Changelog

• •Added debug-level logging for routine poll events to help diagnose worker behavior
• •Added debug-level logging for maintenance job lifecycle (start and completion)
• •Better observability for troubleshooting connector sync operations

• •Fixed issue where Visma connector was not properly sending null price class for items without a price class
• •Fixed issue where Visma connector was not properly sending null price class for customers without a price class assignment
• •Resolved a bug where deliveries hitting concurrency limits would not create job log entries
• •Improved reliability of the pipeline when operating at maximum capacity
• •Ensures proper logging and visibility into delivery status even under constrained conditions
• •Magento products now capture inventory management settings (manage_stock) and backorder configurations for products and variants
• •Fixed an issue where flow mapping saves could lose skipped keys data during transaction processing
• •Enhanced product snapshot data to provide more complete inventory control information for Magento integrations

3 releases · 9 commits

• •Event mapping now stamps all keys during full-list polls for better data consistency
• •Fixed discount sequence handling to properly send target type information to kShop
• •Enhanced pipeline reliability with improved time-based test stability
• •Fixed record keys in connector headers to be latin-1 safe, preventing encoding issues with special characters
• •Improved error handling to distinguish between actual network failures and refused requests

2 releases · 7 commits

• •Tripletex connector now supports posting documents directly on customer numbers
• •Improved document management workflow for Tripletex users
• •Enhanced multi-tenant connector capabilities for better integration flexibility
• •Resolved issue where iSYS pages could become stuck in an unprepared state when a circuit breaker was open
• •Fixed STATE flow to properly re-send mapped payloads when values change
• •Updated documentation for MCP tools
• •Magento source now reads customer carts and Amasty lists for better shopping data coverage
• •Fixed Magento snapshot type validation to properly handle unknown types
• •Improved Magento connector reliability with wishlist owner mismatch detection
• •Updated platform documentation and statistics
• •Strict connector definition schema validation at save time prevents invalid configurations from being stored
• •Published output schemas now allow additional properties, ensuring new fields don't break existing connected clients

+ 31 more improvements

10 releases · 94 commits

• •Implemented tenant-scoped Prisma client that automatically enforces access boundaries and returns NOT_FOUND for cross-tenant requests
• •Fixed tool handlers, resources, prompts, and shared helpers to use tenant-scoped database queries, preventing unauthorized data access
• •Corrected marketplace statistics to accurately maintain marketplace-wide install totals while respecting tenant isolation
• •Added comprehensive tenant matrix tests across all resource-dependent actions to prevent future cross-tenant vulnerabilities
• •Improved CI/CD reliability by adding fallback pnpm resolution for Playwright test environments
• •Improved Playwright test environment setup by ensuring corepack is available in CI runners
• •Enhanced test stability for multi-tenant connector deployments
• •REST API handlers now correctly enforce tenant isolation when accessing the database
• •Improved test coverage for tenant routing to catch similar issues earlier
• •Enhanced monitoring of database queries per tenant to prevent cross-tenant data leaks
• •Reduced code duplication in pipeline payload preparation
• •Improved maintainability by centralizing delivery payload logic

+ 22 more improvements

9 releases · 40 commits

• •Fixed MCP connector escalation to properly send Kaduno Tasks list data
• •Flows can now preserve keys from pushDeletes for better data consistency
• •Improved multi-tenant connector data synchronization capabilities
• •Fixed Magento products with no price snapshots now correctly show as having no price instead of zero
• •Improved sync ownership matching for type-prefixed mapping IDs to prevent data conflicts
• •Enhanced delete operations to only remove keys that the flow actually owns, preventing accidental data loss
• •Fixed destination max_in_flight configuration not being read correctly from decrypted settings
• •Improved key status tracking to correctly distinguish between unread and missing keys in sync operations
• •Enhanced preview pages and renderers to properly display unread keys and refused deletes
• •Fixed push deletes to correctly refuse operations when unread keys are present
• •Improved error handling and alerting when task filing or invitation emails fail
• •Connection updates now return redacted configs consistently with other retrieval methods

+ 45 more improvements

13 releases · 100 commits

• •Retention sweep now automatically removes rows from finished and abandoned imports to keep your database clean
• •Failed migration runs now correctly return to their starting phase and can be retried without manual intervention
• •Fixed security issue where Shopify and Meta apps now properly resolve per-tenant credentials (own, partner's, or platform)
• •Export and import operations now stream data instead of loading entire snapshots, reducing memory usage for large syncs
• •Catalog backfill resume tracking now uses high-water mark approach for better performance and reliability
• •Preview page now follows long-running operations to their final result, eliminating the 25-second REST timeout limitation
• •Added per-origin rate limiting budgets for more granular control over API request distribution across different sources
• •Fixed critical worker drain issues to ensure smooth deployments and proper operation handoff between worker versions
• •Improved catalog backfill streaming with checkpoint support for better recovery and resume capabilities
• •Enhanced Magento connector to better handle hand-created shipments with Linnworks tracking and fixed bundle shipment matching logic
• •Resolved URL paging issues including Link-header cursor support and templated metadata base URL resolution
• •Next.js admin app now builds on the live host with optimized resource allocation

+ 44 more improvements

13 releases · 116 commits

• •Prepared flows are now properly grouped and isolated by their originating store
• •Accessing a flow from a different store now displays an appropriate warning instead of allowing unauthorized access
• •Improved data isolation and security for multi-tenant environments
• •Resolved HIGH-severity security findings from audit including tenant data isolation and access control issues
• •Fixed Tripletex connector to properly isolate Flow Retail rules to their respective connections
• •Ensured catalog reads respect tenant boundaries across the platform
• •Closed multiple security vulnerabilities (PP-770, PP-771, 772, 777, 780, 783, 785, 787, 788)
• •First-time accounting connections now offer a prepared flow with department selection to streamline setup
• •Approval operations now handle non-matching name IDs gracefully instead of returning empty responses
• •Magento order lines now carry product IDs, enabling better linking when SKUs are renamed
• •Enhanced test reliability with improved rate-limit caching and OAuth timeout handling
• •New declarative rule language for advanced data filtering and transformation (all/any/not operators, regex, lookup tables)

+ 36 more improvements

10 releases · 100 commits

• •Tenant members no longer inherit partner organization clients
• •Partner section access is now properly restricted based on user roles
• •Improved access control for multi-tenant environments
• •Newsletter subscriber consent is now properly preserved during read failures, preventing data loss
• •Failed newsletter reads are now retained for retry instead of being discarded
• •Sources without scoped listing can now use snapshot.by_key and fetch.cursor_filter_field for more flexible data syncing
• •Enhanced approval monitor test stability with fixed clock timing
• •Client-credentials token refresh no longer fails fatally when a token is refused
• •Authentication tokens now persist across system reloads
• •Enhanced reliability for multi-tenant connector operations
• •Dead letters are now automatically resolved when a flow is deleted, keeping your system clean
• •View a summary of dead letters and filter them in the MCP for better visibility into issues

+ 19 more improvements

9 releases · 30 commits

• •New APPROVAL flow operations via MCP pullpush.approval protocol
• •REST API endpoints for managing approval workflows
• •Built-in monitoring for approval flow health and status
• •Full multi-tenant support for approval operations
• •Flow mode APPROVAL now holds every update for a person, enabling better control over pipeline changes
• •Magento connector now automatically includes Magezon CMS block content in product descriptions for richer product information
• •Fixed MCP tool documentation to accurately read router parameters from real Zod schemas
• •Corrected flow mode validation in pullpush.flow updates to use actual supported modes
• •Resolved 62 of 63 security audit findings to improve overall system security
• •Updated CI/CD pipeline to run on Node 24, matching production environment
• •Fixed release process to properly commit and push all stamped files from detached worktree
• •Fixed pipeline delivery to handle optional flow source connection types

+ 26 more improvements

12 releases · 45 commits

• •Corrected resolution trace names for scoped read lookup method reports
• •Improved debugging visibility for sync inspection processes
• •Improved sync operation logging to show accurate read operation names instead of generic 'snapshot-scan' labels
• •Enhanced debugging and monitoring capabilities for tracking individual key read operations
• •Magento order lookup now correctly matches orders by their order number
• •Delivery status reporting for k-shop is now accurate in order inspection
• •Improved order visibility and troubleshooting for Magento-based shops

3 releases · 6 commits

• •AI advisory actions now correctly operate as read-only operations when using READONLY API keys
• •Fixed permission grant handling to prevent unauthorized write operations on restricted accounts
• •Resolved Visma sync bug preventing cancelled kShop orders from creating corresponding sales orders
• •Improved order synchronization reliability between kShop and Visma systems
• •Fixed issue where DEPENDENCY_PENDING status was incorrectly counting against destination connection limits
• •Corrected changelog documentation for read-only key fix
• •A READONLY org key gets FORBIDDEN from every write action, checked at dispatch from each action's readOnly flag (PP-535).
• •Tenant API-key revoke, member remove and role change check the row's organization; notification policy delete checks the tenant; registration approve and reject are platform-admin only (PP-537).

4 releases · 9 commits

• •New integration: Export Magento orders to Business NXT with automatic write-back capabilities
• •Nightly base price synchronization for accurate pricing in Business NXT
• •Fixed reconciliation scheduling: daily flows now run once per day instead of hourly, reducing unnecessary processing
• •Fixed critical RCE vulnerability in image optimizer (GHSA-2464-fhr4-w9xw)
• •Updated Next.js to 15.5.28 for enhanced stability and security
• •Updated sharp to 0.35.5 for improved image processing reliability
• •Recommended immediate update for all deployments
• •Resolved scoping issues in MCP inspect functionality
• •Enhanced error messages to clarify reasons for missing HubSpot API keys
• •Fixed tenant association bug in record lineage tracking
• •Improved connector reliability for multi-tenant environments
• •New Visma Business NXT source and destination connectors for seamless data sync

+ 24 more improvements

11 releases · 24 commits