# Twenty v2.6.0 — Release & Upgrade Intelligence
- **Product:** Twenty (https://twenty.com)
- **Version:** v2.6.0
- **Released:** May 19, 2026
- **Impact Score:** 7/10
- **Breaking Changes:** Source flagged
- **Canonical Analysis:** https://changelogs.us/twenty/updates/v2.6.0/

## Executive Summary (TL;DR)
Twenty v2.6.0. Source highlight: **Relation traversal in filter dropdown** — drill into related-record fields when filtering, via a stacked dropdown (#20533)

## Breaking Changes & Deprecations
- ⚠️ Breaking changes - **`APP_SECRET` no longer used** for approved-access-domain validation or session cookies — moved to the encryption-key path (#20580) - **Permission-flag rename and catalog** — `permissionFlag` → `rolePermissionFlag`, plus new permission-flag catalog and backfill (#20481)

## New Features
- **Relation traversal in filter dropdown** — drill into related-record fields when filtering, via a stacked dropdown (#20533)
- **Signing keys management tab** — admin-panel UI for JWT signing keys with usage tracking (#20586)
- **Pricing plan card refresh** (#20614)
- **MCP tool annotations** (#20672)
- **Resume workspace selection on `/welcome`** when a valid `tokenPair` cookie is present (#20575)
- **Upgrade-aware entity decorators** — entity columns can be marked added/removed at specific versions, enabling cross-version upgrades (#20686)

## Improvements
- **Password length capped at 50 characters** (#20655)
- Index `messageChannel` / `calendarChannel` for per-workspace sync crons (#20678)
- Batch upgrade-migration inserts to stay under the Postgres parameter limit (#20588)
- AI Chat: file uploads (#20681)
- Settings / navigation-drawer polish (#20634)