Automations GA; queueing and security profiles launch

Queueing Support for Automations

Automations now support queueing: set the maximum number of concurrent runs and queue depth per automation, see queue lifecycle states in the events table, and view an activity chart sourced from automation events. Concurrency groups are also available in the public v3 API.

Automations API and Terraform Provider

The automations API has been promoted from beta to the production v3 API spec, sessions can now be filtered by automation_id, and a devin_automation resource is available in the Devin Terraform provider.

GitLab Support in Automations

Automations now support GitLab triggers (issues, issue notes, pushes, and pipelines) with reply support on issue triggers, plus support for a GitLab service-account connection to automatically manage webhooks.

Request Channel Access from Slack

When Devin can't access a Slack channel, users now see a specific reason and can request access directly from Slack, with admin approval.

Command Palette Improvements

The command palette now surfaces session search results in top-level search, keeps rows on a single line, and nests navigation commands under a "Go to" command.

Figma Live Embeds in Link Previews

Figma links shared in chat can now render as live embeds in link preview cards.

Accessibility Improvements

A broad accessibility (WCAG 2.1 AA) pass across the webapp: proper labels and accessible names on controls, keyboard-accessible sortable tables and toggles, skip links, distinct navigation landmarks, document titles, and assertive error toast announcements.

Security Profiles

Security profiles are now generally available. Admins can define security profiles governing network access and apply them across sessions and automations, including an org-wide default and per-automation profile selection.

Legacy Cascade Disabled by Default for Enterprises

Legacy Cascade now defaults to disabled for enterprise tiers, with clarified settings copy.

Personal Access Tokens

Personal access tokens are now generally available for authenticating with Devin programmatically. Tokens are automatically revoked when a user loses account membership.

MCP Connection Improvements

MCP sessions resume automatically after completing OAuth, personal MCP connections are account-wide with OAuth scoped to the installation's organization, and marketplace MCP installs support custom server URLs.