Devin Cloud · Continuity · Nov 9–15, 2026
4 releases · updated
Devin Cloud: German UI Language, Session File Editor
Three releases shipped this week, bringing several changes to Devin Cloud. The main change is the addition of German as a display language and a new session file editor that saves on Cmd/Ctrl+S. These changes help users who prefer to work in German and those who need more control over their session files.
November 13, 2026 · November 13, 2026
This release adds German as a display language, a new session file editor that saves on Cmd/Ctrl+S, and several other changes. The session file editor now requires a manual save, and a cloud icon confirms each save. The release also simplifies the sidebar filter menu, lists artifacts in a compact rail, and moves the Agent / Ask switch into the composer.
Official release notes
German UI Language
Deutsch can now be selected as the display language in Preferences, using the terms engineers use for session, merge, push, prompt, logs, service user and secrets.
Session File Editor Saves on Cmd/Ctrl+S
The session file editor no longer saves automatically: press Cmd/Ctrl+S to save, a dot on the tab marks unsaved files, a cloud icon in the editor header confirms each save to Devin’s machine, and closing a tab or leaving a session with unsaved edits asks first. Devin is told which files you saved so it can take your edits into account.
Sidebar Filter Menu Simplified
The sessions sidebar Filter menu no longer has the Machine type and Skill filters; both remain available on the Sessions page. The session title menu now lists the sessions above the current session’s parent.
Artifacts Rail Beside the Chat
Workspace tabs no longer open on their own as Devin works. What a session produces — pull requests, Changes, previews, the Desktop and Agents views, Plan, citations and attachments — is listed in a compact rail to the right of the chat; hover to see the labels, click a row to open it. The workspace pane remembers per session whether it was open, and a session starts with it closed. Tabs that are not artifacts (Findings, Inbox, Todo…) stay in the add-tab menu, and ?tab= links still open the tab they name.
Agent / Ask Moves Into the Composer
The Agent / Ask switch moves from the header into a dropdown inside the composer. The same dropdown holds the modes for each side — Agent modes (Code, Data) or Ask modes (Auto, Q&A, Plan) — and switching Agent/Ask flips the composer immediately with that side’s default mode selected.
Review Analytics
Analytics > Review now shows what became of Review’s findings (fixed, rejected, ignored) for the built-in review and for each custom reviewer, and how each version of a custom reviewer’s instructions performed.
GitLab Merge Trains
Devin Review can now add GitLab merge requests to their project’s merge train. Editing a pending inline comment on a GitLab merge request keeps it at its original location.
Find Skips Collapsed Files
Find in Devin Review now skips collapsed files by default. Turn off “Skip collapsed files” in the find filter menu to search them; the choice is remembered.
Chapter Guide File Cards
Review’s chapter guide lists changed files in chapter order with clearer filenames and directory paths; mark individual files or entire chapters as viewed without leaving the guide. Selecting “View as sections” restores the guide’s chapters even if you previously saved File tree view.
Keyboard: Auto-merge Shortcut and Shortcuts Dialog
Pressing m in standalone Devin Review now enables auto-merge when the button offers it, and the Review keyboard shortcuts dialog no longer repeats identical key combinations.
Clearer Status When a PR Updates or a Code Host Is Slow
Devin Review distinguishes a newly pushed commit from an existing commit that is ready to view and from analysis updates that leave the code unchanged. When GitHub will not accept a Review comment because the file or line is no longer in the diff, Review says so instead of a generic error. When a code host is slow or not answering, Review and the session’s pull request tab say the code host did not respond and keep retrying (after one attempt, not three) instead of saying you have no access to the repository.
Unlink Devin from a Finding
You can unlink Devin from a security finding from the findings table or the finding’s details, so it can be fixed again.
Copy as Markdown Includes Validation and Review Reasons
Copy as Markdown on a finding now includes the sandbox validation result and evidence, and the reason the finding was reviewed or dismissed. A board-backed sealed finding can be edited through the content tool, with the changes shown in Activity.
Security Sidebar
Fix sessions are listed in their own Sessions section below Scans instead of nested under each scan or connection, with Scans showing 5 rows at a time; the empty Sessions list matches the main sidebar’s wording; and the “Introducing Devin Security” dialog no longer appears over a session page.
Turn Off Automatic CI Follow-up for your Organization
Org admins can turn off Devin’s automatic CI follow-up under Settings > Customization > Pull requests, and reach the switch from the CI checks tile on Cost Breakdown. It stays on by default, and asking Devin directly still works.
Session Details in PR Descriptions Can Be Turned Off
Admins can turn off the automatic session links and requester details in Devin-generated PR descriptions from Devin Sessions settings. The setting is on by default and takes effect when sessions start or resume.
Organization Picture for Every Organization
Admins of non-enterprise organizations can now upload or remove an organization picture in Settings > General.
Plugin MCP Server URLs: Region Choices and Readable Settings
A plugin can now offer a choice of regions for its MCP server (Datadog uses this for its sites), and that choice is shown before the first sign-in instead of defaulting to one region. The Server URL field shows the part you type as its own input and lists long query parameters one per row. When a plugin moves its server to a new URL, existing installations connect at the new URL without reconnecting.
Enterprise MCP Editor Asks for a Required OAuth Client
When adding an MCP server from the catalog that needs your own OAuth client (such as Google Calendar) for the whole enterprise, the form opens the OAuth credentials section, shows the setup steps and asks for the client ID before the server can be created, instead of failing silently.
November 12, 2026 · November 12, 2026
This release includes several changes, such as same-kind requests merging into one card, a redesigned Devin Review page, and clearer upload and folder-attach errors. It also adds a mention-only Slack thread mode, archives a session’s Slack code channel when the session is archived, and shows readable schedules on automation cards.
Official release notes
Sessions & Workspace
Same-kind requests merge into one card
When Devin asks for several things of the same kind at once (credentials, approvals, network access), they appear together in one compact card instead of a stack of cards.
”Reminder set” row
When Devin sets itself a reminder, the session shows a “Reminder set” row with the time or schedule and a link to the reminder.
Repo file links show as pills
Bare links to a file on github.com or gitlab.com appear in chat as a short pill naming the file, lines and commit instead of the full URL.
Drag an open session by its header
Drag an open session by its pane header onto a sidebar folder, Recent or another session, with the same result as dragging its sidebar row.
Clearer upload and folder-attach errors
Attaching a folder no longer fails when one file cannot be read (the rest is attached and you are told what was left out), and uploads blocked by your network’s security policy say so with the reason.
Devin Review
Redesigned Devin Review page
The redesigned Devin Review page is now available to all organizations: merge controls, the actions menu and the diff-size pill live in the top bar, the sidebar collapses out of the way, and findings are presented in the redesigned cards and panels.
“Automatically fix Devin Review findings” setting
Whether Devin fixes Devin Review findings on pull requests from its sessions is now its own setting, separate from Responding to bots. Each organization’s default is in Settings > Devin, under Pull requests, and each person can change it for their own sessions in Settings > Preferences, under Devin sessions.
Security
Scan syncs with several connections
When starting a Security scan you can pick several connections so its findings sync to more than one external destination.
Source filter lists each connection
The Source filter on the Findings page lists each connection separately, so findings can be filtered to a single scanner connection.
Named Custom connections
A Custom security connection now asks for a connection name (for example “Semgrep”), which is the name it is shown under.
Delete a finding tag org-wide
Hover a tag in the Findings filter and click the X to delete it from every finding at once.
Each finding has its own chat
The chat button on a finding opens that finding’s own chat; the Findings page launcher keeps its general chat.
Finding status changes can be undone
Dismissing a finding or marking it reviewed shows exactly what changed, with an Undo button (or Cmd/Ctrl+Z).
Veracode and Black Duck findings sources (closed beta)
Security connections can import findings from Veracode (Static, Dynamic, Manual and SCA findings) and Black Duck (vulnerable components of a project version). Dismissing or reopening a finding writes back as a Veracode mitigation or Black Duck remediation status. Available as a closed beta.
Enterprise & Settings
Seven more optional GitHub permissions
Enterprise admins can stop Devin from using the GitHub code quality, deployments, pages, discussions, repository projects, repository hooks and packages permissions under Optional GitHub permissions.
Approve personal secrets shared with service users
Anyone who can write to a session can approve a request to use a personal secret they shared with a service user.
Enterprise-disabled agent modes are shown
Organization settings show agent modes disabled by your enterprise and explain who can enable them.
Login page explains IP allowlist denials
Users signing in from outside their organization’s IP allowlist see why on the login page, including their current IP, instead of a blank login page.
Multiple installations per MCP in Customize
MCPs signed in with several accounts list each installation separately with its own settings; add another installation from the marketplace card; every installation offers Disconnect and Uninstall with a short explanation. Supabase can switch between read-only and full access from its settings.
Pylon EU region
Admins can connect a Pylon workspace hosted in Pylon’s EU region, and Pylon issue links open the EU app for those workspaces.
Bitbucket Data Center clone fixes
Clones through Devin’s git proxy work with Bitbucket Data Center /scm/ clone URLs and on instances with Basic authentication disabled (the default in version 10).
MCP tool permissions
Set each MCP tool to Allow, Needs approval or Block from Customize. Enterprise admins can also limit individual tools to specific organizations.
Integrations
Mention-only Slack thread mode
New Slack thread mode “Reply in the same thread, only when mentioned”: Devin stays in the thread but only responds to messages that tag it. Available as the org default and as a personal override.
Archiving a session archives its Slack code channel
Archiving a Devin session also archives its dedicated Slack code channel.
Teams: Devin edits messages in place
In Microsoft Teams, when Devin edits a message it is updated in place, and a replaced message collapses behind “Show earlier”.
Slack working status for @mentions
In Slack threads with several people, Devin shows its working status right away when you @mention it, and after it starts acting on an untagged reply.
Automations & Oncall
Readable schedules on automation cards
Automation cards show a readable schedule (“Weekly on Thursday at 6:00 PM…”) for schedules that previously showed raw RRULE text.
Oncall report notifications and PR panel
Oncall report notifications in Slack open with the report period and list action items as bullets; the report’s pull requests panel shows each PR’s state, repository and date (GitLab orgs see “Merge requests”).
November 11, 2026 · November 11, 2026
This release introduces customizable sidebar navigation shortcuts, improved visibility of stacked PRs, and a design mode with a compact prompt bar. It also adds grouped repository setup suggestions, allows marking the open session as unread, and enables Devin to set itself reminders.
Official release notes
Customizable Sidebar Navigation Shortcuts
The keys for Option-hold sidebar session navigation can be changed in Settings › Keyboard shortcuts.
Filter Sessions by Service User
The sessions list’s Created by filter includes service users, and sessions created by a service user show its name in Properties.
Improved Visibility of Stacked PRs
Improved visibility of stacked PRs within the UI, with an option for stack order preference (shared with Devin Review).
Design Mode
Selecting an element in Design Mode opens a compact prompt bar with per-property editing. Draw spotlight boxes or pencil annotations in five colors and send the annotated page image with a note; pick colors from the preview with the eyedropper; and search and use your page’s CSS variables in property controls.
Grouped Repository Setup Suggestions
You can approve adjacent repository setup suggestions together, or review each diff and approve it separately.
Mark the Open Session Unread
Mark unread is available in the sidebar menu for the session you currently have open.
Bulk Add Secrets Accepts Shell-style Lines
Bulk add secrets accepts export KEY=value lines and keeps a # that is part of a value (put a space before # to add a note).
Devin Can Set Itself Reminders
Devin can set itself reminders to wake up in the future, including in sessions started by automations or service users.
Link Findings and Threats
Create a threat directly from a finding’s Threat menu, remove a finding from the threat it is linked to, and find saved threats by title or number when filtering findings or starting a scan.
Start Scan Page with Threat Focus
Start scan opens as its own page (links can preselect a repository or threat) and includes a Focus on threats section with a searchable table.
Severity Letters
Findings use C/H/M/L letter badges instead of severity icons, and Repositories show medium and low counts separately.
Dismissal Reasons
Record a reason or note when dismissing a finding from its row, from the finding’s PR view, or across a selection; the reason is shown in the finding detail sheet.
Auto-scan Schedules
New auto-scans show their schedule before launch and keep their local time when daylight saving time changes.
Failed Scans Explain Themselves
When a scan fails before finding anything, the scan page, the session’s Findings tab and the per-scan history say why and offer Recover scan or Start new scan.
Findings and Repositories, Smaller Changes
Open a repository’s scan history from its row; scan summaries show medium and low findings; dragged column widths are remembered; drag a CSV report into a Security connection; remediation sessions link to their assigned finding.
Ask Before Loading External Content
Session security profiles gain an Ask before loading external content option. In sessions it governs, images from other sites and HTML/PDF attachment previews load only after you click them.
Guided Perforce Setup
Perforce setup guides you through server details and depot selection, reusing known details from a saved connection or importing the server address from your local Perforce configuration.
Edit Enterprise Plugin MCPs in Place
Enterprise admins can edit an active plugin MCP’s Access, OAuth client and secrets in place.
Improved In-app UI for Grouped Oncall Alerts
Oncall alerts with many occurrences can load older ones, and the events view shows whether each event was investigated, forwarded, grouped or skipped, with a link to the session.
November 9, 2026 · November 9, 2026
This release includes changes such as redacted secret pills linking to the secret, forwarded messages showing the original sender, and stacked PRs showing ‘In Merge Queue’. It also adds a single source filter for findings, real columns and easier navigation on the scan findings tab, and the ability to unlink a finding from its remediation session.
Official release notes
“Redacted Secret” Pills Link to the Secret
When a transcript shows a redacted secret, the pill links to the matching entry in Settings › Secrets.
Forwarded Messages Show the Original Sender
Messages forwarded into a session show who originally sent them, with a “Forwarded by / via” label.
Stacked PRs Show “In Merge Queue”
PRs in a stack that are waiting in the merge queue are labeled as such in Devin Review.
One Source Filter for Findings
A single Source filter (Connections / Scans) replaces the old Scan type filter on Security findings pages.
Scan Findings Tab: Real Columns and Easier Navigation
The Findings tab on a scan uses proper columns with horizontal scrolling, breadcrumbs lead back to the finding you came from, and you can open scan runs directly after a split scan.
Unlink a Finding from Its Remediation Session
Findings can be unlinked from a remediation session via the API and MCP tools, and batch remediation now paces sessions to avoid overloading repositories.
My Analytics for Every Member
All members, including Teams users, can open My Analytics to see their own usage and limits and request more usage.
GitHub User Tokens Refresh Automatically
For GitHub Enterprise Server and GitHub apps that issue expiring user tokens, Devin refreshes the token automatically; relink once and you won’t be asked again.
Enterprise Environment: Active Build Queue
Enterprise admins can see the queue of environment builds currently running or waiting.
Daily Session Consumption API
New endpoint GET /v3/enterprise/consumption/daily/sessions returns per-day session consumption for an enterprise.
Incident Reports
Oncall incident reports open in a dedicated view with a timeline, a UTC/local time switch and copy buttons; summaries are shorter.
Custom Plugin Logos
Plugins that declare a logo in their manifest show it in the plugin list and overview.
Deny Button on Slack Permission Cards
Permission cards in Slack now have a Deny button alongside Approve.
PR Cards Update When a PR Is Reopened
Slack and Teams PR cards turn green again when a closed PR is reopened.
Devin’s Slack Posts Keep Their Session Link
Posts containing tables or headings keep the session link, and messages that fail to format are retried as plain text.
Teams: Suggestions After Linking
After linking your Teams account, Devin suggests recent work to pick up.
Fan coverage from Devin Central — not an official Cognition announcement. Devin is a trademark of Cognition.
Follow Devin Cloud changes
Get Devin Cloud changes in the Monday email, with the rest of the week's Devin news.
Prefer a feed reader? Devin Cloud RSS feed