cards visible on remount in chat. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
| Bugfix | Low |
Prevents step name label overlap in horizontal canvas layout of the builder. Prevents step name label overlap in horizontal canvas layout of the builder. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
| Bugfix | Low |
Guards MCP tool test dialog against nonβarray inputSchema. Guards MCP tool test dialog against nonβarray inputSchema. Source: granite4.1:30b@2026-07-17-audit Confidence: high |
β |
Full changelog
π Pieces
- fix(pieces): file uploads no longer send empty or corrupted files (#14263) @majewskibartosz
- fix(approval): Create Approval Links shows "link expired" when email scanners prefetch approval emails (#14255) @majewskibartosz
- feat(mcp-client): add piece to call external MCP server tools (#14221) @sanket-a11y
β¨ Exciting New Features
- feat(chat): let users rate replies with thumbs up/down and share feedback (#14277) @hazemadelkhalel
- feat(webhooks): receive large file uploads without memory limits (#14251) @abuaboud
- feat(flow-runs): explain truncated step inputs in run details instead of a raw placeholder (#14151) @majewskibartosz
- feat: optimize docker image size (#14232) @MrChaker
π Bug Fixes
- fix(ai-providers): restrict provider changes to platform admins (#14066) @KhaledR57
- fix(variables): saving a variable no longer triggers Chrome's password breach warning (#14198) @majewskibartosz
- fix(chat): share one Redis subscriber for approval-gate waits (#14282) @hazemadelkhalel
- fix(user): deleting a platform user fails on first attempt when they were the last active session (#14190) @sanket-a11y
- fix(chat): limit how often a user can send chat messages to prevent flooding (#14264) @hazemadelkhalel
- fix(analytics): Impact "Automation Runs" tile now sums all days instead of one (#14261) @majewskibartosz
- fix(chat): handle approval time-outs gracefully instead of treating them as cancellations (#14262) @hazemadelkhalel
- fix(chat): prevent chat agent from acting on instructions hidden in external data (#14259) @hazemadelkhalel
- fix(chat): enforce project role on ap_execute_action and ap_run_code (#14258) @hazemadelkhalel
- fix(embed-sdk): publish embed SDK versions to the CDN automatically (#14246) @majewskibartosz
- fix(chat): recover stuck STREAMING conversations; keep gate cards visible on remount (#14242) @hazemadelkhalel
- fix(builder): step name labels no longer overlap in horizontal canvas layout (#14204) @majewskibartosz
- fix(web): guard MCP tool test dialog against non-array inputSchema (#14217) @kishanprmr
- fix(workers): Prometheus queue metrics endpoint missing on self-hosted (#14192) @majewskibartosz
Thanks β€οΈ
@KhaledR57, @MrChaker, @abuaboud, @automated-commits-ap, @hazemadelkhalel, @kishanprmr, @majewskibartosz and @sanket-a11y
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About activepieces
AI Agents & MCPs & AI Workflow Automation β’ (~400 MCP servers for AI agents) β’ AI Automation / AI Agent with MCPs β’ AI Workflows & AI Agents β’ MCPs for AI Agents
Related context
Related tools
Earlier breaking changes
- v0.85.0 Require write permission to create records in tables.
Beta — feedback welcome: [email protected]