Devin 2026.10.30

Devin 2026.10.30 was released on October 30, 2026.

Summary

Devin 2026.10.30 is here: rendered previews for Markdown and patches, new SonarQube, Linear and Vanta security connections, and self-serve SSO. Curious what else shipped?

Release Notes

Rendered Previews for Markdown and Patch Files from Devin's Machine Markdown and .patch/.diff files opened from Devin's machine now open as a rendered preview, like attachments do, with a toggle back to the source. Files Tab Improvements Folders that contain only a single sub-folder open all the way down in one click (shown as parent / child), and each session's expanded folders are kept when you switch between sessions. Multi-line Secret Values Editing an existing secret now accepts multi-line values (for example private keys or JSON files) without collapsing them to a single line. GitHub File Anchors Open the Review at That File GitHub pull request links that point at a specific file (diff-…) now open Devin Review at that file in the web app and Devin Desktop. Header Scripts for MCP Servers on the Session Machine MCP servers pinned to the session machine can set a header script: a command run before each call that prints the headers to send, for servers that need short-lived tokens. Admins set it on a plugin's server in Settings. Personal Plugins Live-Reload into Running Sessions Personal plugins (and their MCP tools) that you install or edit now show up in your running sessions without starting a new one. With "Auto-approve actions on your behalf" on, Devin can save, install and update your personal plugins and skills without an approval card, and reinstalling a plugin updates it in place. New Security Connections: SonarQube, Linear and Vanta Security connections can now ingest findings from SonarQube, a Linear team (with two-way state and priority sync) and Vanta. Dismissing, reopening or resolving a GitHub Advanced Security finding in Devin updates the alert in GitHub, and issues Devin creates in Linear link back to the finding. Typed Finding Tags Threat-model profiles can define tag kinds (for example CVE); scans and connection imports report each finding with a value per kind, shown as key/value tags on the finding, filterable under Fields in the findings list. Findings Workflow Improvements Dismissing a finding now lets you pick a reason (Duplicate, False positive, Not actionable, Accepted risk, Mitigated, Other); findings can be copied as Markdown from the detail panel; and the Findings table columns can be resized. Remediation and Search in the API and Devin MCP The findings API and Devin MCP can search findings by text, remediate every open finding of a scan in one call (selectall), and target remediation PRs at a chosen base branch. Code Channel as the Default Thread Mode Slack admins and individual users can pick "Code channel" as the default for where Devin starts new sessions, and Devin now reads replies inside threads in code channels, not just top-level messages. Opt Out of Access-Request DMs Slack admins can opt out of the DMs Devin sends for organization access requests. Share a Private Reply with the Chat In Teams private group chats, each Devin reply has a Share with chat link that posts just that reply to the whole group chat. Reaction Trigger for Teams Automations Teams automations can trigger when someone reacts to a channel message, with a reaction picker in the trigger conditions. Network Access Request Outcomes in Teams When a network access request is approved or denied from the web app, the card in the Teams thread shows the outcome and the requested domains instead of disappearing. Azure DevOps Webhooks Are Removed on Disconnect Disconnecting an Azure DevOps connection now removes the service hook subscriptions Devin installed for it. Pylon Setup Dialog After connecting Pylon, a setup dialog asks which Devin capabilities to turn on and reminds you to review the Pylon security profile. Self-serve SSO Connections Enterprise admins can verify ownership of their email domains with a DNS record, then create, name, edit and delete their own OIDC or SAML SSO connections from Settings > Authentication without contacting support. Personal Access Tokens Default to Approval Required Enterprises that have not configured a PAT policy now default to approval required: members can request a PAT and an enterprise admin approves it. Admins can still switch to self-serve or disable PATs. Budgets Launching budgets, allowing enterprises to organize user spend and organization spend in a budget hierarchy, and enterprise admins can grant granular permissions to manage a budget with sub-budget limits.

View original release

Other Recent Devin Releases

• 2026.10.26 (October 26, 2026)
• 2026.10.23 (October 23, 2026)
• 2026.10.21 (October 21, 2026)
• 2026.10.19 (October 19, 2026)
• 2026.10.16 (October 16, 2026)

Upgrading from 2026.10.30? See all 1 release since.

All Devin releases · All AI coding tool releases on Havoptic