cloud-1.40.0
parruda/swarmcloud-1.40.0Jun 26, 2026by openhands-release-bot[bot]
AI Summary
A feature-rich release for OpenHands Cloud adding enterprise capabilities, integrations, and critical security patches.
Key Highlights
- Added full Git history user setting
- Added admin user-provisioning endpoint
- Added Azure DevOps resolver mentions and org-level webhooks
- Added Jira DC email-mode auto-linking
- Updated multiple dependencies to fix CVEs
New Features
- Git history user setting
- Admin provisioning endpoint
- Azure DevOps/Jira DC enhancements
- Security patches (OpenTelemetry, Pydantic, Protobuf, WS)
Full Release Notes
## 1.40.0 (2026-06-26) <!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed ### Features * feat: Add full Git history user setting by @malhotra5 in https://github.com/OpenHands/OpenHands/pull/14950 * feat(enterprise): add admin user-provisioning endpoint by @chuckbutkus in https://github.com/OpenHands/OpenHands/pull/14864 * feat: Use interrupt endpoint for agent pause UI by @malhotra5 in https://github.com/OpenHands/OpenHands/pull/14972 * feat: add default_sandbox_spec_id to user settings by @tofarr in https://github.com/OpenHands/OpenHands/pull/14985 * feat(azure-devops): add resolver mentions + org-level one-click webhook setup by @ak684 in https://github.com/OpenHands/OpenHands/pull/14991 * feat(jira-dc): email-mode auto-link, targeted repo lookup, and picker mentions by @ak684 in https://github.com/OpenHands/OpenHands/pull/15001 ### Bug Fixes * fix: avoid decrypting org_member.llm_api_key when not set by @saurya in https://github.com/OpenHands/OpenHands/pull/14898 * fix: Fix CVE-2026-54285: Update @opentelemetry/core to 2.8.0 by @mamoodi in https://github.com/OpenHands/OpenHands/pull/14980 * fix: Fix GHSA-4xgf-cpjx-pc3j: Update pydantic-settings to 2.14.2 by @mamoodi in https://github.com/OpenHands/OpenHands/pull/14979 * fix: Fix CVE-2026-48712: Update protobufjs to 7.6.4 by @mamoodi in https://github.com/OpenHands/OpenHands/pull/14981 * fix: handle None git_full_clone from DB in SaasSettingsStore by @tofarr in https://github.com/OpenHands/OpenHands/pull/14988 * fix(frontend): stop polling app-conversations with task IDs on new conversation by @hieptl in https://github.com/OpenHands/OpenHands/pull/14989 * fix: return actionable error when Jira DC token endpoint is unreachable by @ak684 in https://github.com/OpenHands/OpenHands/pull/14990 * fix(llm): restore managed member-key fallback in effective LLM key resolution by @ak684 in https://github.com/OpenHands/OpenHands/pull/14992 * fix: Fix CVE-2026-48779: Update ws to 8.21.0 by @mamoodi in https://github.com/OpenHands/OpenHands/pull/15007 * fix: remove duplicate Close button on the org invite links modal by @ak684 in https://github.com/OpenHands/OpenHands/pull/14974 ### Documentation * docs: fix dead link to self-hosting guide in README by @tomsen-ai in https://github.com/OpenHands/OpenHands/pull/14975 ### Maintenance * chore(security): add Python dependency freshness guardrails by @nehaaprasad in https://github.com/OpenHands/OpenHands/pull/13754 * chore(deps-dev): bump jupyterlab from 4.5.7 to 4.5.9 by @dependabot[bot] in https://github.com/OpenHands/OpenHands/pull/15009 ## New Contributors * @tomsen-ai made their first contribution in https://github.com/OpenHands/OpenHands/pull/14975 **Full Changelog**: https://github.com/OpenHands/OpenHands/compare/cloud-1.39.0...cloud-1.40.0 --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).