Devin Cloud: Sidebar Status Groups

Sidebar Status Groups: Working / Ready / Blocked / Inactive

The sessions sidebar’s “Group by status” now uses Working / Ready / Blocked / Inactive, so sessions with a PR awaiting review and sessions that need your input are listed separately.

View Preferences Follow You Across Devices

Your search mode, changed-files tree layout, sidebar Review/Ask filters and grouping, and wiki language/view choices now sync across browsers and devices instead of staying on one machine.

Keyboard: Next/Previous Session and Cmd+Enter to Submit Dialogs

Press Option+J / Option+K (Alt+J / Alt+K on Windows and Linux) to move to the next or previous session in the sidebar. The feedback, Invite members and New ticket dialogs can be submitted with Cmd+Enter (Ctrl+Enter).

Command Palette Finds Child Sessions by Their Own Title

Session search in the command palette (Cmd+K) now matches sub-sessions on their own title, not only when the parent session matches.

Child Sessions Start with Their Parent’s Context

Starting a child session now carries a short summary of its parent, shown as a removable chip in the composer, so the child begins with the parent’s context.

PR Link Hover Card Opens the Owning Session

Hovering a pull request link in a session shows a card with the session that owns the PR — its status, PR badges and integration icons — and opens that session directly on the PR. If the PR was taken over, the card points at the session that currently owns it.

PR Links Respect Your PR-Link Preference Everywhere

The pull request menu in a session has a new “Copy link” option that copies the link matching your PR-link preference (Devin Review or the git provider), and PR URLs you paste into a message now open the same way PR links in Devin’s replies do instead of always opening GitHub.

PDF Attachments Are Versioned

When Devin shares an updated PDF with the same name, it opens in the same tab with a version picker so you can view any earlier version.

Progress Tab Names the Sender

The Progress tab now labels messages by who sent them (“Alice said”) instead of “You said” for every message, including messages that arrive from Slack or Teams.

Sleeping Sessions Wake on Preview or SSH Traffic

Opening a preview URL or SSHing into a session whose machine has gone to sleep now wakes the machine and completes the request instead of showing “not running”. Browser previews come back automatically after a session wakes, and the “Wake Devin up” button on a sleeping preview now shows live progress.

Clearer Notices: Failed Sends, Dismissible Toasts, Incomplete Builds

When a message can’t be sent because the connection to Devin is down, the app shows a “Message failed to send” notice and puts your text back in the composer. All notifications can be dismissed with the ✕ button. The “Environment build incomplete” notice at the start of a session expands into a warning card listing the blueprints that failed, with a link to the build.

Performance Improvements

Streaming replies in long sessions update the transcript without re-processing the whole conversation on every chunk, and large PR diffs open and switch tabs faster.

Interactive HTML Reports

When you ask for a report that would benefit from interactivity (charts, tables, diagrams) without naming a format, Devin now produces an interactive HTML report.

Devin Updates Only Its Own Section of a PR Description

When updating a PR description, Devin now replaces only its own section and leaves sections added by other tools (review bots, CI preview links) or people intact, instead of skipping the update or offering to overwrite them.

“Test the App” Offered in Automation and Triage Sessions

Sessions started by automations or triage now offer the “Test the app” button after opening a PR instead of skipping end-to-end testing.

Large File Copies with a Connected Local Machine

Large files can now be copied between a connected local machine and a Devin session VM without manual splitting.

Status Comment Is Cumulative Across Commits

The Devin Review status comment on a PR now keeps listing the findings Devin fixed on earlier commits instead of resetting on each push.

Required Checks That Haven’t Reported Show as Pending

Devin Review now shows required GitHub checks that have not reported a status as pending instead of saying all checks passed.

Bitbucket Data Center: Automatic Reviews and Comment Threads

Bitbucket Data Center repositories now appear in the Devin Review repository picker and can be enrolled for automatic PR reviews. Devin can read the comment thread on Bitbucket Data Center PRs and reply in-thread to (or edit/delete) its comments, and rotating the access token on connections created before February 2026 works again.

Azure DevOps: Pipeline Logs and Self-Hosted Servers

Devin can now read Azure Pipelines job logs for failed checks on Azure DevOps PRs and (with a “Build completed” service hook) is notified when a pipeline on its PR fails. Azure DevOps Server and Bitbucket Data Center instances hosted under a virtual directory (e.g. https://host/tfs/Collection) are supported, with correct provider logos and PR/commit/file links throughout the app, and the Review “not available” prompt now names the actual provider instead of offering to connect GitHub.

Finding Update Times and Filters in the API

Code scan findings now include their last-updated time, and the webapp and v3 APIs can filter findings by creation or update time.

Resolved Tab Shows Only Merged Fixes and Dismissals

The Findings “Resolved” tab now lists only findings whose fix PR was merged or that a user dismissed; findings Devin closed on its own are no longer listed there.

Runtime-Validation Evidence in Scan Reports

Security scan reports now include recorded runtime-validation results and supporting artifacts for open and dismissed findings at every severity, with dismissed false positives summarized separately. The findings API exposes these results so integrations can distinguish recorded validation from missing information.

Create Code-Scan Automations via the API

Code-scan automations can now be created and updated via the API with a service-user API key (the service user’s role needs the relevant scan permission), not only from the Automations UI.

Structured Questions in Automation Sessions

Automations can now ask questions with clickable choices in their sessions.

Run Sessions on a Shared Outpost

Automations can now run their sessions on a shared Outpost you choose in the automation editor.

Plain-Language Schedules

Schedules with a start or end date, several times of day, or a bare hourly cadence now display in plain language (e.g. “Every 6 hours, from 9/19/2026 until 9/22/2026”) instead of raw RRULE text.

Linear-Triggered Sessions Can Start Child Sessions

Sessions started by Linear automations or allowlisted Linear bots can now start and manage child Devin sessions (for example, orchestrator playbooks).

Microsoft Teams: Simpler Channel Routing

Enterprises with a single organization no longer need to configure channel mappings — Devin routes every channel in the Team to that organization automatically. Enterprises with several organizations can map a channel (or all unmapped channels in a Team) directly from a card in the Teams thread, and the “channel not mapped” message links to the mapping settings.

Microsoft Teams: Approve Network Access from the Card

Teams users can approve or deny Devin’s network access requests directly from the Teams card — for the session or, when applicable, in the governing security profile or automation — instead of opening the webapp.

Microsoft Teams: One-Tap Answers and Reactions

When Devin asks a simple question with up to three options, they appear as one-tap reply buttons, and the question stays in the chat with your answer shown underneath. In channels, Devin reacts 👀 to your message while it works and 🚫 when it can’t act on an @mention (for example, the channel isn’t connected).

Microsoft Teams: Group Chats

In Teams group chats, Devin now only replies to messages that mention it or ask it for something, stays quiet on statements that aren’t requests, keeps its answers chat-sized, and only shows a typing indicator when it is actually writing a response.

Microsoft Teams: Attachments, Links and Defaults

Files Devin shares in Teams now include a link that opens the attachment in the Devin web app alongside the download link, and messages with many attachments are delivered as multiple cards. Links you share with Devin keep their URL so Devin can open them. New Teams connections reply in the existing thread by default (switchable in Settings → Connections → Microsoft Teams). Sessions started from a private channel note that follow-ups need to @mention Devin, the welcome card is simpler, and dedicated-tenant customers get session links on their own Devin domain.

Slack: Canvas and User-Group Permissions

Devin’s Slack app now requests canvas read/write and user-group read permissions on install, so those features work for every workspace. Existing workspaces may be asked to reconnect Slack.

Slack: Thread Replies Reach the Session That Posted

Replying with @devin in a Slack thread that a Devin session already posted to now reaches that session (or shows a no-access notice) instead of starting a second session.

Slack: Long Answer Options, Markdown Attachments and Mentions

When one of Devin’s suggested answers is too long for a button, the options render as a selectable list with a Submit button so the full text is visible. Markdown attachments are shared as a link that opens the file in the session instead of being uploaded to the thread. Devin @-mentions people correctly in Slack-connected sessions, including in workspaces with over ~1,000 members.

Microsoft 365 MCP Requests Write Scopes by Default

Microsoft 365 MCP connections now request all read/write permissions that don’t need admin approval by default, so Devin can send mail, create events, post in Teams, etc. without reconnecting.

57 New Hosted MCPs in the Marketplace

57 new hosted MCP integrations are available in the Marketplace, including Buildkite, Brex, Expo, Resend, Statsig, Todoist, Vanta, WorkOS, Wix and Strix. Hosted MCP servers that publish their OAuth metadata at the server root (e.g. Codspeed, You.com, Datadog) now connect via OAuth.

Customize → MCPs: Clearer States

MCP switches that only org admins can change now show a lock icon, and disconnected MCPs on the Personal tab show a Connect action instead of appearing enabled.

Devin Can Target a Specific Uploaded Plugin

Devin can now save a skill, rule, MCP server or hook into a specific uploaded plugin (personal, organization or enterprise) by naming it, instead of only the default one. When installing a plugin from a directory, the approval says whether it creates a new plugin or replaces an existing one, and Devin must ask explicitly to replace.

Reinstall an Uploaded Plugin as a New Revision

Devin can update all files of an already-uploaded plugin (including companion scripts) by reinstalling it, keeping the plugin’s version history. Plugins between 16 and 20 MiB can be edited and reinstalled again.

Org Admins Can Change Access on Plugin MCPs

Org admins can now change the Access level (Organization or Personal) of MCP servers installed by a plugin — and the OAuth client where the provider takes one — from the plugin’s connection settings.

Enterprise Plugins Settings Page

Enterprise admins can now find plugin policies — allowing uploaded organization/enterprise plugins and showing the official marketplace — on a dedicated Enterprise › Plugins settings page.

Snapshot Builds Fail Early When Disk Is Short

Snapshot builds that leave less than 2 GiB free on the root filesystem now fail with an explanatory message instead of publishing an image that runs out of disk shortly after a session starts.

GitHub Enterprise Server: Role Mirroring and Team Sync

Newly registered Devin GitHub Apps on GHES request Organization Administration: Read and Custom organization roles: Read so Devin can mirror your GitHub organization’s roles and default repository permission into Devin access groups. Team sync now grants members of one synced organization read access to sibling organizations’ internal repositories right after the first sync.

Session Tree from Parent Sessions

Parent sessions now show the session-tree icon in the header. Click the title to see and open the child sessions, as you already could from a child session.

Rename Sessions You Can Edit

Teammates with edit access to a session can now rename it, not just the person who started it.

Devin Resumes Right After Permission Responses

Devin now resumes promptly after you approve or deny a permission request while it is waiting, instead of sitting until its wait timer expires or you send another message.

Capability Picker Names the Models

The Ultra and Normal cards in the capability picker now name the models they use: Ultra reads “Highest intelligence available with Fable 5.1 and GPT-6 Astra”, and Normal lists Fable 5.1, Opus 5 and GPT-6 Astra.

Performance Improvements

Streaming shell output and code blocks no longer stutter in Safari, and CPU use while Devin streams messages is lower. On phones and tablets, session tabs you are not looking at are unloaded to reduce memory use and crashes.

Organization Admins Can Manage Autoreview

Organization admins with the relevant permissions can now manage automatic review settings for their organization.

Richer Autoreview Triggers

Automatic reviews can now be triggered by a composable set of custom rules. In Settings → Review, enroll a whole account, an SCM organization, a repository, a repository prefix or an individual member, then narrow each trigger with advanced filters on PR author, reviewer, label, title, source or target branch, changed files, author type (human, bot or Devin) and diff size, combined with all / any / not. Each trigger also sets when Devin reviews (when the PR is created, when it is marked ready, on every push, or once), and exclusions override triggers so matching pull requests are never reviewed automatically.

Self-Hosted Git Servers on Non-Default Ports

Devin Review now loads pull requests from self-hosted GitHub Enterprise, GitLab and Bitbucket Data Center instances that run on a non-default port (e.g. https://bitbucket.example.com:8443/...), and the Recent list no longer hides a PR when another PR on the same server shares its repository path and number.

Helix Swarm (Perforce) Reviews

Devin Review can now be triggered from Helix Swarm reviews (via a Swarm test definition or, on Swarm 2026.3+, an outbound webhook) and reviews the shelved or submitted changelist directly from the Perforce depot. Swarm reviews open in Devin Review with links back to Swarm for the review, author and stream, and Swarm test runs close with the review’s verdict.

Bitbucket Data Center: Comments, Reviewers and Decline

Bitbucket Data Center users who linked their account can now post and edit Discussion comments, add or remove reviewers, and decline a PR from Devin Review as the linked user. Controls Bitbucket Data Center does not support (labels, assignees, reactions) are no longer shown.

A Findings Tab for Every Scan

Each code scan a session starts now has its own Findings tab, so earlier scans’ findings stay reachable, and a session’s scan findings are one click away in the header links, even after the scan card scrolls out of view.

Scans Fail Clearly When a Repository Can’t Be Fetched

Code scans that cannot fetch a repository’s latest commits now end as failed with the fetch error instead of reporting “no changes” on outdated code, and scheduled scans no longer start when Devin can’t access the repository.

Dismissal and Resolution Notes in the Finding Status API

The v3 code scan finding status endpoint now accepts an optional dismissal_reason, dismissal_note and resolution_note when dismissing or resolving a finding.

Microsoft Teams: Commands, Context and DM Cards

In Microsoft Teams you can now type ask or deep (no !) after mentioning Devin, or in a direct chat, for a quick codebase answer; start a message with aside to have Devin ignore it; and add !windows or !mac to start the session on a Windows or macOS machine if your organization has those enabled. Replying to a quoted message passes the quoted text to Devin as context. Sessions started from a Teams DM show a “Microsoft Teams message · DM” card, and the Teams item in the session header links back to the Teams thread or chat.

Microsoft Teams Without Tenant-Wide Admin Consent

Connecting Microsoft Teams now uses a single Connect button and no longer requires a Global Administrator by default. Devin can send Teams direct messages and look up people in teams where it is installed without tenant admin consent; people outside those teams are no longer searchable.

Teams MCP Can Read Channel Messages

The Microsoft Teams MCP can now read channel posts and their replies when the connected Entra app grants ChannelMessage.Read.All, which admins can select in the Teams MCP scope picker.

Bring-Your-Own OAuth Setup Guides for Microsoft 365 and Google Workspace MCPs

The Microsoft 365 and Google Workspace MCP settings now include step-by-step instructions for setting up your own OAuth app, plus clearer field descriptions and error messages.

Slack: Tables Render Natively

Markdown tables in Devin’s Slack messages now render as real Slack tables instead of raw pipe-delimited text.

Linear: !mac / !windows Platform Directives

You can now pick the machine for a Linear-triggered session by adding !mac or !windows to the comment that mentions Devin, just like in Slack.

Plugin MCPs Appear in Customize → MCPs

On the Customize → MCPs tab, an MCP provided by an installed plugin now appears under “From plugins” as soon as the plugin is installed, with a Connect button, instead of only after it has been set up.

Plugin Change Approvals Show the Proposed Diff

Clicking a plugin change approval card now opens the proposed change in the Progress tab as a diff against the saved plugin, with a link to the plugin; after approval it shows exactly what was written. Single-file plugin edits preview the file directly.

Settings Search Shows Only What Applies to You

Settings search now only shows settings that exist for your plan, configuration and connected integrations, and results open the right tab and highlight the setting.

GitHub App Permissions Update

Devin’s GitHub App is requesting additional permissions: Organization Administration: read, Custom Organization Roles: read, Code Scanning Alerts: read, Secret Scanning Alerts: read, Members: read (for GitHub team sync), and Actions: write (so Devin can rerun workflows). GitHub organization admins will receive an email and should approve the updated permissions in their installation settings. Devin keeps working with the current permissions until then.

Security Profiles for Snapshot Builds

Enterprise and organization admins can now bind a security profile specifically to snapshot builds (or opt builds out) via the API.

Blueprint Knowledge from Organization and Enterprise Environments

Knowledge defined in organization- and enterprise-level environment blueprints now reaches Devin sessions.

Outposts Permissions

Custom roles with the Outposts read or write permission can now view or administer Outposts in Settings → Environment without also needing Manage enterprise settings.

SWE-2 Research Preview in the Agent Selector

SWE-2, Cognition’s next-generation software engineering model, is rolling out as a research preview in the agent selector under the “Research preview” section. Choose SWE-2 and a reasoning effort (Medium, High, or Max) when starting a session, or switch to it mid-session with the agent toggle next to the message input; in Slack, use !swe2. Enterprise admins enable SWE-2 (Preview) for their enterprise in Settings, and organization admins can then turn it on or off for their organization under Agent capabilities. As a research preview, behavior and availability may change.

Attach a Folder to a Message

You can now attach a whole folder to a Devin message by dropping it on the composer or choosing “Upload folder”. The folder is compressed in your browser and attached as a single zip file.

More Automatic Merge-Conflict Fixes

Devin now fixes merge conflicts on its PRs automatically more often: within 12 hours of session activity (36 hours if the PR is approved), including conflicts that reappear after an earlier one was fixed.

Shell Command Durations in the Worklog

Finished shell commands in the session worklog now show how long they took, so slow commands are easy to spot.

Full Links for PRs, Issues, and Commits

Devin now links PRs, issues, and commits it mentions instead of writing bare numbers like #123.

File Tree, Smart Diffs, and Open in Editor in the PR Tab

The PR tab now has a file tree alongside the diff that highlights the current file as you scroll, a Smart diffs toggle in the diff settings to view a PR as a flat list of files, an “Open in editor” button, and a “File tree on left” option to move the changed-files tree to the left of the diffs.

Checks Tab and Faster Diffs

The PR tab has a new Checks tab showing CI status, with tabs ordered Changes, Description, Discussion, Commits, Checks, Bugs. Diffs highlight faster and scrolling large PRs is smoother, and the embedded editor now matches the diff viewer’s fonts and colors.

Devin Review in Spanish and Portuguese

Devin Review’s interface is now available in Spanish and Portuguese for users whose display language is set to Español or Português.

Devin Review for Bitbucket Data Center

Devin Review can be enabled for Bitbucket Data Center repositories, including automatic reviews when pull requests are opened or updated. Bitbucket Data Center projects and repos can be selected on the Devin Review home page, the merge bar shows merge, approval, and build status, and admins can configure a webhook (Settings › Integrations › Bitbucket) so Devin updates pull request status and comments in near real time.

npx devin-review CLI Retired

The standalone npx devin-review command-line tool and its unauthenticated review page have been removed. Use Devin Review on the PR tab or in the Devin Review home instead; existing installed copies of the CLI will no longer work.

Azure DevOps Improvements

Devin can now add and remove pull request labels (tags) on Azure DevOps and Azure DevOps Server. In Settings, Azure DevOps connections show the organization name, and organizations or Server collections with more than 100 projects now list repositories from every project.

Rotate Bitbucket Data Center Tokens

Admins can rotate a Bitbucket Data Center connection’s HTTP access token from Settings → Bitbucket or the enterprise API without disconnecting; the new token must belong to the same Bitbucket user.

Link Your Bitbucket Data Center Account

Once an admin registers an OAuth application for a Bitbucket Data Center host, you can link your own Bitbucket account from Devin Review or Profile → Linked accounts. Review approvals and comments Devin posts on that host are then attributed to you rather than the shared connection.

Microsoft 365 MCP Servers and Plugins

Microsoft 365 Mail & Contacts, Calendar, To Do, OneDrive & SharePoint, Teams, and Directory (Entra ID) are now available in the MCP marketplace and as plugins that bundle each MCP server with a usage skill. Connect them with your own Microsoft Entra app registration, pick OAuth scopes from a list that explains what each permission is for, and Devin connects with read-only permissions by default when no scope is configured. The Files MCP can return files converted to PDF or JPG.

Google Workspace MCPs Through Plugins

Gmail, Google Drive, and Google Calendar MCPs installed through a plugin can now be connected with your own Google OAuth client ID and secret, including custom OAuth scope and resource. On plugin MCPs that need your own OAuth client, the client ID and secret fields now appear first.

Personal MCP Servers Are Private

MCP servers you add or install from the Personal tab in Customize are now private to you instead of being shared with your organization, and editing a personal MCP server more than once no longer fails.

Devin Can Manage Org and Enterprise Plugins

Org and enterprise admins can have Devin create, update, remove, and install plugins for their whole organization or enterprise, approving each change. Devin can also create, update, and remove skills, rules, MCP servers, and hooks in your uploaded personal plugins through a single tool, including plugins that use a root mcp.json.

Required and Available-to-Install Plugins

Org and enterprise admins can make uploaded plugins “Available to install” so members choose whether to add them, or “Required”, from the plugin’s card or details panel. Renaming a plugin updates its name across Customize, Marketplace, and the session plugins menu, plugin indexing errors on the Customize page now say what actually failed, and plugins can be up to 5x larger (20 MiB, 2,500 files).

Simpler Create Automation Menu

The Create automation menu is reordered, “Manual” is now “Create”, and “Suggest automations” is now “Suggest for me”.

Reactivated SCIM Users Keep Their Groups

SCIM users who are deactivated and later reactivated by the identity provider now keep their IdP group memberships, including group changes made while they were inactive.