⚠️ Breaking Change
Impact Score: 7/10
Twenty v2.7.0 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: twenty · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
Breaking-change evidence from the source
⚠️ Breaking changes - **`ConnectedAccount.connectionParameters` now encrypted** — requires `ENCRYPTION_KEY` configured (#20673) - **Connected account permissions unified** (#20732)
⚡ Executive Summary (TL;DR)
Twenty v2.7.0. Source highlight: **Fireflies integration** — connect Fireflies for meeting transcript ingestion (#20618)
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
⚠️ Breaking Changes & Deprecations (1)
- ⚠️ Breaking changes - **`ConnectedAccount.connectionParameters` now encrypted** — requires `ENCRYPTION_KEY` configured (#20673) - **Connected account permissions unified** (#20732)
✨ New Features & Capabilities (6)
- **Fireflies integration** — connect Fireflies for meeting transcript ingestion (#20618)
- **Slack workflow connector** — trigger workflows from Slack events (#20427)
- **Application file storage service** — dedicated storage for app-uploaded files (#20793)
- **Per-PR preview deploys** — Cloudflare Worker-versioned previews (#20762)
- **Website migrated to Cloudflare Workers** via OpenNext (#20741)
- **Enterprise JWT signing-key rotation** — cron-based rotation with `secret-encryption:rotate` CLI (#20612, #20613)
⚡ Performance & Enhancements (6)
- Self-hosting docs now cover `ENCRYPTION_KEY`, `FALLBACK_ENCRYPTION_KEY`, and key-rotation procedures (#20611)
- Stop bundling twenty-ui React CJS runtime (smaller bundle) (#20703)
- `@WasRemovedInUpgrade` decorator for cross-version field removals (#20729)
- BlockNote slash-command shows empty state on no match (#20689)
- Messaging perf tweak (#20687)
- Navigate to installed page after app install (#20797)
🔧 Bug Fixes & Patches (2)
- Filter dispatcher owns relation-target resolution (#20670, #20737)
- Docker base images pinned to patched `curl`, `nghttp2`, `postgresql18-client` (#20805)
📄 View Raw Release Notes (Original Developer Log)
## Highlights
### Features
- **Fireflies integration** — connect Fireflies for meeting transcript ingestion (#20618)
- **Slack workflow connector** — trigger workflows from Slack events (#20427)
- **Application file storage service** — dedicated storage for app-uploaded files (#20793)
- **Per-PR preview deploys** — Cloudflare Worker-versioned previews (#20762)
- **Website migrated to Cloudflare Workers** via OpenNext (#20741)
- **Enterprise JWT signing-key rotation** — cron-based rotation with `secret-encryption:rotate` CLI (#20612, #20613)
- `create-twenty-app` scaffolding improvements (#20688, #20733, #20735)
### ⚠️ Breaking changes
- **`ConnectedAccount.connectionParameters` now encrypted** — requires `ENCRYPTION_KEY` configured (#20673)
- **Connected account permissions unified** (#20732)
### Notable improvements
- Self-hosting docs now cover `ENCRYPTION_KEY`, `FALLBACK_ENCRYPTION_KEY`, and key-rotation procedures (#20611)
- Filter dispatcher owns relation-target resolution (#20670, #20737)
- Stop bundling twenty-ui React CJS runtime (smaller bundle) (#20703)
- `@WasRemovedInUpgrade` decorator for cross-version field removals (#20729)
- BlockNote slash-command shows empty state on no match (#20689)
- Messaging perf tweak (#20687)
- Navigate to installed page after app install (#20797)
- Unified OAuth success/failure screen with the authorize page (#20746)
- Drop legacy `rolePermissionFlag.flag` column + fallback logic (#20730)
- Deprecate and backfill removal of `ConnectedAccount` standard object (#20752)
### Security
- `@xmldom/xmldom` bumped to 0.8.13 (#20798)
- Docker base images pinned to patched `curl`, `nghttp2`, `postgresql18-client` (#20805)
### Bug fixes
~20 fixes including: standalone page layout crash, command-menu availability expression sync on existing workspaces, `PermissionsException` → HTTP status mapping on REST API, gmail to/cc/bcc participants preservation, AI Chat preference-models import & cost display, workflow code-step input restoration, IMAP/SMTP reply-account resolution, sign-in `QueryRunnerAlreadyReleasedError`, BUILDER_INTERNAL_SERVER_ERROR clarity, error when joining a non-active workspace.
**Full Changelog**: https://github.com/twentyhq/twenty/compare/v2.6.0...v2.7.0