Releasesby GlyphPersonal Access Tokens Default to Approval Required
Enterprises that have not configured a PAT policy now default to approval required: members can request a PAT and an enterprise admin approves it. Admins can still switch to self-serve or disable PATs.
Also shipped Oct 30, 2026Cognition in October 2026 →
Microsoft Graph Logs connector is available in Beta
The Microsoft Graph Logs connector is now in beta for Databricks Lakeflow Connect, supporting incremental ingestion of security alerts from Microsoft security products.
Hybrid table support for Google Cloud (Preview)
Snowflake hybrid tables are now supported in all Google Cloud commercial regions in preview.
External OAuth for Snowflake Postgres (General availability)
External OAuth for Snowflake Postgres is now generally available, allowing authentication via external identity providers.
Spanner supports equality and ordering comparisons on JSONB and JSON values
Spanner now allows equality and ordering comparisons on JSONB and JSON values directly in GROUP_BY and ORDER BY clauses. It also supports implicit type coercion and search indexes for JSON equality operations.
[In preview] Public Preview: Support database-level managed identity (including FIC) in Create Database Scoped Credential T-SQL
Users can now assign a user-assigned managed identity to individual databases in Azure SQL Database. This enables secure access to files in Azure Blob Storage and Data Lake Storage Gen2 via external tables and OPENROWSET.
Inference request metadata logging (GA)
Inference request metadata logging is now generally available for Gemini and Claude models. It records model usage, latency, and error codes without capturing prompt or response content.
More from DevinEvery Devin release →
Rendered Previews for Markdown and Patch Files from Devin's Machine
Markdown and .patch/.diff files opened from Devin's machine now open as a rendered preview, like attachments do, with a toggle back to the source.
Files Tab Improvements
Folders that contain only a single sub-folder open all the way down in one click (shown as parent / child), and each session's expanded folders are kept when you switch between sessions.
Multi-line Secret Values
Editing an existing secret now accepts multi-line values (for example private keys or JSON files) without collapsing them to a single line.
GitHub File Anchors Open the Review at That File
GitHub pull request links that point at a specific file (#diff-…) now open Devin Review at that file in the web app and Devin Desktop.
Header Scripts for MCP Servers on the Session Machine
MCP servers pinned to the session machine can set a header script: a command run before each call that prints the headers to send, for servers that need short-lived tokens. Admins set it on a plugin's server in Settings.
Personal Plugins Live-Reload into Running Sessions
Personal plugins (and their MCP tools) that you install or edit now show up in your running sessions without starting a new one. With "Auto-approve actions on your behalf" on, Devin can save, install and update your personal plugins and skills without an approval card, and reinstalling a plugin updates it in place.
New Security Connections: SonarQube, Linear and Vanta
Security connections can now ingest findings from SonarQube, a Linear team (with two-way state and priority sync) and Vanta. Dismissing, reopening or resolving a GitHub Advanced Security finding in Devin updates the alert in GitHub, and issues Devin creates in Linear link back to the finding.
Typed Finding Tags
Threat-model profiles can define tag kinds (for example CVE); scans and connection imports report each finding with a value per kind, shown as key/value tags on the finding, filterable under Fields in the findings list.