Twenty - Package Updates

[Package Updates]

[1.19.0]

• Update twenty to 2.43.0
• Full Changelog
• feat(record-form): make the record creation form the default path (#25907) by @thomtrp
• [BREAKING_CHANGE] refactor(server): compute the application-scoped core schema server-side (#26439) by @prastoin
• feat(application): deprecate uploadApplicationFile and drop the CLI multipart fallback (#26379) by @martmull
• feat(files): upload workspace logos and profile pictures with direct upload (#26382) by @martmull
• feat(ai): add evaluation models and a Classify workflow node (#26225) by @FelixMalfait
• feat(sharing): unify record access and enable multiplayer chats (#26348) by @FelixMalfait
• feat(usage): meter common API calls in complexity points (#26671) by @etiennejouan
• fix(security): enforce object-level role permissions on system object writes (#24309) (#25809) by @mini0n-ai
• fix(shared): reject scheme-relative backslash urls in isSafeUrl (#26397) by @Belkouche
• fix(workflow): keep runs alive for if/else and skip edges across the continuation boundary (#26271) by @thomtrp

[Package Updates]

[1.20.0]

• Update twenty to 2.44.0
• Full Changelog
• feat(workflow): record each agent step execution as a conversation (#26765) by @FelixMalfait
• feat(workflow): let an agent step pause on a question until someone answers (#26766) by @FelixMalfait
• [BREAKING_CHANGE] Declare application registration variables through the manifest only (#26856) by @prastoin
• feat(slack): report a broken connection through the app health check (#26414) by @abdulrahmancodes
• feat(server): make the OTLP metrics temporality configurable (#26857) by @etiennejouan
• feat(mcp): add opt-in direct tool mode (?mode=direct) (#26892) by @UditSinghChauhan
• feat(ai): answer every Ask through answerAsk, let agents propose emails and wait on several Asks at once (#26930) by @FelixMalfait
• fix(front): record page pagination on views sorted by a boolean field (#26500) by @BOHEUS
• fix(billing): identify subscription items by product key, not by quantity (#26635) by @etiennejouan
• fix(search): restrict ILIKE fallback to CJK input (#26926) by @Weiko

[Package Updates]

[1.21.0]

• Update twenty to 2.45.0
• Full Changelog
• feat(logic-function): identify the function in live logic function logs (#27079) by @Weiko
• fix: harden two-factor authentication against impersonation and OTP guessing (#26583) by @abdulrahmancodes
• fix(apps): pin the media-notes example to published SDK versions (#27011) by @Weiko
• fix(front): keep disabled sortable widgets accessible (#27015) by @FelixMalfait
• fix(workflow): show the selected count on the core workflows index (#27016) by @thomtrp
• fix(front): See Workflow from the workflow runs table and hide See Version with core workflows (#27022) by @thomtrp
• fix(server): release the migration runner connection before failure cleanup (#27024) by @charlesBochet
• fix(workflow): polish the core workflows index and its command menu (#27066) by @thomtrp
• fix(ai-chat): strip NUL bytes from message parts before persisting (#27101) by @etiennejouan
• fix(settings): role save onSuccess, saving state and permissions fallback (#27103) by @FelixMalfait

[Package Updates]

[1.22.0]

• Update twenty to 2.46.0
• Full Changelog
• fix(mcp): declare containsAny operator for MULTI_SELECT filter schema (#26748) by @PINYOPATTANAWASANPORN
• feat(sharing): reshape record sharing API and share panel (#27121) by @FelixMalfait
• feat(usage-limit): replace the limit meter with a usage unit (#27124) by @etiennejouan
• refactor(ai): drop unused agent history repository registrations and errorDetails field (#27197) by @FelixMalfait
• Remove the install apps onboarding step and rely on pre-installed apps (#27374) by @etiennejouan
• Track application upgrade as a queued job with progress (#27526) by @martmull
• sendInboxMessage takes workspaceMemberIds; one thread key is one conversation (#27615) by @FelixMalfait
• feat(cli): introduce the Twenty command line (#27295) by @Weiko
• feat(workflow): waits as a first-class step outcome, Wait for Event node, agent waits (#27247) by @FelixMalfait
• fix(auth): make login tokens single use (#26614) by @addyCooks

[Package Updates]

[1.23.0]

• Update twenty to 2.48.0
• Full Changelog
• Gate validation rules behind the record creation form flag (#28004) by @thomtrp
• Verify IMAP and SMTP server certificates by default (#28115) by @charlesBochet
• Stop the New AI Provider form from shadowing built-in providers (#28155) by @etiennejouan
• feat(slack): continue one agent conversation per Slack thread (#27365) by @abdulrahmancodes
• feat: allow API keys to export records (#27941) by @Weiko
• feat(usage-limit): cap an application's credits across all usage (#27998) by @etiennejouan
• feat(billing): support more than two billing plans with server-declared plan switches (#28080) by @etiennejouan
• fix(front): pre-fill currency field default in record creation form (#27257) by @hussnainahmedd
• fix(ai-chat): cancel removed AI chat uploads and keep the message when send is refused (#28081) by @etiennejouan
• fix(billing): make direct subscription creation idempotent (#28084) by @etiennejouan

[Package Updates]

[1.24.0]

• Update twenty to 2.49.0
• Full Changelog
• [BREAKING_CHANGE] feat(usage): spend user credits on AI chat and web search before workspace credits (server) (#27944) by @etiennejouan
• [BREAKING_CHANGE] Let Ada and agents react to messages with an emoji (#28124) by @FelixMalfait
• Unify PhoneCountryPicker composition (#28169) by @bosiraphael
• feat(website): carry ?via= partner attribution to app sign-up links (#28157) by @etiennejouan
• feat: simplify app owner installation statistics (1/4) (#28203) by @martmull
• feat: add app auto-update installation counts (2/4) (#28204) by @martmull
• feat: add application credit usage with ClickHouse query caching (3/4) (#28205) by @martmull
• fix(server): rebuild the foreign key when a relation's onDelete changes from unset (#27472) by @devjotaduo
• fix(clickhouse): wait for each migration ALTER on all replicas (#28265) by @etiennejouan

[Package Updates]

[1.25.0]

• Update node-base | final to 24-20261021
• security: fix eMudhra cert compromise

[Package Updates]

[1.25.1]

• Set APP_VERSION so Twenty reports its running version

[Package Updates]

[1.26.0]

• Update twenty to 2.52.0
• Full Changelog
• Let apps connect accounts through their own authorization flow (#28672) by @FelixMalfait
• Run upgrade:2-51:migrate-rich-text-to-tiptap after upgrading to convert existing rich text records to TipTap format. (#28486) by @neo773
• The blocknote sub-field on rich text in the GraphQL and REST APIs is now deprecated; switch to markdown or tiptap before it is removed. (#28488) by @neo773
• Billing plan configuration now lives in the BILLING_PLANS environment variable; update your server config. (#28552) by @etiennejouan
• Relabel the app permissions as Workspace Apps and User Apps and enforce User Apps on the server (#28083) by @ehconitin
• fix(front): pin record table columns with logical insets so they work in RTL (#28379) by @almoghazaz-cell
• fix(metadata-store): adopt new collection hash on replaceDraft when data is unchanged (#28412) by @ghazy2001
• fix(record-form): block submission when field input has validation error (#28425) by @ghazy2001
• fix(front): keep cached relation picker results clickable while Search refreshes (#28458) by @lineico
• fix(onboarding): add aria-labels to invite team email inputs (#28748) by @zacyungblut

[Package Updates]

[1.27.0]

• Update twenty to 2.53.1
• Full Changelog
• @azure/msal-node was upgraded to 7.x. If your workspace uses Microsoft authentication, verify that token refresh works after upgrading. (#28969) by @BOHEUS
• The isCustom field has been removed from agents, skills, views, indexes, and agent chat channels. A database migration runs automatically on upgrade. (#29052) by @FelixMalfait
• The inbox sidebar now expands each channel into Open, Assigned, Snoozed, and Done views, each with its own unread count. (#28868) by @bosiraphael
• Records on any object can now be merged, not just Company and Person. (#29042) by @FelixMalfait
• The AI chat can now merge duplicate records, using the same logic as the Merge action in the app. (#29115) by @etiennejouan
• The inbox navigation badge now shows the count of unread open conversations, displayed as 99+ for large numbers. (#29133) by @bosiraphael
• Spreadsheet imports now survive partial failures: confirmed rows are kept and invalid ones remain editable for correction. (#28709) by @grootbro
• HTTP workflow requests now read the Content-Type header case-insensitively, and bodies with a value of false or 0 are no longer dropped. (#28738) by @grootbro
• Members holding an application's default role no longer get full permissions on objects where certain actions are disabled. (#29103) by @charlesBochet
• Unknown currency codes and lowercase codes (e.g. 'XYZ', 'usd') are now rejected on write instead of being stored silently. (#29126) by @etiennejouan

[Package Updates]

[1.28.0]

• Update twenty to 2.54.0
• Full Changelog
• Remove the IS_MESSAGE_CAMPAIGN_ENABLED feature flag (#28929) by @neo773
• Round-trip workflows built in the workflow builder through the manifest (#29053) by @FelixMalfait
• [BREAKING_CHANGE] Replace vetted apps with marketplace listing (#29187) by @martmull
• feat(view): let workspaces declare per-locale view name translations (#29095) by @ijreilly
• feat(ai): collapse long user messages in the chat thread (#29191) by @etiennejouan
• feat(cli): pull application dependency files (#29197) by @Weiko
• feat(billing): show what each seat includes and where workspace credits come from (#29202) by @etiennejouan
• feat(cli): pull existing apps or initialize the workspace custom app (#29207) by @Weiko
• fix(rich-text): keep nested task item content out of markdown code blocks (#28821) by @UditSinghChauhan
• fix(server): rebuild ORM table shapes after a field rename (#29244) by @etiennejouan

[Package Updates]

[1.29.0]

• Update twenty to 2.55.0
• Full Changelog
• Every webhook now requires a role. Pass a roleId when calling createWebhook, and provide the ROLES permission alongside API_KEYS_AND_WEBHOOKS to create or edit webhooks. (#29273) by @charlesBochet
• App settings tabs now support a URL slug. Connect and Reconnect now land on the app's first settings tab; any bookmarked routes to tab fragments may need updating. (#29355) by @martmull
• setRecordGeneralAccess is removed. Use setRecordPrivate(true) to restrict a record to its creator and explicit shares, or setRecordPrivate(false) to let roles govern access. (#29383) by @charlesBochet
• IconsProvider has moved out of twenty-ui/icon. Update any imports that reference it from that path. This also removes roughly 2 MB of icon code from shared bundles. (#29386) by @FelixMalfait
• readability, writability, sharingReach, readabilityParentFieldUniversalIdentifiers, and fieldMetadata.writability are removed from the metadata GraphQL and REST APIs. (#29390) by @charlesBochet
• AI chat can write a frontend component, show it with your actual records, and publish it to the workspace widget picker. (#28730)
• Records can be marked private, making them visible only to their creator and the people they are directly shared with. (#29378)
• Bar and line charts now include the Not Set group for select and date fields when Omit zero values is off. (#28825) by @arnavsingh0418
• The CLI no longer rejects a valid pulled config when the workspace app's default role exists in the workspace but not in the local manifest. (#29318) by @Weiko
• Email and calendar workflow steps no longer inject a default files key that caused twenty app pull to report unchanged workflows as modified. (#29360) by @FelixMalfait