v0.7.52

## Features

- feat(zoho-desk): add Zoho Desk integration (#6157)
- feat(chat): highlight-to-chat — reference file/table selections in Chat (#6087)
- feat(library): Agentic AI Coding Tools: What They Are and How the Top Options Compare (#6164)

## Improvements

- improvement(permissions): confine workspace role changes to existing members (#6180)
- improvement(logfire): scope block outputs per operation and refresh brand chrome (#6178)
- improvement(settings): unify save/discard across editable surfaces (#6173)
- refactor(dev): remove the minimal-registry escape hatch (#6163)
- perf(tools): guard the tool-registry client boundary in CI (#6156)
- perf(tools): read tool metadata instead of the registry on client paths (#6155)
- perf(tools): generate serializable tool metadata artifacts (#6153)
- perf(tools): move mergeToolParameters into a registry-free leaf module (#6152)
- perf(dev): re-enable the Turbopack dev filesystem cache (5.4x faster restarts) (#6151)

## Bug Fixes

- fix(search): disambiguate tables and knowledge bases by folder (#6192)
- fix(chat): show table and knowledge base folders in the resource menus (#6190)
- fix(execution): stop run-buffer failures from stranding resumed executions (#6187)
- fix(chat): show deployment passwords to admins (#6177)
- fix(security): bind copilot chat attachment keys to their owner (#6179)
- fix(copilot): close fail-open write gates in agent tools (#6132)
- fix(copilot): guard document-style extraction against zip bombs (#6176)
- fix(files): authorize presigned upload contexts per type (#6175)
- fix(realtime): stop read-only members persisting block positions (#6174)
- fix(file-parsers): guard .doc uploads against zip-bomb memory exhaustion (#6166)
- fix(realtime): enforce room access continuously, not only at join (#6170)
- fix(security): validate cloud region/project inputs and bind vertex credentials to the executing workspace (#6167)
- fix(security): bound response bodies in secureFetchWithPinnedIP by default (#6169)
- fix(ssh/sftp): cap remote file reads on received bytes, not stat() size (#6168)
- fix(sanitization): secret exposure in function and agent trace spans (#6000)
- fix(styles): restore transition timing Tailwind was silently dropping (#6165)
- fix(files): serve rendered documents instead of source code (#6139)

## Other Changes

- chore(deps): bump @opentelemetry/core to 2.8.0 for CVE-2026-54285 (#6182)

## Contributors

- @BillLeoutsakosvl346
- @TheodoreSpeaks
- @icecrasher321
- @j15z
- @mzxchandra
- @waleedlatif1

[View changes on GitHub](https://github.com/simstudioai/sim/compare/v0.7.51...v0.7.52)