Skip to main content

One-step email sending, read-only agent reviews and automated security scans

· 3 min read

Email sending is now a single confirmation, coding agents can run enforced read-only reviews, and automated security review and GitHub approval handling are new.

Sending email by voice or chat now takes a single confirmation, and your voice and chat agents can open specific emails in the Inbox. Coding agents can run read-only reviews that are enforced on the device. Automated security review has arrived, and workflows waiting on GitHub approval are now handled properly.

Email and voice​

  • Confirm an email send with a simple "yes" by voice or chat, or type "stop" during the undo window to cancel. Instructions you give alongside a cancellation are now kept.
  • Voice and chat agents can select, open and move through specific emails in your Inbox, and tell you clearly when an action fails.
  • The speech settings window is larger, with dedicated text-to-speech engine dropdowns. The voice agent also keeps document edits in step with what it says it is doing.

Coding agents and automation​

  • Coding-agent sessions can run in a read-only mode enforced on the device, so you can review untrusted repositories without risking writes or executions.
  • Ship runs now take turns on shared computers instead of conflicting, and agents wait for a free computer without timing out early. Chat, voice and interactive sessions still connect instantly.
  • Automation stops when a coding agent objects to an implementation, so blocked changes no longer auto-merge without a human sign-off.

Security​

  • Automated security review finds, tracks and de-duplicates findings and urgent fixes. It includes secret and dependency-vulnerability checks, runs read-only, and surfaces recommendations directly to you.

Deploys and pull requests​

  • Workflows waiting for GitHub approval now show as awaiting approval instead of "Checks running". You can approve them from the platform, and merging and auto-fix wait until they are settled.

Workspace and Discover​

  • Workspace owners and admins can uninstall Marketplace workflows straight from their cards, with safety checks to prevent data loss.
  • The Roadmap Kanban board has a new Status filter, and list and Kanban views have an info pill showing a feature's workflow, stage and status.
  • Discover job cards have a "Where it runs" toggle, such as Coding agent or Cloud execution, offering only the modes each job supports. Discover analytics runs also no longer fail on temporary GA4 reporting errors.

Fixes​

  • The voice highlight bar no longer overlaps the first characters of text in the document editor.
  • The PR Reviews tile no longer counts merged pull requests as approved.
  • Slack events are delivered more reliably, with authentication and automatic retries.

Plus 21 smaller improvements, and 17 earlier changes not covered here.