https://changelog.qualflare.com New features, improvements, and fixes across Qualflare. https://changelog.qualflare.com/#2026-08-10-search-filters 2026-08-10-search-filters Mon, 10 Aug 2026 00:00:00 GMT You can now search changelog entries by keyword and narrow the timeline by product and category. Filters combine with search, and the URL updates as you filter so results are shareable. - Search matches entry titles, bodies, and version numbers - Product filter: App, CLI, API - Category filter: Feature, Bug Fix, Improvement, Integration, Maintenance, Security https://changelog.qualflare.com/#2026-08-05-flaky-fix 2026-08-05-flaky-fix Wed, 05 Aug 2026 00:00:00 GMT Reports over 50MB could intermittently fail with a 500 error during ingestion. This was caused by a race condition in the report-parsing worker pool under high concurrency. Uploads of any size now complete reliably. https://changelog.qualflare.com/#2026-07-28-cli-upload 2026-07-28-cli-upload Tue, 28 Jul 2026 00:00:00 GMT `qualflare upload` now splits large result files into parallel chunks instead of uploading sequentially. In our testing, a 200MB Playwright report that used to take ~90 seconds to upload now completes in under 20. No config changes needed — this is on by default for files over 10MB. https://changelog.qualflare.com/#2026-07-15-sso-integration 2026-07-15-sso-integration Wed, 15 Jul 2026 00:00:00 GMT Enterprise workspaces can now configure SAML-based SSO for member login, in addition to the existing OAuth providers. Set it up from Workspace Settings → Security. https://changelog.qualflare.com/#2026-07-01-security-patch 2026-07-01-security-patch Wed, 01 Jul 2026 00:00:00 GMT Previously, changing your account password did not invalidate existing session tokens on other devices. Sessions are now rotated immediately whenever a password change is confirmed, so a compromised device is fully signed out the moment the password is updated elsewhere. This closes a gap where a stolen session token could outlive an intentional password reset. We recommend reviewing your active sessions under Account Settings → Security if you haven't changed your password recently. A few related changes shipped alongside this: - Active session list now shows device, browser, and approximate location - "Sign out all other sessions" action added to Account Settings - Session tokens are now scoped to a single IP range and re-validated on major network changes We audited every code path that reads a session token to confirm none of them cached a token past its rotation point — this was a multi-week effort across the API and both frontends, and we're glad to finally ship it.