Changelog: what's new in Orvanta

Selected highlights from recent Orvanta Platform releases.

2026-08-03
v3.0.0
Feature

One trace from the CLI to the script runtime

  • A W3C TraceContext propagator is installed across the platform, and the Orvanta CLI emits spans of its own.
  • The traceparent header is delivered into script runtimes, so telemetry a script emits itself joins the run's trace.
  • BPMN child jobs attach their spans to the process-instance trace instead of starting a detached one.
2026-08-03
v3.0.0
Breaking

A worker pool must name the workspaces that may mint tokens for it

  • Agent-worker tokens can no longer be minted for a worker pool until an operator lists the workspace in that pool's allowed workspaces.
  • The worker-pool read endpoints are now authorised rather than open to any authenticated caller.
  • No deployment is affected today: agent workers are not yet shipped.
2026-07-31
v2.4.0
Feature

orvanta bpmn lands in the CLI, and git sync learns two new object types

  • New orvanta bpmn command: create, read, update and delete BPMN flows, fully integrated with orvanta sync.
  • BPMN flows and DMN decisions are first-class git-sync object types, each with its data migration.
  • Dart scripts infer their parameter schema live in the editor through the WASM signature parser.
2026-07-31
v2.3.0
Security

A revoked token stops resolving to an identity

  • Revoking an API token now ends authentication immediately, rather than only changing who the run is attributed to.
  • The token-email time-to-live is clamped to the token's own expiration.
  • The effective job isolation mode is observable at runtime, so you can confirm what a worker is actually enforcing.
2026-07-29
v2.0.0
Breaking

BPMN Flow moves to Enterprise

  • Creating and editing BPMN flows now requires an Enterprise licence. Running process instances keep executing: a licence problem never halts production automation.
  • Business errors get their own channel, distinct from crashes, so a modelled failure path is no longer indistinguishable from a bug.
  • Timer start events are scheduled instead of silently never firing.