Shipped · APIs and backends

What NangoHQ/nango shipped

The public repository of Nango · github.com/NangoHQ/nango

Written by FoxPlug from the repository's own releases; not affiliated with Nango. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/NangoHQ/nango; Nango did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.

Get a weekly update like this for your product, free

Or Use it as a GitHub Action

See the update FoxPlug writes for nango, free

Week of November 2, 2026

What shipped

Why it matters

This week adds public API routes for updating environment and webhook settings with audit events, and makes webhook signing key rotation accept a supplied key. Several fixes make sync checkpoints, OAuth2 public clients and single function deploys more reliable, and the CLI drops nango clone while catalog code now comes from the Nango API.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: PATCH /environments/:environmentUuid with atomic environment and webhook updates plus audit events, webhook signing key import during rotation, no-op deletes for missing checkpoints, OAuth2 token_request_auth_method none, single function deploy by path, and nango clone

Post for LinkedIn

What shipped this week: a public PATCH /environments/:environmentUuid route with the account:environments:update scope that updates environment and webhook settings atomically and emits environment.updated audit events. Webhook signing key rotation now accepts an optional key. Syncs that clear a checkpoint without one saved no longer fail with checkpoint_conflict. OAuth2 gained token_request_auth_method none for public clients. Single function deploy works by path, nango clone was removed, and the function panel loads catalog code from the Nango API.

Week of October 26, 2026

What shipped

Why it matters

This week the platform moved from actions to tools as the name for callable functions, including a scope rename and a stored-scope migration, and agent sessions gained the ability to run tools. On top of that, environment creation now accepts webhook settings and a signing key, and a regression that rejected no-input action triggers was fixed. Several new integrations also landed, including athenahealth-jwks, formstack-documents, envoice, crustdata and zscaler.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: agent sessions can run tools, the actions:execute key scope becomes tools:call with a migration for stored scopes, and the dashboard and playground list tools. Webhook settings and a signing key can be set when creating an environment, and no-input action triggers work

Post for LinkedIn

This week in Nango: agent sessions can now list and run tool functions alongside actions, and the actions:execute API key scope is renamed to tools:call, with a migration that rewrites stored scopes in existing customer keys. The dashboard functions list and details panel and the playground now show tools. Environment creation accepts webhook configuration and an optional signing key, with GET on a single environment exposing webhook and telemetry secrets only when explicitly requested with the read_secret scope. A regression that rejected action triggers without an input field is fixed, and new integrations include athenahealth-jwks, formstack-documents, envoice, crustdata and zscaler.

Week of October 19, 2026

What shipped

Why it matters

This week broadens API key control: environment keys can be created with narrower scopes and updated afterwards, and tools can be invoked on a connection through an endpoint and node function. Several new providers were added, the CLI gained dryrun and replay for functions and tools, and the Function Playground moved into the function and integration pages.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: environment API keys can be created with scopes and updated afterwards, a new endpoint invokes tools on a connection, and the CLI gained dryrun and replay for functions and tools. Plus new providers Buildkite, Litmos and Circleback.

Post for LinkedIn

This week's changes to Nango: environment API keys can now be created with scopes and updated afterwards, so you can hand out narrower keys instead of full access. A new endpoint and node function invoke a tool on a connection, falling back to an action when needed. The CLI gained dryrun and replay for createFunction and createTool. The Function Playground moved into the function and integration pages. New providers include Buildkite, Litmos, Circleback and more.

Week of October 12, 2026

What shipped

Why it matters

This week brings the two playgrounds onto one page and makes Agent Playground chats last longer and keep their failed or stopped replies, along with handling for upstream outages. On the integration side, tools get CLI creation and a lookup endpoint that still falls back to legacy actions, and a batch of new providers landed.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

One Playground page for agents and functions, Agent Playground chats that keep their history and failed replies, and createTool in the CLI and SDK. Plus new integrations.

Post for LinkedIn

This week the Agent and Function Playgrounds moved onto a single Playground page. Agent Playground chats now last until 24 hours without a message, failed and stopped replies stay in the chat after a reload, and the server sorts upstream failures into distinct errors. The CLI and SDK gained createTool, there is a new endpoint to fetch a single tool by name, and the tools endpoint falls back to legacy actions during migration. Several new integrations were added.

Week of October 5, 2026

What shipped

Why it matters

This week tightened security around redirects, flow control and stale automation, and fixed several long-standing reporting and error-message gaps. It also added more providers and webhook sources, giving users more services to connect without writing their own integration. The internal auth change and the agent session refactors are groundwork that keeps behavior the same for existing callers.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Weekly roundup: GitHub App OAuth open redirect fixed, flow disable scoped to the caller's environment, webhooks no longer dispatched to disabled syncs, GraphQL errors surfaced in action failures, plus more provider integrations.

Post for LinkedIn

This week we closed an open redirect in the GitHub App install and OAuth callbacks and scoped flow disabling to the caller's own environment. Webhooks are no longer dispatched to disabled syncs, and GraphQL error messages now reach the failure summary so action failures name the reason. Plan change dialogs no longer hang on a slow webhook. On the integrations side we added support for Sentry MCP, Intercom webhooks, and several new providers and API key connections.

Week of September 28, 2026

What shipped

Why it matters

This week includes infrastructure improvements for encryption key management and webhook security alongside new integrations and OAuth providers. The endpoint refactoring for function invocations improves the API structure, and proxy timeout handling prevents stalled requests from consuming resources indefinitely.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

V0.71.12 ships Azure Key Vault support, function invocation endpoint refactoring, Slack app config tokens, Discord Bot provider, and webhook verification improvements.

Post for LinkedIn

V0.71.12 adds Azure Key Vault for DEK wrapping with AKS Workload Identity support, refactors function invocation endpoints, introduces Slack app configuration and Discord Bot providers, enables unverified webhook handling, verifies Airtable webhook signatures, and implements 5-minute proxy timeouts for stalled requests.

Week of September 21, 2026

What shipped

Why it matters

Webhook security improvements across multiple providers now enforce signature verification. Live catalog actions bring new capabilities to function invocation. API improvements extend management functionality while webapp and event tracking changes improve reliability and reduce costs.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Webhooks now verify signatures for Salesforce, Affinity, Fillout, and ShipStation. Live catalog actions run as invocable functions. MCP integrations work through the public API. Six new provider integrations added.

Post for LinkedIn

This week brings webhook security enhancements across Salesforce and unsigned providers, requiring secrets for verification. Live catalog actions are now executable through HTTP triggers and the dashboard. MCP_OAUTH2_GENERIC integrations gain public API support. The CLI accepts on-events triggers for functions. Six new integrations added: Omnisend, Tracify, PostHog Capture, JobNimbus, eWay CRM, UKG Pro WFM. Webapp improvements reduce costs and fix accessibility issues.

Week of September 14, 2026

What shipped

Why it matters

The week focused on integrations (five new providers added), billing features (data transfer cap and add-on scheduling), and platform improvements (scheduled functions, OAuth consent flow, billing deep links). These changes address both integration coverage and subscription management for growing deployments.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: scheduled functions unified in orchestrator, Free plans now have 10GB monthly data transfer cap, Neon MCP added, plus Hex, Autumn, and Linkly integrations. Dashboard now returns you to your original page after login.

Post for LinkedIn

This week in Nango: scheduled functions unified in the orchestrator payload, Free plans now enforce a 10 GB monthly data-transfer cap, Neon MCP added as a dynamically registered provider. Three new integrations: Autumn (billing layer), Linkly (URL shortener), and Hex. Platform improvements include dashboard returning you to your originally requested page after login and Stripe App Sandbox configuration moving to the integration level.

Weeks with too little public activity are left out rather than filled in. Last updated 2026-11-10.

Is this your repo? Ask us to remove this page.