Improvements

• Authentication: New field to set email verification status when creating a user

• Pipeline view: The pipeline editor now opens in fullscreen automatically when entering edit mode, instead of showing in a small inline area

• Service Catalog: Errored stacks are now shown when refreshing a catalog repository, so you can see which stacks failed and why

• StackForms: Dropdowns with only one available option now auto-select it

• Project: Add query params to getComponentConfig endpoint

• Other: App version updates no longer force a logout

• User Interface: Removed the "-saas" suffix from version labels in the UI

• API - Service Catalog: New Cycloid Special Variables stackform_updated_by_user_username and stackform_updated_by_user_email — lets your stack know which user applied the last StackForm change, useful for audit trails or ticket automation

• API - StackForms: values_ref can now return a default value alongside the list of values. Defaults can also be given directly within conditional options, so you no longer need to duplicate conditions for values and defaults separately

• API - Other: Cyclobot AI configuration, exposes config for the Cycloid AI project via the /config endpoint. Disabled by default

• API - Other: New endpoints for fetching and deleting the subscription attached to an organization

• API - Pipeline: Editing a live pipeline no longer applies templating. Templating only runs during pipeline sync from git, using the provided YAML vars

• API - Service Catalog: Catalog refresh now processes each stack independently. If one stack has an error, the rest still refresh, errors are collected and returned in the response

• API - Service Catalog: You can now create new catalog repositories even if they contain invalid stacks. Valid stacks are imported and validation errors for invalid stacks are attached to the response

• API - Performance: Catalog repository version refresh is now faster thanks to increased worker concurrency

• API - Other: API responses can now contain multiple error details in a single response

• API - Other: Config repository branches no longer appear in the stack versions list

Fixes

• Authentication: Email field now pre-fills correctly when using an invitation link

• Credentials: Fixed an error when changing a credential's type (e.g. from custom to basic auth) that caused a backend parsing failure

• Dashboard: Fixed incorrect tooltip content when switching organizations via MSP to a child organization

• Pipeline: Editing a live pipeline no longer fails on save due to templating, live edits now skip templating entirely

• Project: Fixed an issue where creating two projects in a row left the Next button disabled

• StackForms: Fixed autocomplete widget clearing your input unexpectedly

• StackForms: Fixed dropdown widget showing no data on first validation or when changing a key

• StackForms: Default values now display correctly when the saved configuration is empty

• TerraCost: Cost estimation errors are now displayed on the console

• Other: Fixed visual regressions in stack preview panel, tabs and version table styling corrected

• API - Authentication: Direct OIDC login now works for children organizations

• API - Authentication: Incoming OIDC email addresses are now normalized to lowercase, preventing duplicate accounts or login failures from case mismatches

• API - Authentication: OIDC login now automatically accepts pending user invitations, users no longer need to be re-invited after signing in via OIDC for the first time

• API - Roles: Project Creator role now includes list and read permissions for cost accounts and service catalog

• API - StackForms: Fixed a crash when configuring a component with complex mapped values in StackForms

• API - Other: Fixed error handling so the protected or outermost error message is always returned correctly

• API - Other: HTTP requests that previously returned 500 for AlreadyConfigured, Exceeded, and Unavailable error codes now return the correct status codes

• API - Other: Cost estimation returns a user friendly error on invalid stack input

• API - Other: The scs_version parameter is no longer required on various API endpoints. If omitted, it now falls back to the SCS branch

Removed

• API - StackForms: Removed support for values_ref inside conditional options. This was undocumented and unused. Remote values via values_ref at the vars level still works

Security

• Authentication: Client secret in OIDC and GitHub settings is now write-only

• API - Authentication: client_secret is no longer returned by the /authentications endpoint when OIDC is configured.