Windmill Labs Release Notes

1.827.0 (2026-10-07)

Features

• audit instance settings writes, stable audit OTel target (#11593) (0792332)
• default new raw apps to react 19 and ask for the data setup (#11586) (818ddd5)
• export queue delay as OTel and Prometheus metrics (#11588) (7565349)
• pause a worker group without stopping its workers (#11596) (95c4b30)
• run AI decision steps on OpenAI's Decisions API (#11590) (046df9e)

Bug Fixes

• avoid URLSearchParams.keys() so the frontend check passes (#11599) (fc6c84c)
• let recover: true from the error handler turn nested failures green (#11559) (03e484e)
• run dependency resolution and build steps under nsjail (#11609) (a238d01)
• scope the python wheel cache to workspaces with their own registry (#11597) (14381ce)
• type snowflake columns in database manager insert and alter forms (#11578) (f2fb156)

1.826.0 (2026-10-07)

Features

• count OIDC signatures and reuse server-side tokens (#11556) (e277735)
• isolate the raw-app editor preview when the app opts into sandboxing (#11572) (fa25397)
• job_token_scopes OIDC claim (#11551) (d493eff)
• set up a new app in one modal over its AI session, fix its deploy (#11582) (7190185)

Bug Fixes

• export getWorkspace and other client helpers as named exports (#11581) (bf201be)
• give the dbt workspace settings page a header like its siblings (#11576) (38aa4ea)
• ignore schedule missed-run counters in workspace compare (#11570) (eab3dd5)
• keep chat tool cards collapsed the way the user left them (#11575) (c71ecad)
• keep run status buttons from selecting the flow input node (#11579) (8661797)
• make every trigger and schedule editor control respect read-only mode (#11569) (52a99c3)
• strip NUL from ai agent output and job args before jsonb writes (#11568) (cf4bec6)

1.825.0 (2026-10-06)

Features

• choose build with AI or code when creating a raw app (#11560) (431f861)
• confine jobs:read to the runnable paths it names (#11550) (b371af3)
• open a run as a pushed page on the narrow runs page (#11541) (fd8de45)
• say a canceled team plan is canceled, not past due (#11539) (18e44d3)

Bug Fixes

• group raw app edits that carry a file diff in the ai chat (#11558) (5912d30)
• honor custom timeout in setup phases and name the limit hit (#11557) (4fd4f76)
• search slow runs filters by time windows instead of timing out (#11549) (2bf9cfc)
• serve the raw-app preview shell sandboxed, load a blob copy in the editor (#11554) (5f92daa)
• simplify the run page AI card to a prompt and a chat button (#11561) (8c74f75)

1.824.0 (2026-10-05)

Features

• add an AI decision flow step (TypeSafe's Jev, Cloudflare's Clef) (#11474) (3cba8a7)
• add notion oauth provider (#11528) (8b2dc1e)
• ai-chat: show per-file diffs for raw app edits (#11521) (ec0883a)
• bill team-plan service accounts as half a seat (#11298) (3aee181)
• card layout and load-more for the audit logs page (#11507) (af1a29a)
• offer audit-log and drive-metadata scopes for google oauth connects (#11527) (c4e7c71)
• offer slack read scopes for files, user groups, emoji and dms (#11526) (b5fda7d)

Bug Fixes

• bound s3 ai attachment downloads before encoding (#11534) (92fbfc0)
• collapse queued and running chat tool calls into a waiting row (#11523) (4f30982)
• disable postgres triggers whose replication slot was invalidated (#11536) (85248ee)
• evaluate field conditions and step test inputs in QuickJS (#11487) (c962d37)
• flush proxied responses before the dev supervisor closes the client (#11530) (cefb195)
• label the default slack scopes and list them first in the connect dialog (#11529) (e76781c)
• run each ai eval model in its own job and let the docs tools reach the backend (#11533) (222dad1)
• show the flow row edit button to builder operators (#11535) (6c4e34c)

1.823.0 (2026-10-04)

Features

• redesign the service logs page (#11506) (0f65df2)

Bug Fixes

• apply the pg keepalive settings to the postgres trigger connection (#11512) (33f6de0)
• bound the datatable migration lock wait and reap a dead holder (#11510) (711e08c)
• bound the pg cached-connection reset probe so a vanished server fails fast (#11505) (d4a423f)
• cancel an abandoned pg query and close failed connections cleanly (#11511) (26856b8)
• delete a flow chat turn with its flow run, not its step jobs (#11477) (35ec16d)
• drop a fork's datatable database despite connected sessions (#11509) (fa419af)

1.822.0 (2026-10-03)

Features

• add a cancel-only jobs:cancel token scope, optionally path-scoped (#11479) (4bc7e0d)
• add an instance setting routing all dependency jobs to one tag (#11486) (3d1d249)
• add trigger, tag, run-as and digest claims to job OIDC tokens (#11481) (4beb1f9)
• log pg job progress, warn on stalls, detect dead db connections (#11491) (d722772)
• read the OIDC signing key from a file and rotate it (#11482) (d949484)
• replace the AI input filling toggle with an additional prompt (#11501) (e952298)
• restricted job tokens per script and flow (#11484) (e7fc1b2)

Bug Fixes

• keep a resource default set in the schema when the script is redeployed (#11495) (68f8f19)
• let instances withhold signing secrets from the settings API (#11483) (99e96d3)
• let legacy draft-only items be discarded from the home page (#11488) (98274a7)
• never reuse a pg connection a script left inside a transaction (#11497) (b7f74cd)
• read inet and cidr results with their prefix, including arrays (#11476) (ae093b7)
• stop the pg executor cache from pinning a pooler slot (#11490) (eed7e7d)
• unstick postgres jobs on large results with custom-typed columns (#11475) (14801fd)

Performance Improvements

• keep a pg executor connection per database (#11492) (013b302)

1.821.0 (2026-10-01)

Features

• add //no_network annotation for native scripts (#11445) (c25bb1e)
• add alert actions and reduce alert padding (#11439) (52c3188)
• add test key button to AI resource drawers (#11466) (26be1d7)
• add wmill datatable migrate status (#11465) (7f1bead)
• agents as a standalone kind with home listing, detail and editor pages (#11332) (8c7dcbb)
• dispatch ai agent tools through the worker queue (#11227) (039f49e)
• group consecutive tool calls in the AI chat (#11329) (9613549)
• harden job OIDC tokens with version claims, jti and a lifetime cap (#11457) (227e934)
• labelled scope checkboxes in the oauth connect dialog (#11460) (840567f)
• let operators compose flows when the workspace grants the right (#11228) (ca44043)
• let slack connects issue a user token via user_scope (#11452) (d518aa5)
• make hub integrations usable as examples in global AI chat (#10599) (8953ca6)
• offer slack write scopes as bot and user scope options (#11472) (ab2de83)
• open chat path pill actions from a hover menu (#11441) (083db5e)
• rename agent memory options to On and Legacy, explain each (#11442) (077709b)
• sessions: show an item's deployed page in the preview panel (#11458) (b10f83c)

Bug Fixes

• apps: hide custom component host while it is not rendered (#11434) (c728346)
• await async def main in python scripts (#11437) (94ac34a)
• block runs while a JSON input does not parse (#11463) (ddde41b)
• bump git sync hub scripts to cli 1.820.1 (#11438) (7664001)
• cli: resolve fork specific items from the parent workspace entry (#11436) (1d8d4a1)
• collapse run card in ai chat when the run is declined (#11435) (ab2a973)
• embed a VERSIONINFO resource in the Windows binary (#11433) (9028432)
• ignore edited_at and edited_by in flow and item diffs (#11455) (851f6d7)
• keep flow graph rendered between deploy and navigation (#11454) (c0fb2db)
• lost suspend decrement when concurrent approvals resume a flow (#11450) (a8e65ab)
• npm-proxy: support _auth and username/_password basic auth from npmrc (#11467) (1c6758a)
• offer user scopes in the slack scope editor and drop the generated description on type change (#11464) (153b02a)
• restore the save to workspace button on inline flow steps (#11469) (88d0cd0)
• stop running deleted script versions from worker caches (#11456) (d2830cb)

1.820.0 (2026-09-29)

Features

• add pull_batch to claim jobs for many waiting workers at once (#11350) (9f40cdc)
• add tree view to the schedules page (#11360) (e68ff0d)
• ai-agent: add compaction memory that summarizes older context (#10928) (c1b59f7)
• detect and alert when a schedule skips occurrences (#11317) (97fa55b)
• external instance cluster for data tables and Ducklake catalogs (#11197) (8741843)
• refuse OIDC tokens to previews that impersonate a path their user cannot write (#11396) (d1260d7)
• restart perpetual runs on the version a deploy makes runnable (#11200) (cf5c49c)
• run turns in several flow chat conversations at once (#11202) (f367eaf)
• share AI guidance with the CLI skills and lint flow groups (#11397) (ede4103)
• show native web search in the assistant settings modal (#11394) (235410c)
• stop cross-origin isolating the raw app editor (#11411) (6064aec)

Bug Fixes

• bound a resumed session fork's wait, keep its intent while in flight (#11413) (e6df8d7)
• create workspace forks in the background, with progress (#11406) (054109d)
• drop caller-supplied _MODULES at push for every job (#11418) (c5f59d6)
• keep new-menu submenus open while crossing the gutter (#11414) (2f87bc6)
• keep secret variable values hidden when toggling secret (#11383) (da5c58d)
• refuse flow preview restarts from runs the caller cannot read (#11407) (c34abf7)
• report a worker's last job when it ran under one poll interval (#11399) (797147e)
• run custom schedule handlers as the schedule (#11398) (bda00c6)
• surface raw app build errors to the session AI (#11415) (50ffad5)
• turn the default raw app into a feature tour (#11417) (83b8954)

1.819.0 (2026-09-28)

Features

• add hub sync button to the resource types tab (#11375) (d76a962)
• add provenance claims to job OIDC tokens (#11369) (990a726)

Bug Fixes

• complete a canceled flow whose worker died between two steps (#11366) (c2d8997)
• frontend: apply operator write locks from the session's operating workspace (#11395) (5e59cef)
• gate batch rerun on job read access, scope started_at to workspace (#11387) (14a2619)
• hold interpolated references and captures to the token path scopes (#11391) (cedd6dc)
• judge IPv4 embedded in IPv6 and pin the object storage test connect (#11389) (ec6ec1b)
• keep smtp_clicktracking_off when syncing instance config (#11372) (60ef821)
• keep test panel controls off the args form in debug mode (#11382) (22b5a1c)
• let custom workspace error handlers send email with the instance SMTP (#11365) (e2be584)
• list only the paths the caller can read in path autocomplete (#11388) (f4dcaf3)
• never double-process a slow canceled flow in the zombie sweep (#11368) (d7a61de)
• only let a job's own token claim run lineage (#11367) (90f9e59)
• only restart a flow on a version of its own path and workspace (#11376) (893e64f)
• redesign run not found page and fix switching to the right workspace (#11374) (d9c7d71)
• run an AI agent tool on the worker its own tag selects (#11370) (649c43e)
• scope flow resume to its workspace and minting to the job's run (#11392) (163a4ff)
• scope workspace dependencies create to the path workspace (#11385) (3eaf288)
• stop the schedule enabled toggle from showing unsaved changes (#11390) (3838cd6)

Performance Improvements

• advance a flow step with one v2_job_status update (#11357) (65cba2d)
• complete a job in one statement on the common path (#11355) (bebd762)
• shrink the module graph that gates first paint in dev (#11373) (47525b2)

1.818.0 (2026-09-25)

Features

• add an instance-wide accent color setting with sidebar tint (#11335) (1fd729a)
• add an options field to the postgresql resource (#11223) (d3d5392)
• ai-chat: show native script edit diffs (#11278) (1de54ee)
• alert on and optionally cancel jobs stuck on unserved tags (#11354) (da866c5)
• bedrock: add OIDC role assumption as a fourth auth mode (#10936) (e14da5c)
• chat with a saved agent from the agent editor (#11292) (d8aaa73)
• cli: include extra paths in codebase digest for monorepo imports (#11327) (9b46b21)
• collapse the fork members setting and show its state in a badge (#11220) (3bd89e9)
• count enabled service accounts as operator seats (#11297) (318f899)
• db-manager: add a schema diagram view (#11030) (7dec3d9)
• filter ai session tools to the user's workspace capabilities (#10719) (6cd70a8)
• infer a script's schema when a deploy (e.g. MCP) sends none (#11339) (d18d704)
• let a workspace withdraw operator schedule and trigger writes (#11226) (9a1c6e5)
• mount session list pages in process instead of iframes (#11289) (ebb3048)
• per-folder AI chat instructions via ai_instruction resources (#11325) (80903c9)
• refresh MCP tools when scripts and flows change (#11337) (0bac766)
• render a tool's web search result as the session web search card (#11313) (fa0fc24)
• rework the db manager: native grid, tabs, sql editor, joined columns (#11340) (4fd7d62)
• rework the git sync setup into a guided flow (#11308) (504d01a)
• schedule hub scripts (#11330) (733c119)
• seed SCIM usernames from nickName (#11346) (9100ab9)
• show restart from failed step in run page top bar (#11317) (62d0088)
• start a deferred queued job now without changing its id (#11347) (4b09558)
• support aiagent steps in test_run_step (#11321) (1b74939)

Bug Fixes

• allow results access inside nested functions in input transforms (#11358) (ca8a04a)
• always save slack/teams/email handlers as scripts (#11345) (421fdab)
• bill from a single service account telemetry count (#11301) (ceb1722)
• build ag grid link cells as DOM nodes with a vetted href (#11316) (5b03c17)
• carry labels when deploying variables, resources and folders (#11222) (94e4fb1)
• centre the toggle knob inside its track (#11314) (d02ff9a)
• cli: stub the API client over its real exports in tests (#11363) (30bb62c)
• correct the tool controls and name field of a nested AI agent (#11221) (1d119e6)
• frontend: keep the session when the persisted workspace is stale (#11344) (2e5f6d0)
• hide answer actions until the chat turn ends (#11323) (98d3897)
• keep a watched job's code when its completion update drops it (#11290) (592ef73)
• label chat job links with the end of the job id (#11324) (2f2882a)
• limit compare page guidance to fork deploys (#11300) (c232ea4)
• memoize the resolved authed so one request resolves identity once (#11299) (42655ff)
• multiplayer: a malformed frame from one client no longer exits the server (#11353) (8caf414)
• multiplayer: don't drop client messages during cold-start token verification (#11343) (e8c3f95)
• pass the schedule's custom tag when using run now (#11322) (8525206)
• relock importers on their own tag, not the bare dependency tag (#11359) (a1abb36)
• space chat rows evenly after thinking and answers (#11315) (0e53d53)
• stop the chat repeating run results the card already shows (#11293) (ea0b947)
• trust the system CA store for SMTP TLS (#11328) (9375c93)
• validate app and trigger paths, refuse traversal in workspace export (#11311) (7593597)

Performance Improvements

• skip job-start pings and checkpoint read for short non-WAC jobs (#11356) (53a5cfd)
• skip parent status write when a parallel loop iteration starts (#11348) (2456282)
• skip the flow_env ancestor walk for sub-flows with nothing to inherit (#11349) (bc4f872)
• stop polling http trigger routes on workers and every minute (#11351) (d931032)

1.817.0 (2026-09-22)

Features

• add workspace mentions to AI composer (#11264) (e7ba595)
• allow workspace-scoped dynamic custom tags (#11283) (efa7a0a)
• check dynamic worker tags on the tag they resolve to (#11271) (69fafb9)
• deploy from the UI to a workspace on another instance (#11245) (4d12ea4)

Bug Fixes

• add missing credential fields to settings redaction lists (#11272) (2a40f25)
• apply SSRF validation to workspace webhook URLs (#11285) (586699c)
• apply token path scopes to the native trigger list (#11281) (faf7b22)
• check workflow-as-code task tags against CUSTOM_TAGS (#11273) (2699d50)
• clear the impersonation token from session storage on logout (#11274) (9936673)
• enforce token path scopes on GET /raw_apps/list (#11284) (9ad2c91)
• keep a cancel that lands after a worker last read its queue row (#11246) (02006f3)
• size the AI chat output budget by model, not provider (#11286) (7d0f2ce)
• stop cutting DeepSeek chat turns off mid-thought (#11282) (5821700)
• stop the raw app editor stealing focus in ai sessions (#11287) (7322143)

1.816.0 (2026-09-21)

Features

• add an ACL editor for data table roles (#11063) (9994e03)
• add per-model context window override in workspace AI settings (#11232) (c637b06)
• ai-chat: disclose an app's exposure on deploy, refuse drag-and-drop apps (#11137) (85b36a2)
• data table roles in the DB manager and raw apps (#11139) (e1e3692)
• drafts follow their item through a move; behind means base ≠ head (#10577) (f00b2fc)
• edit variables, resources and triggers in their own session tab (#11206) (6186a06)
• let every EE instance set the announcement banner (#11238) (87761d1)
• snap-collapse the sidebar by dragging it to the left edge (#11225) (56a6ad3)

Bug Fixes

• address AI sessions by id in the sessions page URL (#11266) (cbc6c9d)
• bump git sync hub scripts to cli 1.815.1 (#11239) (9e0e835)
• check custom_instance_user can connect during instance database setup (#11244) (1b0f119)
• cli: read wmill.yaml from the branch a git-sync deploy writes to (#11236) (974b026)
• guard data table migration routes against operators and unauthorized authors (#11243) (b742544)
• tell the user when a draft conflict has stopped their edits saving (#11241) (d8ebbc0)

Performance Improvements

• index audit logs by workspace and operation (#11235) (3b8c326)
• keep the sessions page fast with many ai sessions (#11224) (4cbc944)
• retire the legacy pre-partitioning audit table (#11240) (9f2685d)

1.815.0 (2026-09-18)

Features

• add a workspace toggle that adds its admins and developers to new forks (#11215) (9d335de)
• add an instance setting to refuse a token in MCP URLs (#11162) (37e493a)
• ai-chat: render get_run through the run tools' card (#11204) (6f9c4dc)
• ai-chat: tell the chat which kind of app it is looking at (#11208) (c8c06d8)
• attach files to a flow chat message (#11185) (c4c9677)
• auth: 2 h login links and a click-to-sign-in page for emailed ones (#11203) (5639187)
• cap user token expiration with an instance setting (#11159) (9320312)
• flow chat job-backed detail, smooth streaming and answer chrome (#11186) (e2a91ca)
• put a data table's connection under Postgres roles (#11020) (0e807fb)
• render an AI agent result as its answer, not as raw JSON (#11051) (a089928)
• support $flow_expr[...] dynamic tags on flow steps (#11170) (48f0025)

Bug Fixes

• frontend: inline only the package version, not the whole package.json (#11191) (813e486)
• keep instance groups when editing auto-invite (#11217) (df61dea)
• key the large root font size on screen width, not window width (#11216) (3b4e13d)
• re-encrypt git sync secrets on workspace key rotation (#11218) (f0d66a4)
• re-point cloned fork identities that name nobody in the fork (#11161) (9690c44)
• register the job token with the sensitive log masking system (#10943) (53afecd)
• show the New menu's description panel only on hover (#11199) (ecd0a6c)
• stop picker listing a draft twice when drafts share a friendly path (#11214) (72507d5)

Performance Improvements

• count completed jobs on the v2_job_completed index with a timeout (#11211) (d1a2536)