What's Changed

• feat(app-dev): surface metadata diff in dev sync and name failing migration actions by @martmull in https://github.com/twentyhq/twenty/pull/21249
• chore: bump version to 2.11.0 by @twenty-pr[bot] in https://github.com/twentyhq/twenty/pull/21259
• fix: guard against undefined logicFunctionId when destroying workflow CODE steps by @thomtrp in https://github.com/twentyhq/twenty/pull/21256
• fix(server): guard role-permission cache against stripped permissionFlag relation during upgrade by @charlesBochet in https://github.com/twentyhq/twenty/pull/21257
• fix(app-dev): serialize dev sync per workspace with a cache lock by @martmull in https://github.com/twentyhq/twenty/pull/21250
• fixes - remove billing cancellation at trial end + disable ai chat if suspended by @etiennejouan in https://github.com/twentyhq/twenty/pull/21261
• Add job queue latency histogram metric by @thomtrp in https://github.com/twentyhq/twenty/pull/21260
• fix(server): gate viewFilter.relationTargetFieldMetadataId behind its 2.6 upgrade command by @charlesBochet in https://github.com/twentyhq/twenty/pull/21267
• fix(metadata): resolve junction targets order-independently during mgration by @neo773 in https://github.com/twentyhq/twenty/pull/21193
• feat(app-dev): add dry-run preview to dev sync by @martmull in https://github.com/twentyhq/twenty/pull/21251
• feat(server): unify workspace-event ingestion behind one EventSink pipeline by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21197
• fix: add missing space in README heading by @summykumari567 in https://github.com/twentyhq/twenty/pull/21271
• fix(settings): ship borderless hero cover images by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21277
• fix(server): finalize dangling tool calls when persisting agent chat messages by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21276
• chore(twenty-front): remove dead SettingsAiMCP component and covers by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21281
• Allow kanban cross-column drag when sorting is enabled by @Val4evr in https://github.com/twentyhq/twenty/pull/21025
• revert #21177 by @neo773 in https://github.com/twentyhq/twenty/pull/21284
• chore(server): rename TypeORM migrations dir to legacy-typeorm-migrations-do-not-add by @claude[bot] in https://github.com/twentyhq/twenty/pull/21295
• fix(settings): gate APIs & Webhooks page on API_KEYS_AND_WEBHOOKS, not WORKSPACE by @EthanPany in https://github.com/twentyhq/twenty/pull/21302
• fix: use correct userWorkspaceId for navigation menu comparisons by @Manibharadwaj in https://github.com/twentyhq/twenty/pull/21299
• feat: add Argos visual regression for twenty-new-ui by @charlesBochet in https://github.com/twentyhq/twenty/pull/21262
• fix: firefox blank import validation screen and center toggles by @parshipcy in https://github.com/twentyhq/twenty/pull/21266
• chore(deps): bump @babel/plugin-transform-modules-systemjs to 7.29.7 (CVE-2026-44728) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21306
• fix(ai) - optimize metadata CRUD tools by @etiennejouan in https://github.com/twentyhq/twenty/pull/21235
• [Website] Product hero rework into a single, scroll-driven story. by @mabdullahabaid in https://github.com/twentyhq/twenty/pull/21105
• i18n - website translations by @github-actions[bot] in https://github.com/twentyhq/twenty/pull/21312
• [Website] Add trust center link to the footer by @mabdullahabaid in https://github.com/twentyhq/twenty/pull/21307
• Remove twenty-sdk from package.json before build by @martmull in https://github.com/twentyhq/twenty/pull/21305
• i18n - website translations by @github-actions[bot] in https://github.com/twentyhq/twenty/pull/21314
• feat(emailing-domain): add LOG driver for local development by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21286
• security: bump vulnerable direct dependencies (axios, next, vitest, qs, dompurify, …) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21309
• security: bump vulnerable transitive dependencies (postcss, fast-xml-parser, react-router, brace-expansion, …) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21310
• fix: dedupe root yarn.lock to satisfy hardened immutable install (unblocks danger-js) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21320
• fix: wrong record count on deleted and normal records by @parshipcy in https://github.com/twentyhq/twenty/pull/21292
• security: bump vulnerable deps in logic-function runtime lockfiles by @charlesBochet in https://github.com/twentyhq/twenty/pull/21317
• security: refresh twenty-apps lockfiles for vulnerable transitive deps by @charlesBochet in https://github.com/twentyhq/twenty/pull/21316
• security: bump electron 36 → 39 in twenty-companion by @charlesBochet in https://github.com/twentyhq/twenty/pull/21327
• security: bump serialize-javascript 6 → 7 (RCE) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21325
• Remove IS_WORKFLOW_RUN_STEP_LOGS_ENABLED feature flag by @ijreilly in https://github.com/twentyhq/twenty/pull/21323
• security: bump uuid 9 → 11 (server, shared, front) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21326
• feat(app-dev): sync error hints, flatEntity labels, dev-mode summary UI, and docs by @martmull in https://github.com/twentyhq/twenty/pull/21252
• fix: add queue attribute to jobs waiting gauge metric by @thomtrp in https://github.com/twentyhq/twenty/pull/21324
• fix(docker): bump Node 24.16.0 (OpenSSL fix), strip unused cruft, dedupe node-forge by @charlesBochet in https://github.com/twentyhq/twenty/pull/21322
• Rename twenty-ui to twenty-ui-deprecated and twenty-new-ui to twenty-ui to prepare package release by @bosiraphael in https://github.com/twentyhq/twenty/pull/21315
• fix(twenty-front): match loading skeleton menu width to the nav drawer by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21278
• fix: prevent deletion of standard fields via API by @thomtrp in https://github.com/twentyhq/twenty/pull/21319
• messaging: Microsoft driver migrate p-limit to native batching by @neo773 in https://github.com/twentyhq/twenty/pull/21132
• 2474 add a utils to perform route trigger logic function requests in front components by @martmull in https://github.com/twentyhq/twenty/pull/21330
• chore: remove accidentally committed screenshots by @parshipcy in https://github.com/twentyhq/twenty/pull/21332
• chore(server): bump @nestjs to 11.1.24 + serve-static 5.0.5 to clear CVEs by @charlesBochet in https://github.com/twentyhq/twenty/pull/21333
• security: drop unused @genql/runtime dependency by @charlesBochet in https://github.com/twentyhq/twenty/pull/21334
• i18n - docs translations by @github-actions[bot] in https://github.com/twentyhq/twenty/pull/21337
• chore(apps): bump vitest to 3.2.6 in twenty-apps projects (GHSA-5xrq-8626-4rwp) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21336
• chore: force tmp >= 0.2.7 for root dev tooling (nx/zapier) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21338
• feat(twenty-partners): notify Discord on new partner application by @rashad in https://github.com/twentyhq/twenty/pull/21313
• fix(sdk): bump inquirer ^10 -> ^14 to drop external-editor/tmp from apps by @charlesBochet in https://github.com/twentyhq/twenty/pull/21340
• security: vendor @genql/cli codegen to drop undici/native-fetch by @charlesBochet in https://github.com/twentyhq/twenty/pull/21339
• chore(deps): upgrade tar to v7, evict vulnerable tar@6.2.1 (CVE-2026-24842) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21341
• i18n - docs translations by @github-actions[bot] in https://github.com/twentyhq/twenty/pull/21342
• security(apps): bump twenty-sdk to 2.10.1 across twenty-apps (tmp, undici) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21344
• feat(twenty-front): generalize the page primary/secondary bars (flat redesign) by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21308
• fix(ui): restore content-box sizing for components broken by the global border-box reset by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21349
• chore: sync AI model catalog from models.dev by @github-actions[bot] in https://github.com/twentyhq/twenty/pull/21353
• Fix breaking change with dry run input by @martmull in https://github.com/twentyhq/twenty/pull/21356
• fix(twenty-client-sdk): make genql codegen formatter prettier-3 compatible (fixes app-sync server crash) by @charlesBochet in https://github.com/twentyhq/twenty/pull/21354
• perf(ai): lazy-load agent chat runtime so it doesn't fetch/diff threads until opened by @Weiko in https://github.com/twentyhq/twenty/pull/21331
• fix(auth): align workspace resolution across SSO and OTP sign-in flows by @FelixMalfait in https://github.com/twentyhq/twenty/pull/21346

New Contributors

• @summykumari567 made their first contribution in https://github.com/twentyhq/twenty/pull/21271
• @Val4evr made their first contribution in https://github.com/twentyhq/twenty/pull/21025
• @claude[bot] made their first contribution in https://github.com/twentyhq/twenty/pull/21295
• @EthanPany made their first contribution in https://github.com/twentyhq/twenty/pull/21302
• @Manibharadwaj made their first contribution in https://github.com/twentyhq/twenty/pull/21299

Full Changelog: https://github.com/twentyhq/twenty/compare/twenty/v2.10.0...twenty/v2.11.0