twenty/v2.44.0 v2.11.6

high risk

ruvnet/RuViewOct 1, 2026 → Oct 1, 20260 days between releases

What's New

Adds security hardening, Slowloris mitigation, and HTTP/3 support.

Breaking Changes

  • Go 1.26 is now the minimum version.
  • Request headers limited to 16 KiB by default.
  • 1-minute idle read/write timeouts by default.
  • Request header fields containing '.' are now dropped.
  • Stricter config validation rules applied.

New Features

  • New `url_pattern` request matcher.
  • Idle timeouts configuration.
  • HTTP/3 support over low-MTU links.
  • Header filtering improvements.

Improvements

  • Slowloris mitigation with idle read/write timeouts.
  • Performance optimizations.
  • Security fixes for reverse proxy and header handling.

Upgrade Notes

Ensure your environment supports Go 1.26 and review header size limits. Adjust idle timeouts if requests exceed 1 minute. Update configuration to match new validation rules.

The Two Releases

twenty/v2.44.0

twenty/v2.44.0

Oct 1, 2026· 21 days ago

A major release introducing workflow agent pausing, conversation recording, and manifest-based variable declarations.

Full release notes
v2.11.6

v2.11.6

Oct 1, 2026· 21 days ago

A patch release introducing security hardening, new request matchers, Slowloris mitigation, and various reverse proxy improvements.

Full release notes