v0.3.6
multica-ai/multicav0.3.6May 22, 2026by github-actions[bot]
AI Summary
Enhances landing page with a Contact Sales page and hardens security with defense-in-depth measures for attachments and database operations.
Key Highlights
- Contact Sales page and inquiry endpoint
- Workspace-level always_redact_env setting
- Security fix: force attachment disposition for SVG uploads
- Scope DELETE/UpdateIssueStatus by workspace_id
New Features
- Live agent activity chip + per-issue indicator
- Redesign board card layout
- Strip leaked tool markup safely in Pi adapter
Full Release Notes
## Changelog * 74f4d5a8fc066c97e1a3b60c235a809b8fa8f71e MUL-2510 fix(api): use instance_id in deleteCloudRuntimeNode body (#3009) * 5bacfd974262514de7ae954372bead6bed72affe MUL-2526 feat: add member(user_id, workspace_id) index + upgrade sqlc to v1.31.1 (#3046) * 0339599ff6068c3019238bd043a732f44b2592b3 docs(changelog): add 2026-05-22 release notes (#3082) * f2e6dc75bd642a6192aa5a1ee706f70dcecf1f76 feat(create-issue): collapse start date into ⋯ overflow menu (#3063) * ba9714a36492084e5f5a2c143a0f3ff2c24a0c9a feat(desktop): support macOS swipe navigation (#2997) * fedd0f16944bd8ebbb869bd2c8b4d4f3b98783d3 feat(issues): live agent activity chip + per-issue indicator + filter (#3058) * 0bb51ccd0e4554d5cb4261f115d32b03f5d7c21d feat(issues): mention parent assignee in child-done system comment (MUL-2538) (#3065) * c967ae0e0efe03998143e83394a728b5f95af7c8 feat(issues): platform-owned parent notify on child done (MUL-2538) (#3055) * e0b756f51502c5a9439d6995f9b241a3dbe71ede feat(issues): redesign board card layout + extract useTimeAgo i18n hook (#3064) * 7984606eedfdeeeda7eaeaebe84a2d45011c0915 feat(landing): add Contact Sales page and inquiry endpoint (MUL-2493) (#2988) * 38ea02e60c1659d6e9007a321cb22ade6ada6da2 feat(landing): move Contact Sales to hero as text-only link (#3056) * d6fdd8d74e6a597718389bd629419a943269702f feat(onboarding): upgrade welcome_page card to slides + add Helper Stay-current rule (#3073) * fbd965e5bf776795f383def7cdb32aab1ddfc17c feat(onboarding): v3 — thin server, frontend-orchestrated welcome (#3008) * eefc6cebaa41e58177c7925cac5236c060e103f2 feat(server): add workspace-level always_redact_env setting (MUL-2495) (#2367) * a55c03a0b306ac192bff1638b8c71f66ba367987 fix(agent): inject Workspace Context into agent brief (MUL-2542) (#3078) * b9602adabe321349688670a4a1f6ac4c02d69b5a fix(handler): validate skill id UUID at request boundary (#3025) * bc056cf0eaff917f10be5a3d33eddc08e4d8cc43 fix(landing): call API origin directly from Contact Sales form (#3054) * f0a6738ed955d80c0d910477fd2ce6a896cda849 fix(landing): scroll to success card and simplify CTA on contact sales (#3057) * 5bc77f2953d1c3589af4a8e3caf208d0a2707c78 fix(pi): strip leaked tool markup safely (#2956) * ed8f43867c31a7994d974c454f2b7f3fc7e5dca2 fix(runtimes): guard delete for self-healing local runtimes (#3076) * 295df8d928fb8c54aa324b5d3809759aa5217e32 fix(security): force attachment disposition for SVG uploads (#3023) * 424f67f7cb902cedfbf2d72ef9c0a85d3f6ec039 fix(security): normalize MIME type in isInlineContentType (#3050) * 5d9293b8d0a49c98697f0ec964149be67048f89f fix(selfhost): remove unused db exposed port (#3040) * 41788d2728f53e21eb964b14bd812524a8d00573 fix(settings): i18n the desktop Updates tab (MUL-2515) (#3014) * 4ee5d5acdd193a54078dfc0bcd078733aedd96bc fix(skills): improve mobile skill readability (#2973) * 46a29b1ebb1a6dd4d5407258d29d7c5ec6f2347e fix(squads): warn leader against double-triggering an agent (#3053) * a5582198ab6c030a74ab351344836009b27d75fe fix(views): widen assignee picker and add text truncation (#2947) (#3044) * 1c91c2a3b2d25dff3bf9e31844c94831b3c20fb0 security(db): scope DELETE/UpdateIssueStatus by workspace_id (defense-in-depth) (#3027) * a6f19380b2c368e3cc0356fd93e7c1909c2a0f32 test(agent): use ForkLock helper to fix ETXTBSY flake in thinking tests (#3062)