Windmill Updates & Release Notes

1.831.0 (2026-10-13)

Features

• add python 3.14 and 3.15 to the supported instance versions (#11654) (74c9b0c)
• add the viewer's roles to unnamed data table connections (#11709) (a298ed3)
• audit declarative instance config writes (#11684) (afbbc0b)
• cli: declare app sandbox and frontend api scopes in app yaml (#11703) (26afeec)
• data table migration tools in ai sessions (#11723) (3d74f6e)
• encrypt workspace secrets with AES-256-GCM (#11678) (4942149)
• external signer for OIDC tokens and a log line per mint (#11614) (157183a)
• give app builder operators app tools in AI sessions (#11716) (133613c)
• redesign the s3 explorer and show data files as tables (#11642) (9fa9b77)
• support array arguments in snowflake scripts (#11702) (1451988)

Bug Fixes

• bump git sync hub scripts to cli 1.830.0 (#11681) (7bbe032)
• end other sessions when a user changes their password (#11710) (add042e)
• fill app ctx inputs from the viewer's session, not the request (#11698) (7627c1b)
• groups: recompute member roles when an instance group role is cleared (#11708) (4be67fe)
• hide the sidebar triggers header when no trigger entry is visible (#11715) (e443eb3)
• keep a custom error handler's slack argument on save (#11696) (c6692ac)
• keep ai agent schema property order stable across jobs (#11687) (a8e2f1f)
• keep preserve_step_tags on saved branch and loop flow nodes (#11660) (dedd775)
• keep the app editor's parent_version out of deployed apps (#11719) (2c6de9d)
• keep the resource type index whole when a refresh fails (#11727) (71caac7)
• keep the resource type search current between daily fills, and serve it without an index (#11712) (a365359)
• load the s3 explorer table lazily to keep monaco out of the app shell (#11701) (a92b29d)
• parse python 3.12-3.15 syntax in the python parsers (#11675) (aae5f2e)
• persist hidden languages in edit default scripts drawer (#11693) (aeeeb04)
• pin the floating sidebar and let page clicks through it (#11711) (ce45ab5)
• resolve $var: references in mcp resource headers (#11679) (478eef7)
• resolve a new item's chosen name in session preview tools (#11688) (cd502a5)
• resolve variables in the url and headers of an mcp resource (#11680) (4bc2394)
• run a workflow-as-code task called from inside a task in place (#11699) (72d1092)
• stop marking run form fields as disabled for assistive tech (#11714) (c7df009)
• stop session dom tools reading a raw app preview that is not current (#11700) (05c7b68)
• surface oauth provider errors returned with http 200 (#11713) (d8ac4f5)

Performance Improvements

• run shellcheck directly from the lsp launcher (#11707) (8cdb42a)

1.830.0 (2026-10-09)

Features

• add a jobs:run:dependencies token scope for lock generation (#11643) (1dc4ed5)
• let operators compose full-code apps when the workspace grants it (#11229) (02e4697)
• operators get AI sessions (#11443) (338c4e9)
• replace the hub_sync script with an opt-in daily server sync (#11624) (2b55a8a)
• retry transient AI provider failures before output reaches readers (#11623) (d3ddef0)
• stop offering deno for new scripts, ship it only on full images (#11648) (cda7883)

Bug Fixes

• cli: count superadmins as able to preserve ownership on push (#11653) (70db567)
• harden app secret validation (#11655) (8556a7b)
• open the chat + menu without waiting on the skills and mcp fetches (#11645) (1fea1aa)
• say Running on a chat run card only once its job exists (#11627) (d046187)

1.829.0 (2026-10-09)

Features

• add an api base url instance setting for displayed urls (#11628) (6acf185)
• add Pi template to the AI sandbox picker (#11619) (a85d0b7)
• agent nits: multi-select, memory-off notice, agent step label (#11622) (c52ba2f)
• export worker cpu, memory and occupancy metrics (#11629) (5d90f96)
• let a job see that its worker is draining (#11612) (588d846)
• let workspace admins delete other users' drafts (#11644) (68376fc)
• per-script resource rollup and heaviest scripts table (#11631) (442357d)
• pipeline editor: assets-only view, Fix actions and draft triggers (#11440) (3dae553)

Bug Fixes

• advertise the actual signing algorithm in OIDC discovery (#11637) (98fc65a)
• ask a workspace for its session backups before pushing to it (#11641) (2ea846f)
• keep instance settings users sub-tabs from being squashed (#11633) (fb22e5c)
• keep raw app deploy panel settings shared with the editor (#11616) (0a95ea4)
• load schedules once per page load, poll critical alerts every 30s (#11639) (1b4e686)
• name the open workspace settings tab in the page header breadcrumb (#11617) (e233908)
• python: add missing import-to-package mappings for common modules (#11638) (ab8606f)
• send hub script completions to the workspace handlers (#11613) (d685332)
• set WM_END_USER_EMAIL on direct script and flow runs (#11636) (2bdeceb)
• store a WAC parent's first start and wall duration (#11625) (8f28a58)
• sync back volume files rewritten to the same size (#11620) (2758920)
• uniform decrypt error and clear stored credentials on logout (#11632) (987c321)

1.828.0 (2026-10-08)

Features

• add gpt-6.1-sol to the chat, agent steps and weekly ai evals (#11584) (8f7e0c7)
• add wmill user list and document post-suspend approvers context (#11600) (1c2667c)
• ask before minting the frontend sdk token in the raw app editor (#11604) (6e948b0)
• improve data table roles and grants UX (#11562) (d7d18f0)
• one page header across routes, and one sidebar for operators and developers (#11310) (41162b2)

Bug Fixes

• add retry to runScriptByPathAsync and runScriptByHashAsync (#11485) (3f3b1c2)
• describe exponential retry as multiplier × seconds^attempt (#11546) (a2e51cd)
• keep capturing job logs after a non-UTF-8 output line (#11595) (0e7d974)

Performance Improvements

• load public raw apps without the loading screen (#11608) (c09764f)

1.827.0 (2026-10-07)

Features

• audit instance settings writes, stable audit OTel target (#11593) (0792332)
• default new raw apps to react 19 and ask for the data setup (#11586) (818ddd5)
• export queue delay as OTel and Prometheus metrics (#11588) (7565349)
• pause a worker group without stopping its workers (#11596) (95c4b30)
• run AI decision steps on OpenAI's Decisions API (#11590) (046df9e)

Bug Fixes

• avoid URLSearchParams.keys() so the frontend check passes (#11599) (fc6c84c)
• let recover: true from the error handler turn nested failures green (#11559) (03e484e)
• run dependency resolution and build steps under nsjail (#11609) (a238d01)
• scope the python wheel cache to workspaces with their own registry (#11597) (14381ce)
• type snowflake columns in database manager insert and alter forms (#11578) (f2fb156)

1.826.0 (2026-10-07)

Features

• count OIDC signatures and reuse server-side tokens (#11556) (e277735)
• isolate the raw-app editor preview when the app opts into sandboxing (#11572) (fa25397)
• job_token_scopes OIDC claim (#11551) (d493eff)
• set up a new app in one modal over its AI session, fix its deploy (#11582) (7190185)

Bug Fixes

• export getWorkspace and other client helpers as named exports (#11581) (bf201be)
• give the dbt workspace settings page a header like its siblings (#11576) (38aa4ea)
• ignore schedule missed-run counters in workspace compare (#11570) (eab3dd5)
• keep chat tool cards collapsed the way the user left them (#11575) (c71ecad)
• keep run status buttons from selecting the flow input node (#11579) (8661797)
• make every trigger and schedule editor control respect read-only mode (#11569) (52a99c3)
• strip NUL from ai agent output and job args before jsonb writes (#11568) (cf4bec6)

1.825.0 (2026-10-06)

Features

• choose build with AI or code when creating a raw app (#11560) (431f861)
• confine jobs:read to the runnable paths it names (#11550) (b371af3)
• open a run as a pushed page on the narrow runs page (#11541) (fd8de45)
• say a canceled team plan is canceled, not past due (#11539) (18e44d3)

Bug Fixes

• group raw app edits that carry a file diff in the ai chat (#11558) (5912d30)
• honor custom timeout in setup phases and name the limit hit (#11557) (4fd4f76)
• search slow runs filters by time windows instead of timing out (#11549) (2bf9cfc)
• serve the raw-app preview shell sandboxed, load a blob copy in the editor (#11554) (5f92daa)
• simplify the run page AI card to a prompt and a chat button (#11561) (8c74f75)

1.824.0 (2026-10-05)

Features

• add an AI decision flow step (TypeSafe's Jev, Cloudflare's Clef) (#11474) (3cba8a7)
• add notion oauth provider (#11528) (8b2dc1e)
• ai-chat: show per-file diffs for raw app edits (#11521) (ec0883a)
• bill team-plan service accounts as half a seat (#11298) (3aee181)
• card layout and load-more for the audit logs page (#11507) (af1a29a)
• offer audit-log and drive-metadata scopes for google oauth connects (#11527) (c4e7c71)
• offer slack read scopes for files, user groups, emoji and dms (#11526) (b5fda7d)

Bug Fixes

• bound s3 ai attachment downloads before encoding (#11534) (92fbfc0)
• collapse queued and running chat tool calls into a waiting row (#11523) (4f30982)
• disable postgres triggers whose replication slot was invalidated (#11536) (85248ee)
• evaluate field conditions and step test inputs in QuickJS (#11487) (c962d37)
• flush proxied responses before the dev supervisor closes the client (#11530) (cefb195)
• label the default slack scopes and list them first in the connect dialog (#11529) (e76781c)
• run each ai eval model in its own job and let the docs tools reach the backend (#11533) (222dad1)
• show the flow row edit button to builder operators (#11535) (6c4e34c)

1.823.0 (2026-10-04)

Features

• redesign the service logs page (#11506) (0f65df2)

Bug Fixes

• apply the pg keepalive settings to the postgres trigger connection (#11512) (33f6de0)
• bound the datatable migration lock wait and reap a dead holder (#11510) (711e08c)
• bound the pg cached-connection reset probe so a vanished server fails fast (#11505) (d4a423f)
• cancel an abandoned pg query and close failed connections cleanly (#11511) (26856b8)
• delete a flow chat turn with its flow run, not its step jobs (#11477) (35ec16d)
• drop a fork's datatable database despite connected sessions (#11509) (fa419af)

1.822.0 (2026-10-03)

Features

• add a cancel-only jobs:cancel token scope, optionally path-scoped (#11479) (4bc7e0d)
• add an instance setting routing all dependency jobs to one tag (#11486) (3d1d249)
• add trigger, tag, run-as and digest claims to job OIDC tokens (#11481) (4beb1f9)
• log pg job progress, warn on stalls, detect dead db connections (#11491) (d722772)
• read the OIDC signing key from a file and rotate it (#11482) (d949484)
• replace the AI input filling toggle with an additional prompt (#11501) (e952298)
• restricted job tokens per script and flow (#11484) (e7fc1b2)

Bug Fixes

• keep a resource default set in the schema when the script is redeployed (#11495) (68f8f19)
• let instances withhold signing secrets from the settings API (#11483) (99e96d3)
• let legacy draft-only items be discarded from the home page (#11488) (98274a7)
• never reuse a pg connection a script left inside a transaction (#11497) (b7f74cd)
• read inet and cidr results with their prefix, including arrays (#11476) (ae093b7)
• stop the pg executor cache from pinning a pooler slot (#11490) (eed7e7d)
• unstick postgres jobs on large results with custom-typed columns (#11475) (14801fd)

Performance Improvements

• keep a pg executor connection per database (#11492) (013b302)

1.821.0 (2026-10-01)

Features

• add //no_network annotation for native scripts (#11445) (c25bb1e)
• add alert actions and reduce alert padding (#11439) (52c3188)
• add test key button to AI resource drawers (#11466) (26be1d7)
• add wmill datatable migrate status (#11465) (7f1bead)
• agents as a standalone kind with home listing, detail and editor pages (#11332) (8c7dcbb)
• dispatch ai agent tools through the worker queue (#11227) (039f49e)
• group consecutive tool calls in the AI chat (#11329) (9613549)
• harden job OIDC tokens with version claims, jti and a lifetime cap (#11457) (227e934)
• labelled scope checkboxes in the oauth connect dialog (#11460) (840567f)
• let operators compose flows when the workspace grants the right (#11228) (ca44043)
• let slack connects issue a user token via user_scope (#11452) (d518aa5)
• make hub integrations usable as examples in global AI chat (#10599) (8953ca6)
• offer slack write scopes as bot and user scope options (#11472) (ab2de83)
• open chat path pill actions from a hover menu (#11441) (083db5e)
• rename agent memory options to On and Legacy, explain each (#11442) (077709b)
• sessions: show an item's deployed page in the preview panel (#11458) (b10f83c)

Bug Fixes

• apps: hide custom component host while it is not rendered (#11434) (c728346)
• await async def main in python scripts (#11437) (94ac34a)
• block runs while a JSON input does not parse (#11463) (ddde41b)
• bump git sync hub scripts to cli 1.820.1 (#11438) (7664001)
• cli: resolve fork specific items from the parent workspace entry (#11436) (1d8d4a1)
• collapse run card in ai chat when the run is declined (#11435) (ab2a973)
• embed a VERSIONINFO resource in the Windows binary (#11433) (9028432)
• ignore edited_at and edited_by in flow and item diffs (#11455) (851f6d7)
• keep flow graph rendered between deploy and navigation (#11454) (c0fb2db)
• lost suspend decrement when concurrent approvals resume a flow (#11450) (a8e65ab)
• npm-proxy: support _auth and username/_password basic auth from npmrc (#11467) (1c6758a)
• offer user scopes in the slack scope editor and drop the generated description on type change (#11464) (153b02a)
• restore the save to workspace button on inline flow steps (#11469) (88d0cd0)
• stop running deleted script versions from worker caches (#11456) (d2830cb)

1.820.0 (2026-09-29)

Features

• add pull_batch to claim jobs for many waiting workers at once (#11350) (9f40cdc)
• add tree view to the schedules page (#11360) (e68ff0d)
• ai-agent: add compaction memory that summarizes older context (#10928) (c1b59f7)
• detect and alert when a schedule skips occurrences (#11317) (97fa55b)
• external instance cluster for data tables and Ducklake catalogs (#11197) (8741843)
• refuse OIDC tokens to previews that impersonate a path their user cannot write (#11396) (d1260d7)
• restart perpetual runs on the version a deploy makes runnable (#11200) (cf5c49c)
• run turns in several flow chat conversations at once (#11202) (f367eaf)
• share AI guidance with the CLI skills and lint flow groups (#11397) (ede4103)
• show native web search in the assistant settings modal (#11394) (235410c)
• stop cross-origin isolating the raw app editor (#11411) (6064aec)

Bug Fixes

• bound a resumed session fork's wait, keep its intent while in flight (#11413) (e6df8d7)
• create workspace forks in the background, with progress (#11406) (054109d)
• drop caller-supplied _MODULES at push for every job (#11418) (c5f59d6)
• keep new-menu submenus open while crossing the gutter (#11414) (2f87bc6)
• keep secret variable values hidden when toggling secret (#11383) (da5c58d)
• refuse flow preview restarts from runs the caller cannot read (#11407) (c34abf7)
• report a worker's last job when it ran under one poll interval (#11399) (797147e)
• run custom schedule handlers as the schedule (#11398) (bda00c6)
• surface raw app build errors to the session AI (#11415) (50ffad5)
• turn the default raw app into a feature tour (#11417) (83b8954)