Devin 2026.11.02

Devin 2026.11.02 was released on .

Summary

Devin 2026.11.02 is here: scan up to 1,000 repos, toggle auto-scan right from Findings, and let MCP servers kick off OAuth on a 401. Plus a Findings chat entry point. What will you scan first?

Release Context

  • This was the 21st Devin release of 2026 tracked by Havoptic.
  • It shipped 3 days after Devin 2026.10.30 (October 30, 2026).
  • Devin: ships every 2.6 days — 10 releases in the last month.

Why it matters: Scan up to 1,000 repos in one go.

Shipped around the same time

Within 3 days of this release, other AI coding tools also shipped:

Compare Devin

Release Notes

Clearer Read-only Access in the Composer Viewers who can read but not write to a session now see that they lack write access in the composer, and "Continue in a new session" is offered only when the new session will be able to read this one. "Fix with Devin" Links to the Session On a blueprint build page, the "Fix with Devin" toast links straight to the session handling the fix when the batch lands in one session, and points at the rows otherwise. Multi-repo Scans up to 1,000 Repositories The per-scan repository cap for code scans is raised from 500 to 1,000 in the UI and the API. Auto-scan Controls and Schedules Auto-scan can be turned on or off from a session's Findings tab, a scan's auto-scan schedule is shown in the scan detail and the Devin MCP getscan tool, and the threat-model lead offers weekly or monthly incremental scans when it finishes. Findings Improvements The Findings tab's quick-wins card shows a carousel of recommended findings' summaries, and the organization Findings page opens as a session tab with a "Chat with Findings" entry point. "Not in" Slack Channel Conditions Slack channel conditions in Automations accept "not in", so a trigger can exclude a list of channels. Automations Settings Refresh The Automations settings page gets an Automations icon, empty states, a default-policy setup flow and consistent row actions; the intro dialog adds a Preflight checks step; and network-policy edits now apply to the automation's already-running sessions. Multiple Files in One Slack Post Devin's Slack tool can attach several files to a single postmessage. OAuth Discovery from the Server's 401 When an MCP server answers 401 mid-session, Devin starts OAuth from the resourcemetadata it advertised, including servers whose handshake is public; a URL installation saved without auth asks the server how it authenticates; and OIDC locations are tried after a non-404 at the RFC 8414 URL. Filter Repositories by Provider ID in the API The v3 repositories endpoint accepts a providerrepositoryid filter.

View original release

Other Recent Devin Releases

All Devin releases · All AI coding tool releases on Havoptic