> For the complete documentation index, see [llms.txt](https://docs.taskade.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.taskade.com/changelog/changelog-2026/march-2026/march-11-2026.md).

# March 11, 2026

Taskade developer changelog — March 11, 2026: PKCE Enabled for All Flow OAuth2 Integrations, Custom Domain SSL: Delegated DCV + Reliability Improvements.

{% hint style="info" %}
**Developer highlights.** This section tracks API, MCP, SDK, automation, and Taskade Genesis platform changes for developers. For the full product changelog see [taskade.com/changelog](https://www.taskade.com/changelog); for release newsletters see [taskade.com/blog/updates](https://www.taskade.com/blog/updates).
{% endhint %}

## What's New:

### PKCE Enabled for All Flow OAuth2 Integrations

All automation OAuth2 credential connections now use Proof Key for Code Exchange (PKCE). PKCE was enabled for the OAuth2 strategy powering Flow connections, which protects authorization-code exchanges against interception attacks. No action is required for existing connected credentials; new connections automatically use PKCE.

Reference: [Automation Integrations](/automations/automation/integrations.md)

***

### Custom Domain SSL: Delegated DCV + Reliability Improvements

Managed custom domain SSL provisioning now uses Cloudflare delegated Domain Control Validation (DCV). Instead of requiring the app owner to add a TXT record per certificate renewal, a single CNAME delegation record handles all future renewals automatically.

Additional reliability improvements shipped alongside this:

* SSL provisioning for custom domains is now more reliable during activation.
* The domain purchase flow now validates that the Genesis app has been built before allowing a custom domain to be attached, preventing provisioning errors on unpublished apps.

Reference: [Custom Domains](/taskade-genesis/space-apps-guide/custom-domains.md)