sdk/v2.27.0

givanz/Vvvebsdk/v2.27.0Aug 4, 2026by twenty-pr[bot]

AI Summary

This SDK update introduces an onDisconnect lifecycle hook for connection providers and enhances security by migrating web authentication from localStorage to httpOnly cookie sessions. It also includes improvements to page layout handling and password reset security.

Key Highlights

  • Added onDisconnect lifecycle hook to connection providers
  • Migrated web auth from localStorage to httpOnly cookie sessions
  • Added captcha and throttling to password reset links
  • Made page layout tab layoutMode diffable and changed defaults to vertical lists

New Features

  • onDisconnect lifecycle hook for connection providers

Full Release Notes

<!-- generated-release-notes v1 -->

## ✨ New features

- feat(connections): add an onDisconnect lifecycle hook to connection providers ([#23538](https://github.com/twentyhq/twenty/pull/23538)) by @abdulrahmancodes

## 💅 Improvements & UX

- Add captcha and throttling to the password reset link ([#23372](https://github.com/twentyhq/twenty/pull/23372)) by @bosiraphael
- Make page layout tab layoutMode diffable and default standalone pages to vertical list ([#23596](https://github.com/twentyhq/twenty/pull/23596)) by @bosiraphael
- Unwrap settings front components in the front component build ([#23631](https://github.com/twentyhq/twenty/pull/23631)) by @ehconitin
- Migrate web auth from localStorage token pairs to httpOnly cookie sessions ([#23642](https://github.com/twentyhq/twenty/pull/23642)) by @FelixMalfait
- Remove outdated index view pitfall from app agent docs ([#23667](https://github.com/twentyhq/twenty/pull/23667)) by @prastoin
- Record and enforce per-user OAuth application authorizations ([#23678](https://github.com/twentyhq/twenty/pull/23678)) by @FelixMalfait

<details>
<summary>Full changelog (9 PRs)</summary>

- Add captcha and throttling to the password reset link ([#23372](https://github.com/twentyhq/twenty/pull/23372)) by @bosiraphael
- feat(connections): add an onDisconnect lifecycle hook to connection providers ([#23538](https://github.com/twentyhq/twenty/pull/23538)) by @abdulrahmancodes
- Make page layout tab layoutMode diffable and default standalone pages to vertical list ([#23596](https://github.com/twentyhq/twenty/pull/23596)) by @bosiraphael
- chore: bump version to 2.27.0 ([#23604](https://github.com/twentyhq/twenty/pull/23604)) by @twenty-pr
- Move open-record-in to object metadata and member preference ([#23614](https://github.com/twentyhq/twenty/pull/23614)) by @FelixMalfait
- Unwrap settings front components in the front component build ([#23631](https://github.com/twentyhq/twenty/pull/23631)) by @ehconitin
- Migrate web auth from localStorage token pairs to httpOnly cookie sessions ([#23642](https://github.com/twentyhq/twenty/pull/23642)) by @FelixMalfait
- Remove outdated index view pitfall from app agent docs ([#23667](https://github.com/twentyhq/twenty/pull/23667)) by @prastoin
- Record and enforce per-user OAuth application authorizations ([#23678](https://github.com/twentyhq/twenty/pull/23678)) by @FelixMalfait

</details>

**Full Changelog**: https://github.com/twentyhq/twenty/compare/sdk/v2.26.0...sdk/v2.27.0