Windmill Labs Release Notes

1.799.0 (2026-08-28)

Features

• enable Anthropic prompt caching on Vertex AI agent steps (#10876) (320f400)
• instrument AI fill/fix, evals, agents and the debugger (#10853) (0bbd559)

Bug Fixes

• datatables: stop a fork's pg_dump restore from failing silently (#10830) (3ce9bbc)
• key build artifact caches on a runnable's inline modules (#10819) (b72ccc3)
• nested template literals in step inputs, and unresolvable $args tags (#10856) (8f349c0)
• pre-fill the test panel JSON args editor and align its placeholder (#10871) (fb82f36)
• reject a prefixed error_handler_path on triggers (#10847) (d334831)
• unify billable seat counting and prevent fork subscriptions (#10818) (7dd88c4)

1.797.0 (2026-08-26)

Features

• configurable expiry for presigned s3 public url signatures (#10835) (8a6dc27)
• frontend: flag the fork-compare datatable schema diff as legacy (#10829) (07c77ea)
• keep a Hub project live while an update is under review (#10814) (c04b570)

Bug Fixes

• cli: keep svelte component styles in the raw-app bundle (#10838) (b8bf539)
• debugger: parse bun 1.4's UUID inspector token (#10828) (4658224)
• force HTTP router rebuild on trigger-change notification (#10849) (ffdf17e)
• frontend: follow the operating workspace in step input forms (#10834) (6b73145)
• frontend: key the GitHub App installation selector on installation_id (#10831) (78331fd)
• frontend: operator menu opens on hover, pins on click (#10824) (665f83e)
• keep connection string query parameters under token auth (#10859) (f131c39)
• migrate slack resource-connect oauth to v2 (#10836) (9fa8159)
• recover from unresolvable AI session links instead of a dead end (#10854) (e38c449)
• require admin on workspace tarball settings export (#10817) (46c363f)
• restrict filesystem workspace storage to debug builds (#10864) (8b80b09)

Performance Improvements

• index the suspended-job resume test instead of filtering it (#10863) (69320b2)

1.796.0 (2026-08-24)

Features

• add instance setting to mute zombie job restart alerts (#10813) (2906504)
• AI agent evals: datasets, scored runs and comparison (#10633) (9c55785)
• datatables: add a down migration from the migration viewer (#10812) (3b2a6d7)
• frontend: warn when COEP blocks cross-origin resources in raw app editor preview (#10328) (7751d3e)
• track token cost in AI sessions and chats (#10688) (b6e0591)

Bug Fixes

• ai-chat: keep the composer usable while a question is pending (#10816) (25a3e6e)
• frontend: mint string password secrets in the operating workspace (#10815) (93081e2)
• keep ai chat messages when leaving the page mid-generation (#10809) (541b6c8)
• patch sqlx so a cancelled BEGIN cannot poison a pooled connection (#10823) (8dbd12e)
• qualify foreign key targets in generated datatable migrations (#10821) (29c311a)

1.795.0 (2026-08-22)

Features

• show the date on the runs dashboard chart axes (#10808) (a350f7c)

Bug Fixes

• keep raw-app files within their app folder on sync pull (#10796) (5b885ae)
• keep workflow-as-code scripts off dedicated workers (#10805) (01891cd)
• name the requested storage when a workspace storage lookup finds nothing (#10803) (01fc4f1)
• require an unscoped token to reach the workspace encryption key (#10798) (25d9a20)
• require item read scope on workspace tarball export (#10797) (dc27db6)
• scope capture deletion to the workspace in the request path (#10795) (40f0cab)
• size the ephemeral job token to the job timeout it must serve (#10804) (4b406e3)

1.794.0 (2026-08-21)

Features

• inline login errors and a narrower single-column login card (#10777) (28b2ca6)
• support application default credentials for gcp pub/sub triggers (#10778) (8e508ea)
• upgrade bun to 1.4.0 and demote deno in the language picker (#10784) (d85050f)

Bug Fixes

• apply the first script kind selection in the script editor (#10789) (75d0c29)
• build the global chat's prompt identity from the operating workspace (#10793) (0b3dc3e)
• confine job tokens to workspace-scoped API routes (#10631) (9022dc9)
• ground the chat's AI agent provider in the workspace's models (#10774) (449b1a6)
• make workspace preprocessor scripts selectable in flow preprocessor steps (#10786) (a9112b7)
• resolve a script path to its new version as soon as the lock lands (#10794) (3c8e4b4)
• split the MCP script tools into createScript and updateScript (#10783) (92a454b)

1.793.0 (2026-08-20)

Features

• add WM_ROOT_WORKSPACE, the closest dev or prod workspace of a job (#10776) (1f59841)
• cli: deduplicate identical script lockfiles (dedupeLockfiles) (#10769) (05abf6d)
• guided setup wizard for data tables on Cloud (#10584) (5fb145c)
• make the Git Repo Viewer work with GitHub App repositories (#10765) (5099f40)
• rework the resource type list in the add-resource drawer (#10757) (c7ec33c)
• sessions: batch edit, filters and grouping in the session sidebar (#10772) (ac27d02)
• surface execution usage in the sidebar and explain what an execution is (#10760) (e866b68)

Bug Fixes

• explain the 6-field cron format when a schedule is rejected (#10768) (f6645af)
• gate the chat's open_page on the operating workspace's role (#10779) (ee1f981)
• refuse an MCP endpoint call whose required request body is empty (#10771) (dad8fed)
• reject invalid AI agent tool names when the chat writes a flow (#10756) (2b4369d)
• scope git-sync concurrency key per repository (#10767) (ed2ff6c)
• security: a WM_TOKEN job token can never be a global superadmin (GHSA-hfh4-cx4h-3fcr) (#10124) (c2deea1)
• teach the AI the raw-app job bindings, the SDK reference and the draft/deployed split (#10754) (574775d)

1.791.0 (2026-08-17)

Features

• add empty state cards to list pages (#10726) (66bffaa)
• copilot: let plan mode draw, but never write the plan (#10725) (fd9295a)

Bug Fixes

• compile resource types with no properties instead of throwing (#10730) (b17fdab)
• derive a raw app's policy on deploy, and default an omitted execution_mode (#10733) (343ce6e)
• include delete_after_secs in script deploy payload (#10731) (05eba6c)
• support @typechecked decorator in Python relative imports (#8495) (ab3c020)
• type s3-streamed columns that are all-null in the inference sample (#10728) (6b5b9f7)

1.790.0 (2026-08-15)

Features

• add trigger_history table with source tracking (#10696) (633d7bc)
• advertise the pinned artifact version in get_preview_status (#10691) (850b028)
• ai-sessions: add plan mode (#10057) (caa1898)
• let the global AI chat call connected MCP servers as the user (#10656) (3f07a1a)
• stream audit logs in batches when a page is slow to load (#10695) (9334727)
• telemetry: extend feature-usage tracking beyond AI features (#10681) (53eb946)

Bug Fixes

• agents: let the scratch-dir hooks own their permission prompt (#10702) (0a40b38)
• agents: stop the scratch-dir guards prompting on quoted text (#10703) (e6e2e53)
• ci: use random delimiters for untrusted multiline workflow values (#10706) (0fc74de)
• confine jobs:run tokens to the jobs of the runnables they may start (#10635) (ee53327)
• drop sampling params on Claude models that reject them (#10708) (3468cb6)
• groups: replace instance-group delta-patching with a state-based reconciler (#10686) (b551033)
• keep a resource's linked secret reference in sync while renaming (#10693) (60c5ad2)
• keep non traffic-serving processes out of coordinated restarts (#10694) (6d03784)
• recover from a refused mcp read assertion, drop stale discovery (#10710) (effdcd9)
• refresh AI provider model defaults and capability metadata (#10690) (68fc782)
• send sage_intacct oauth client credentials in the request body (#10685) (bd5b3ea)

Performance Improvements

• back off the interactive worker shell under EXIT_AFTER_N_JOBS (#10700) (578d5e9)
• cache resolved python interpreter path across worker restarts (#10701) (878b8ef)
• declare a settings pass instead of reading one setting at a time (#10698) (30f5d2e)
• resolve the worker external IP in the background (#10697) (22eadab)