Webhook signatures now use HMAC-SHA256
New endpoints sign events with SHA-256. Existing endpoints can switch in Developers → Webhooks.
What’s new
Changelog
New features, improvements and fixes — newest first.
-
-
Scoped API keys
API keys can now be limited to specific projects and permissions such as deployments:write or projects:read. Existing keys keep full access until you change them.