SaaS Release — 2026-08-31 to 2026-09-13
Window: 2026-08-31 → 2026-09-13
Highlights
Section titled “Highlights”Early-access Microsoft 365 Copilot governance
Section titled “Early-access Microsoft 365 Copilot governance”Organizations with governed early-access integrations enabled can connect Microsoft 365 Copilot through an application credential. The integration covers adoption and user activity, interaction and audit-event review, license management, and the Copilot agent catalog. Tenant licensing and Microsoft reporting settings determine which data is available.
Integrations
Section titled “Integrations”New data and vulnerability-management tools
Section titled “New data and vulnerability-management tools”Kindo expands its early-access integration coverage with:
- Google BigQuery tools for dataset and schema discovery, query-cost estimates, read-only queries, and paged results. Dataset allowlists and scan limits help admins bound access and spend.
- Armis VIPR Pro tools for finding asset-level vulnerability exposure and summarizing remediation posture.
Application-mode SharePoint and atomic GitHub commits
Section titled “Application-mode SharePoint and atomic GitHub commits”SharePoint Online supports application-mode connections for unattended access that is not tied to one user’s session. GitHub tools can also create blobs, trees, commits, and fast-forward branch updates, allowing agents to commit multiple files atomically instead of racing one file at a time.
Safer and broader Qualys operations
Section titled “Safer and broader Qualys operations”Qualys adds ignored-vulnerability review, option-profile export, consolidated asset-tag and asset-group tools, and more consistent response-size controls. Destructive actions now return a preview by default: deleting a tag or asset group, or replacing an asset group’s full IP set, requires a second call with confirm=true. The tag-assignment and asset-group IP tools also use consolidated names, so existing automations should update their tool calls.
Improvements
Section titled “Improvements”Microsoft integration permission reference
Section titled “Microsoft integration permission reference”A searchable permission reference lists each Microsoft integration tool, whether it reads or writes, the permission it requires, and whether admin consent is needed. Setup guidance also covers application-mode SharePoint permissions and important platform limitations.
Full Knowledge Store filenames on hover
Section titled “Full Knowledge Store filenames on hover”When a Knowledge Store file chip truncates a long name, hovering over it shows the full decoded filename. This makes similarly named files easier to distinguish without changing the grid layout.
More reliable integration connections and calls
Section titled “More reliable integration connections and calls”This release includes several integration fixes:
- Linear connections no longer request an unused admin scope, so non-admin workspace members can authorize their own connections.
- AWS Cloud Security account discovery uses bounded retries and concurrency to stay within the tool-call deadline.
- Rapid7 InsightVM redirect responses identify a likely incorrect regional endpoint and show where the request was redirected instead of returning only a generic error.
More reliable agents and admin controls
Section titled “More reliable agents and admin controls”This release also improves core agent and administration behavior:
- Durable chat turns can recover after an execution worker is interrupted mid-turn without failing replay.
- Read-only users no longer see enabled add-step controls when viewing a shared agent in the builder.
- Agent execution environments recover more reliably when capacity moves to a newly provisioned host.
- Credit-allotment guardrails prevent oversized balances from destabilizing credit aggregation.
- Text on the active line of the chat prompt uses the same color as the rest of the prompt.