Back to the changelog

• Security

  Required-data validation on every create channel

  If a flow requires **mandatory data**, the constraint is now applied **consistently across every way of creating an item** — including UI/extension creation (POST item), in addition to trigger, API and MCP. Before, UI creation could produce items with empty data despite required fields (operational and privacy risk). If a flow requires a **mandatory external entity reference** (`requireEntityRef`), the **MCP/agent** channel now **rejects** creation without one instead of inventing it — no more "ghost" items that can't be reconciled with CRM/orders/files.

• Improvement

  Persistent list filters

  The **filters** on the **Tasks** and **Items** lists (search, flow, status, type, assignee, dates) now **stay applied** when you navigate away and back, instead of resetting.