Skip to main content
Released February 11, 2026 · Stable · View on GitHub 0.2.0 is a very large release — 260+ merged PRs — centered on turning PipesHub’s connector layer into a real platform. More than fifteen new data sources land (Jira, Box, S3, MinIO, Google Cloud Storage, Azure Blob, Azure Files, Nextcloud, Notion, Linear, Zammad, Zoom, Google Drive, Monday, Snowflake, Salesforce), connectors gain multi-instance support with per-instance filters, and knowledge bases are re-architected as first-class connectors with their own migration. Under the hood, a new database abstraction layer makes ArangoDB access fully async and removes the direct Arango dependency from the Node.js API. Operators also get meaningful security hardening (logout token invalidation, captcha, password-reset fixes, the MongoDB “Mongobleed” CVE fix), a PipesHub OAuth2.0 authorization server with JIT account provisioning, and new deployment options: a Helm chart, Kafka SASL, Redis TLS, and S3-compatible object storage for internal blobs.

Highlights

15+ new connectors and datasources

The connector catalog roughly triples this release: Jira (#1098 — @darshangodase), Box (#1136 — @SharmaNishchay), S3 (#1235 — @Kushagra1122), MinIO via S3-compatible API (#1249 — @abhishekgml1991), Google Cloud Storage (#1315), Azure Blob Storage (#1316), Azure Files (#1433 — @Kushagra1122), Nextcloud (#1310 — @SharmaNishchay), Notion (#1302 — @shrikantNemiwal1), Linear (#1198 — @darshangodase), Zammad (#1346 — @darshangodase), Zoom (#1002 — @roy-sid), and dedicated Google Drive personal and enterprise connectors (#1258 — @R0gue-one). New datasource clients also arrive for Monday (#1299), Snowflake (#1303, #1304 — @rish664), and Salesforce (#1289 — @jatingaur18).

Multi-instance connectors with filters and lifecycle management

You can now run multiple configured instances of the same connector (#1151 — @vishwjeet-pawar03), each with its own credentials and sync filters. The surrounding lifecycle matured across the release: connector filters with dynamic filter-option APIs (#1202, #1169 — @shrikantNemiwal1), separate API routes for saving auth and filters (#1192), instance rename (#1166), instance deletion (#1350), a connector-status check before indexing (#1191), and a corrected default admin scope of “team” (#1168).

Knowledge bases become connectors, plus a Knowledge Hub API

Knowledge bases were re-architected as a connector type with an automated migration (#1371 — @tushar1245, follow-ups #1403, #1406) and renamed to “Collections” in the UI (#1386 — @vishwjeet-pawar03). A new Knowledge Hub API unifies browsing and search over all knowledge (#1232, #1334 — @shrikantNemiwal1), backed by KB and folder migrations (#1170, #1179) and an all-records page in the frontend (#1374).

Graph database abstraction layer, async ArangoDB

A new database abstraction layer introduces an IGraphDBProvider interface, an aiohttp-based HTTP client for fully async ArangoDB operations, and a GraphDataStore with transaction management via context managers; connectors were migrated off the old BaseArangoService (#1145 — @tushar1245, follow-up fixes #1194, #1195, #1197). The syncPoint collection was flattened (#1181) and the Node.js API dropped its direct ArangoDB dependency entirely (#1455 — @vishwjeet-pawar03).

PipesHub as an OAuth2.0 provider, JIT provisioning, and security hardening

PipesHub now ships its own OAuth2.0 support (#1321 — @rish664) with the spec published in OpenAPI (#1324), JIT account provisioning (#1347 — @abhishekgml1991) and generic OAuth JIT support (#1453). Hardening includes token invalidation on logout (#1162 — @tushar1245), captcha verification on auth flows (#1241, #1294), password change/reset fixes (#1257), a user-enumeration fix (#1273), and the MongoDB “Mongobleed” CVE-2025-14847 fix (#1252 — @loganaden).

Citations that are actually usable

Citation handling in answers was overhauled: filenames now appear in citations (#1187 — @vishwjeet-pawar03), citations for the same file are grouped (#1200), and numbering was fixed across streaming, non-sequential, and overflow cases (#1172, #1188, #1205, #1206). Citation metadata gained a previewRenderable flag so the UI knows what it can preview (#1226), and source links were fixed (#1300).

Smarter document parsing: VLM OCR, structured output, spreadsheets

A VLM-based OCR strategy joins the parsing pipeline (#1148 — @kaushal1999) alongside structured output for specific LLMs in indexing and query (#1144, fix #1178). Spreadsheet handling matured significantly: multi-row header handling with LLM header detection in the Excel parser (#1368), refactored CSV processing (#1456, #1336, #1344), TSV support including in-chat rendering (#1339, #1354), and SVG image indexing (#1199).

Breaking changes & upgrade notes

  • Knowledge bases are migrated into connector form on upgrade (#1371); related KB/folder migrations run automatically (#1170, #1179, #1406, #1452).
  • The deprecated “Public connector URL” setting was removed from frontend and backend (#1233, #1337).
  • Individual account creation was removed (#1382); common is no longer the default Microsoft tenant ID (#1267).
  • New environment variables control rate limiting and access/refresh-token lifetimes (#1255); LLM row-processing count for tables is now env-configurable (#1319); Kafka partitions default to 1 (#1384).

Connectors

  • Jira — connector-ID fixes, dynamic project_keys filter options, web URLs on comment and attachment records, scope fixes, site URL removed from credentials, multi-project sync fix, block-group implementation, and Arango-service removal from record deletion (#1180, #1186, #1204, #1298, #1247, #1417, #1356, #1197 — @darshangodase)
  • Box — file-extension filters, incremental folder sync, folder collaborations, date filters with scheduled sync as the default strategy, CCG authentication replacing manual token handling, and URL/reindexing fixes (#1190, #1240, #1277, #1283, #1275 — @SharmaNishchay)
  • SharePoint & OneDrive — reindex and incremental sync, group-sync patches, record-group edges with custom site groups, and assorted bug fixes (#1177, #1305, #1362, #1385, #1442 — @R0gue-one)
  • Google Workspace — individual-user sync fix, auth fix, Gmail refactor, shared-drive sync events, shared-with-me record group, drive streaming patch, and drive/frontend bug fixes (#1174, #1287, #1340, #1398, #1415, #1369, #1313)
  • Confluence — user-sync premature termination fix, permission handling for users without email, and email-warning/web-URL/reindex-event fixes (#1219 — @codingiran, #1221, #1239 — @shrikantNemiwal1)
  • Outlook — filter options, user groups, and default filters (#1210, #1271 — @shrikantNemiwal1)
  • S3 / GCS / Azure Blob / Azure Files — rename/move and content-change detection, revision handling and file-state detection, folder-hierarchy derivation, multi-select file-extension filters, and follow-up fixes (#1297, #1342, #1363, #1429, #1426, #1332, #1355, #1254 — @Kushagra1122)
  • Web — general fixes, record group support, and patches (#1229, #1379, #1392 — @R0gue-one)
  • Dropbox — personal previewRenderable record-type check and folder fix (#1222, #1404)
  • GitHub — starred_at fix (#1211 — @rish231294)
  • Linear — fix for existing files as child records (#1443)
  • Nextcloud — stop storing paths for Nextcloud records (#1437 — @realaashil)
  • Workday — client moved to its correct path (#1251)
  • Shared connector framework — DataSourceEntitiesProcessor derives parent external records (#1396), fix for hierarchical record structure with multi-instance connectors (#1183), scope deletion on auth change (#1351), streaming fix for attachments with special characters (#1335), and cached-credentials validation (#1160)

Agents & AI

  • Optimized agent execution with reduced latency and improved tool handling (#1096 — @vishwjeet-pawar03), plus agent and agent-streaming fixes (#1349, #1365) and removal of non-working bind-tools code (#1149)
  • Hybrid Qdrant search and token-limit handling in tool calls (#1421 — @kaushal1999)
  • Custom system prompts, backend and frontend (#1161, #1230)
  • Embedding model priority ordering (#1147 — @jain-ayush-wyld)
  • Manual indexing, with UI display (#1173 — @R0gue-one, #1361) and record-group reindex (#1175)
  • MD5-based deduplication across all record types (#1208)
  • Docling BytesIO handling and mimetype-to-extension fallback in parsing (#1201, #1218)

Fixes

  • Connector configuration: trailing spaces and whitespace at init (#1165, #1185), trailing slashes in URLs (#1164), removed 10-character minimum-length validation (#1167), filter key property and instance destroy on toggle (#1184), duplicate instance-name error message and no-subject mail sync (#1209)
  • Query/retrieval: record access bug (#1182), retrieval bug (#1288), region mapper for search queries (#1425), query update (#1428), org-record filters (#1216)
  • Knowledge Hub / KB: empty items list (#1301), records fetching with filters (#1306), record stream (#1333), duplicate results (#1410), KB records API (#1397), folder-creation bug (#1323), deletion query (#1402), document download (#1377, #1408), owner-role changes (#1454), records permissions with query refactoring (#1439), view-details on empty KBs/folders (#1401)
  • Records & record groups: creation (#1383), processing order (#1330), groups and relations (#1391), placeholder-record connections (#1407), root record group and app edge with migration fix (#1450, #1452), record-group types (#1451), type display (#1411), isInternal field (#1431), record deletion (#1326), record-name encoding (#1224), block/block-group ordering and handling (#1405, #1416)
  • Indexing: skip records from deleted connector instances (#1268, #1272), in-progress KB records failing to reindex after service restart (#1171 — @abhishekgml1991), status set to queued (#1312), clearer error message on indexing failure (#1290)
  • Schema: keep deprecated Arango fields instead of removing them (#1317), entityRelation/project/link schemas added to the base service (#1353), Arango query execution/validation fix and its revert (#1445, #1447), schema-change reverts (#1393)
  • UI: 404-page logo (#1196), web-URL highlighting (#1231) and hide-web-URL support (#1307), white-label logo (#1292), PDF-highlighter and chip styling (#1265), refresh after image upload (#1276), filter-settings next button (#1256), file-extension filter rendering (#1322), form autoscroll and error handling (#1381), frontend-URL/services section removal (#1263), all-records issues and pagination (#1390, #1364, #1458), record-details source header (#1399), filter cleared on record click (#1395), PPT rendering (#1459), non-admin redirect from connector routes (#1446)
  • Misc: upload API payload structure (#1295), exception handling (#1296), organization permission fix (#1348), all-records count with dead-code removal (#1370), minor fixes (#1394)

Performance & reliability

  • Kafka: producer-initialization race fixed (#1248), semaphore-based event-consumption control later decoupled from consumption (#1176, #1291), and indexing semaphore tuned to 15 (#1309)
  • Record JSON size reduction — empty-field stripping and index ranges for Block/BlockGroup children — landed, was reverted, then re-landed (#1380, #1387, #1388)
  • Parallel record fetching from blob storage (#1436) and minimal batch size for CPU embeddings (#1449)
  • Knowledge Hub filter queries moved into ArangoDB and API queries refactored (#1412, #1457)

Security & authentication

  • Removed emails from the getUsers API (#1234), general security bug fix (#1238), AWS region input sanitization (#1242), and input validation fix (#1253)
  • Token handling: removed unnecessary token generation (#1280), auth tokens used for signed-URL record downloads (#1282), redirect-URI fix (#1246), and OAuth configuration support (#1225)
  • Dependency upgrades for vulnerabilities: aiohttp (#1217), qs (#1223), config-resolver (#1243), jwk-to-pem (#1244), react-router (#1236), undici (#1308), lodash-es (#1341) with a lodash dependency fix (#1360), multer (#1423), fast-xml-parser and python-multipart (#1422), and a protobuf bump that was subsequently reverted (#1420, #1424)

Developer experience & infrastructure

  • Helm chart for Kubernetes deployment (#1338 — @KrKOo)
  • Kafka SASL support and configuration (#1359, #1357), Redis TLS support (#1367), Redis as a key-value store for config (#1281), and S3-compatible object storage as an internal storage backend (#1400)
  • Consolidated, cleaned OpenAPI specs with improved docs UI (#1311, #1329), API documentation for authentication, configuration, and crawling (#1139), and docker/npm-start fixes for the spec tooling (#1325, #1327, #1328)
  • CI/build: lint-job fix (#1212), env flag (#1215), missing cachetools package (#1220), environment config variable (#1462)
  • Cleanup: unused domain-extraction logic (#1237), TEST_EVIDENCE.md deleted (#1250), debug-level logging in GraphDataStore (#1270), schema cleanup and ticket enum/edge-type standardization (#1320, #1259), ticketRelation schema removal (#1352), unused AWS Amplify removal (#1419), unused code removal (#1440)

New contributors

  • @codingiran made their first contribution in #1219
  • @Kushagra1122 made their first contribution in #1235
  • @loganaden made their first contribution in #1252
  • @roy-sid made their first contribution in #1002
  • @KrKOo made their first contribution in #1338
  • @realaashil made their first contribution in #1437

Full commit-level detail: GitHub release · Compare view