Skip to content
← Back to release notes
v0.126.0 stable major release

Release v0.126.0

Nov 03, 2026

Alerts that reach your PSA and your webhooks; device groups that span every organization; Microsoft 365 and Google Workspace backups from NinjaOne SaaS Backup with organization-level alerts; Jobs moving to Flows, now on by default; and Breeze AI that deploys software, runs contract billing and places Pax8 orders with a second person's approval.

Alerts & PSA

  • Partner admins can create All organizations webhooks that receive events from every organization they manage, so one endpoint covers the whole client base.
  • New webhooks send a richer alert payload with status, hostname, site, organization, a link to the alert and any external ticket references. Existing webhooks keep the payload they have today.
  • Failed webhook deliveries retry for about 21 hours (1 minute, 5 minutes, 30 minutes, 2, 6 and 12 hours) before they give up.
  • ConnectWise Manage alert tickets, opt-in per connection: Breeze opens a ticket for each qualifying alert, and alert pages show the linked ticket. Create one by hand, see counts by state, and retry the ones that failed.
  • The Partner API can acknowledge and resolve alerts and attach external ticket references, under a new opt-in permission, so your own PSA or tooling can close the loop.
  • Alert webhooks now fire when an alert is suppressed or escalated, and the event picker offers Ticket Merged.
  • Acknowledged or suppressed alerts resolve on their own when the condition clears. Alerts that require a person never do, and event-log alerts re-open only on new events.
  • Warranty-expiry alerts are graded as lifecycle notices instead of critical.

Devices & Groups

  • Dynamic device groups can span every organization. Partner admins with access to all organizations create them and assign them from partner configuration policies. Organization users see the group's name and their own devices, read-only.
  • Group rules can match a software version (below, at least or equal to) and a software vendor, and groups follow software inventory and warranty changes.
  • Export CSV on the Devices list exports every matching device with the columns you see.
  • A Warranty Ends column and a Warranty Status filter on the Devices list.
  • Bulk Add to group and Remove from group for static groups.

Backup

  • Microsoft 365 and Google Workspace backups from NinjaOne SaaS Backup (Dropsuite) appear next to Cove in backup health, the customer portal and reports. The connection reads status only.
  • SaaS backup failures, including Cove Microsoft 365 workloads, raise organization-level alerts that flow through notifications and automations like any other alert.
  • Topology alerts keep their history and PSA ticket links when the device that raised them is deleted.

Flows & Automation

  • Flows are on by default, and New job opens Flows. Existing Jobs keep running and stay editable until you move them.
  • Move to Flows on the Jobs page shows how each Job would convert: Exact, Needs review, or Can't move yet with the reason. It runs the draft flow alongside the Job so you can compare, and switches over only when you say so. Each trigger runs once, in the Job or the flow, never both.
  • A switched Job's webhook URL keeps working and forwards to the flow. Revert turns the Job back on at once.
  • Flows gain a webhook tab, visible run limits and a Settings → Flow limits page, with a partner default that an organization can only lower.

Breeze AI

  • Breeze AI can search the software catalog and deploy software, look up device inventory and run device operations, browse a device's event logs live, read tenant variables and start Quick Support sessions.
  • Contract billing from chat: preview and generate an invoice, and push invoices to QuickBooks or Xero. Generating and pushing need a second person's approval.
  • Pax8 from chat: integration status, product search with live pricing, subscription drift and order drafts. Submitting an order needs two-person approval of the estimated cost.
  • Ticket, quote, invoice, contract, organization and site pages tell the chat what you are looking at, so you don't have to paste it in.
  • Device and alert lists name each row's organization when you manage more than one, script history can be filtered to one device, and documentation search returns the matching section.
  • Adding or removing devices from a group through Breeze AI now asks for approval.

Everyday Work

  • Privileged access: an elevation the end user declined on the device can no longer be approved and launched afterwards, and requests show a Withdrawn status and filter. On Windows, standard users who ask IT for elevation are told whether it was approved, denied or expired, with the technician's reason. Needs this release's agent.
  • Remote desktop sessions now time out after 30 minutes idle instead of 5, unless your Remote Access policy sets a timeout. The viewer says why a session ended.
  • Event Logs policies can collect Warning and Information events from up to 20 more Windows applications. APC PowerChute events are collected by default, and the Windows Security category now includes audit events such as failed logons and lockouts. Needs this release's agent.
  • A read-only Emsisoft cloud console integration shows endpoints and detections.
  • Update rings can block and pin Linux packages.
  • Clients without a portal account can download a proposal as a PDF from the public link, and a signed agreement link offers the certified signed copy.
  • Contracts created from an accepted quote link back to it and are marked ready to activate.
  • Ticket import brings attachments across.
  • Partner settings show which organizations override each setting, and Known Guests gets a partner tab.
  • Your organization's brand colour reaches quotes and invoices, partner Custom CSS applies to every client portal, and the portal sign-in page shows the organization's welcome message.
  • Report Excel exports are real .xlsx files.
  • DNS Security's Events tab loads in pages with Load more.

Agent & Platform

  • On macOS, the desktop helper comes back on its own after an agent update, a locked Mac's display stays awake for remote sessions, and a Screen Recording permission that macOS still refuses is explained.
  • On Windows, the legacy restart box now defaults to Postpone, so pressing Enter no longer restarts the machine. The UAC prompt closes after an approve or deny, and event logs are no longer skipped. Needs this release's agent.
  • A crash-looping Breeze Assist is now reported, and agent upgrades back off after a failed verification instead of retrying endlessly.
  • Discovery links a discovered asset to a device by MAC address only, so an IP match alone no longer pairs the wrong machines. Manual links are untouched.
  • Security hardening across sign-in flows, incoming Huntress webhooks, invites, HTTPS enforcement and dependency advisories. Partner and organization names that impersonate well-known brands are refused. Self-hosters are encouraged to upgrade.

Alerts now leave Breeze and land where your team works. One webhook can cover every organization you manage, failed deliveries keep retrying for most of a day, and a ConnectWise Manage connection can open a ticket for each qualifying alert and show it on the alert page. The Partner API can acknowledge and resolve alerts in return, so your own tooling can close the loop.

Device groups can now span every organization, which means one partner policy can target “every server running an outdated version of this app” across the whole client base. NinjaOne SaaS Backup joins Cove for Microsoft 365 and Google Workspace backups, and a failed SaaS backup now raises an alert even though no device is involved. Breeze AI can deploy software, generate contract invoices and place Pax8 orders, with a second person approving anything that costs money.

A few things behave differently after the upgrade. Flows is on by default: New job opens Flows, and the Jobs page offers Move to Flows with a side-by-side comparison, but nothing moves until you switch it. DNS Security stores only blocked and redirected queries unless you turn on Store allowed traffic for an integration. Discovery links assets to devices by MAC address only, and remote sessions time out after 30 minutes idle. Several changes need agent 0.126.0, which rolls out through your normal update channel. Self-hosters will find the migrations and settings in the GitHub release notes.