Devzy v2.4.0 Release Notes

2.4.0Apr 20, 2026NewImprovementFixInfrastructure

Improved model routing, full-stack observability, stronger network protections, and major review quality upgrades

This release delivers a broad platform upgrade across both backend and frontend: improved model routing, deeper observability, stronger trust and request-boundary protections, and major review quality improvements for better signal and less noise.

New Features

Improved Model Routing with Hybrid Support

Backend model execution now supports improved provider routing and region-aware model configuration while preserving hybrid model compatibility where needed.

Added provider client integration and model configuration updates
Introduced hybrid support paths for compatible model providers
Improved retry handling for provider calls to stabilize long-running reviews

End-to-End Observability (Frontend + Backend)

Devzy now ships richer tracing and metrics across API, worker, and browser surfaces.

Added telemetry instrumentation with log-to-trace correlation
Added worker-level metrics endpoint for runtime visibility
Added dashboard and tracing integration paths in the frontend/deployment setup
Improved startup/runtime handling so telemetry failures degrade gracefully

Waitlist and Notification Flow Expansion

Waitlist capture and downstream notification behavior has been expanded and hardened.

Added waitlist capture and supporting UI/API flows
Added notification flow for new waitlist entries
Added and refined notification-provider support across integrations

Product UX and Configuration Controls

The frontend received major UX improvements and stronger admin/operator controls.

New design revamp with indexing UI enhancements
Preferences now support additional review instructions and max review rounds
Improved profile/dashboard navigation and activity redirects
Added issue-tracker OAuth integration flow and related setup improvements

Improvements

Review Quality and Context Pipeline

The code review engine now produces better-grounded comments with stronger cross-file reasoning and better suppression/ranking behavior.

Improved cross-file intent/context extraction and exploration evidence handling
Added AI-driven comment curation with suppression reason tracking
Improved feedback/judge/refiner flows for severity calibration and clarity
Reduced review fatigue through prompt and orchestration tuning

Webhook and Queueing Reliability

Webhook handling was refactored and made more resilient for installation and high-volume flows.

Extracted monolithic webhook controller into staged architecture
Added safer queue gating for event types that should run inline
Improved distributed locking and lease/renewal boundaries for PR processing
Added clearer behavior around review-cap and queue skip paths

Security Hardening and Trust Boundaries

Frontend proxy routes and backend-bound flows now enforce stricter origin and outbound validation.

Hardened backend URL trust checks and startup/runtime validation
Added stronger outbound URL/IP/DNS SSRF protections (including IPv6 edge cases)
Improved CSP/Faro origin validation and caching behavior
Tightened internal secret forwarding and auth-first route behavior

Bug Fixes

Fixed: Iterative review execution regressions in specific webhook/review paths
Fixed: Installation events not consistently processed under queue-enabled mode
Fixed: OAuth callback compatibility issues in GitHub auth flow
Fixed: Data-layer query engine/runtime packaging issues across deployments
Fixed: Multiple timeout/abort cleanup paths in backend proxy and setup routes
Fixed: Frontend preferences and review-prompt configuration inconsistencies