Back to the changelog

• Improvement

  Clickable previews in cards

  In the card view of Flows and Process Maps, clicking the thumbnail opens the detail page directly, just like clicking the title.

• Security

  More private task diagnostics

  Read-only users, the browser extension and assistants connected via MCP now see task details (log, error messages, notes, answers) in a reduced form: free text is omitted or masked and credentials never appear, even when access to case data is enabled. Operators and administrators are unchanged.

• Security

  Webhooks safer against secret echo

  If an external service mistakenly returns a secret you sent it, even partially or encoded, the value is discarded before being saved and never appears in logs. Secret placeholders in request bodies are unique for each send, and calls lacking this protection are stopped instead of being executed.

• Improvement

  More robust publishing, unpublishing, deleting and archiving

  Publishing or unpublishing a flow from the MCP assistant follows the same queueing rules as the rest of the product, with a clear "try again shortly" answer on conflict. Permanently deleting a flow accounts for a new version created at the same moment, and archiving a process map re-checks permissions on the flows involved without leaving half-done operations.

• Improvement

  Warning extended to blocking tasks

  When a direct transition would skip blocking tasks, the publish warning now also covers blocking Webhooks, not just manual tasks.

• Security

  Assistant answers with no hints about other people's flows

  Asking the MCP assistant to generate a flow from one you cannot see now gets the same answer as for a non-existent flow.