Devin 2026.11.12

Devin 2026.11.12 was released on November 12, 2026.

Summary

Devin 2026.11.12 is here: cleaner request cards, a redesigned Devin Review page for every org, and a new setting for auto-fixing review findings. Curious what else landed?

Release Notes

Sessions & Workspace Same-kind requests merge into one card When Devin asks for several things of the same kind at once (credentials, approvals, network access), they appear together in one compact card instead of a stack of cards. "Reminder set" row When Devin sets itself a reminder, the session shows a "Reminder set" row with the time or schedule and a link to the reminder. Repo file links show as pills Bare links to a file on github.com or gitlab.com appear in chat as a short pill naming the file, lines and commit instead of the full URL. Drag an open session by its header Drag an open session by its pane header onto a sidebar folder, Recent or another session, with the same result as dragging its sidebar row. Clearer upload and folder-attach errors Attaching a folder no longer fails when one file cannot be read (the rest is attached and you are told what was left out), and uploads blocked by your network's security policy say so with the reason. Devin Review Redesigned Devin Review page The redesigned Devin Review page is now available to all organizations: merge controls, the actions menu and the diff-size pill live in the top bar, the sidebar collapses out of the way, and findings are presented in the redesigned cards and panels. "Automatically fix Devin Review findings" setting Whether Devin fixes Devin Review findings on pull requests from its sessions is now its own setting, separate from Responding to bots. The account default is in Settings > Review, and each person can change it for their own sessions in Settings > Preferences, under Devin sessions. Security Scan syncs with several connections When starting a Security scan you can pick several connections so its findings sync to more than one external destination. Source filter lists each connection The Source filter on the Findings page lists each connection separately, so findings can be filtered to a single scanner connection. Named Custom connections A Custom security connection now asks for a connection name (for example "Semgrep"), which is the name it is shown under. Delete a finding tag org-wide Hover a tag in the Findings filter and click the X to delete it from every finding at once. Each finding has its own chat The chat button on a finding opens that finding's own chat; the Findings page launcher keeps its general chat. Finding status changes can be undone Dismissing a finding or marking it reviewed shows exactly what changed, with an Undo button (or Cmd/Ctrl+Z). Veracode and Black Duck findings sources (closed beta) Security connections can import findings from Veracode (Static, Dynamic, Manual and SCA findings) and Black Duck (vulnerable components of a project version). Dismissing or reopening a finding writes back as a Veracode mitigation or Black Duck remediation status. Available as a closed beta. Enterprise & Settings Seven more optional GitHub permissions Enterprise admins can stop Devin from using the GitHub code quality, deployments, pages, discussions, repository projects, repository hooks and packages permissions under Optional GitHub permissions. Approve personal secrets shared with service users Anyone who can write to a session can approve a request to use a personal secret they shared with a service user. Enterprise-disabled agent modes are shown Organization settings show agent modes disabled by your enterprise and explain who can enable them. Login page explains IP allowlist denials Users signing in from outside their organization's IP allowlist see why on the login page, including their current IP, instead of a blank login page. Multiple installations per MCP in Customize MCPs signed in with several accounts list each installation separately with its own settings; add another installation from the marketplace card; every installation offers Disconnect and Uninstall with a short explanation. Supabase can switch between read-only and full access from its settings. Pylon EU region Admins can connect a Pylon workspace hosted in Pylon's EU region, and Pylon issue links open the EU app for those workspaces. Bitbucket Data Center clone fixes Clones through Devin's git proxy work with Bitbucket Data Center /scm/ clone URLs and on instances with Basic authentication disabled (the default in version 10). MCP tool permissions Set each MCP tool to Allow, Needs approval or Block from Customize. Enterprise admins can also limit individual tools to specific organizations. Integrations Mention-only Slack thread mode New Slack thread mode "Reply in the same thread, only when mentioned": Devin stays in the thread but only responds to messages that tag it. Available as the org default and as a personal override. Archiving a session archives its Slack code channel Archiving a Devin session also archives its dedicated Slack code channel. Teams: Devin edits messages in place In Microsoft Teams, when Devin edits a message it is updated in place, and a replaced message collapses behind "Show earlier". Slack working status for @mentions In Slack threads with several people, Devin shows its working status right away when you @mention it, and after it starts acting on an untagged reply. Automations & Oncall Readable schedules on automation cards Automation cards show a readable schedule ("Weekly on Thursday at 6:00 PM...") for schedules that previously showed raw RRULE text. Oncall report notifications and PR panel Oncall report notifications in Slack open with the report period and list action items as bullets; the report's pull requests panel shows each PR's state, repository and date (GitLab orgs see "Merge requests").

View original release

Other Recent Devin Releases

• 2026.11.09 (November 9, 2026)
• 2026.11.06 (November 6, 2026)
• 2026.11.02 (November 2, 2026)
• 2026.10.30 (October 30, 2026)
• 2026.10.28 (October 28, 2026)

All Devin releases · All AI coding tool releases on Havoptic