Windmill Updates & Release Notes

1.760.0 (2026-07-15)

Features

• nsjail: make python/ansible rlimit_as configurable per worker (GIT-921) (#10138) (1787201)

Bug Fixes

• ai: disable redirects on worker AI provider client (GHSA-5q4v) (#10122) (27ead8d)
• ai: stop sending the AI agent system prompt twice for OpenAI (#10126) (8bfe5c9)
• apps: invalidate cached app policy on change or deletion (GHSA-r5v4-cxh9-7qhq) (#10121) (f7eb5c4)
• bash: normalize CRLF line endings before running scripts (#10131) (6407d9f)
• cli-image: patch fixable CRITICAL CVEs in windmill-cli image (GIT-922) (#10135) (5626768)
• frontend: graceful small-screen timeframe picker on the runs page (#10073) (af177ce)
• frontend: keep session-exit URL clean by syncing new_draft strip with the router (#10101) (9705d60)
• frontend: only carry custom-tag overrides on 'Run again' (#10137) (bd3adc9)
• frontend: treat a displaced draft save as superseded, not failed (#10094) (2fe999f)
• reject git URL fragment/query SSRF bypass (GHSA-p5cj-8cfh-mjv6) (#10120) (73c8d7f)
• security: enforce variables:write scope on resource-delete var cascade (GHSA-xmr2-98m6-cjf7) (#10123) (188647a)

1.759.0 (2026-07-15)

Features

nativets: add Web Crypto support via deno_crypto (#10109) (ba23254)

nativets: expose the standard web-platform globals deno_web provides (#10112) (6d1e12d)

Bug Fixes

jseval: raise QuickJS eval memory cap to 128MB with clear OOM error (#10116) (95d9ff0)

mcp: advertise flow input variables in MCP tools (#10117) (a6191e2)

mcp: let MCP tokens call preview run tools (jobs:run scope) — Fixes GIT-920 (#10107) (4917f79)

nativets: apply parameter defaults for missing args instead of null (#10111) (ba7f9c0)

self-host: resolve caddy-l4 "unrecognized global option: layer4" error (#10106) (770ac2b)

tree-view: align file indentation with sibling folders (#10115) (88030d0)

Performance Improvements

rls: wrap session GUC reads in RLS policies for per-statement InitPlan (GIT-919) (#10110) (e9fd4e7)

1.758.0 (2026-07-14)

Features

• ai-agent: give tools a real description instead of the tool name (#10083) (7ebfad3)
• ai-chat: port flow-group and sticky-note instructions to global chat (#10090) (32f32d9)
• cli: add --tag override to script and flow run/preview (#10079) (98e6cca)
• sessions: support many pending sessions persisted in IndexedDB (#10076) (bfcec7e)

Bug Fixes

• ai-chat: size AI-created flow notes to fit their text (#10091) (af3e3fe)
• apps: allow setting sandbox isolation and public access before first deploy (#10085) (cfc3f29)
• apps: load themes when selecting the Resources → Theme tab (#10086) (f2869d8)
• frontend: stop spurious raw-app reload that 404s on "Start without AI" (#10099) (2c702ef)
• mcp: align script auto_kind filter with scripts list API (#10098) (4edffeb)
• sessions: pending-draft debounce follow-ups (delete-cancel, keystroke de-transient, teardown count) (#10087) (f3cd5d9)
• sessions: reopen script test panel when preview goes full screen (#10082) (eff9076)

Performance Improvements

• runs: index-bound batch re-run selection with a lossless completed_at bound (WIN-2168) (#10074) (15391f6)

1.755.0 (2026-07-11)

Features

• add per-workspace job-retention override (#10050) (ff774c4)
• apps: authorize deployed-app S3 reads on-behalf of the author for logged-in viewers (#10048) (1e192f2)
• mcp: add multi-workspace MCP tokens via the gateway endpoint (#10043) (8343203)

Bug Fixes

• clearer errors on auto-draft save failure (WIN-2157) (#10053) (04eb7dd)
• docker: pin ansible tool interpreter to a persistent path (#10054) (6f49a1f)
• enforce read authorization when signing S3 objects (#10049) (5844c32)
• frontend: don't re-seed empty editor on stale ?new_draft after draft exists (#10044) (e668193)
• frontend: keep draft autosave alive after AI-session round-trip (#10052) (7d02d9a)
• frontend: mint draft path for new SDK builder items so autosave attaches (#10056) (a89b896)
• frontend: show nested restart button for subflows nested in containers (#10042) (3b07817)
• frontend: show optimistic user message and fork-creation label before beforeSend (#10037) (1c88242)
• keep agent-worker server job-completed processor alive & self-healing (#10033) (ab38e14)

1.754.0 (2026-07-10)

Features

• add multi-select mode to copilot askUserQuestion (#10016) (7569798)

Bug Fixes

• accept bunnative language in AI chat flow step validation (#10030) (5a460db)
• backend: propagate script timeout when restarting perpetual scripts (#10029) (6c521e9)
• frontend: name the draft in AI chat test-run confirmation (#10024) (9036ac7)
• frontend: open new script/flow/app in AI session (not-found + friendly tab) (#10028) (0353569)
• frontend: persist forked "Copy of X" script drafts (#10021) (c537d45)
• frontend: persist per-session preview panel resize width (#10031) (5387076)
• frontend: scope raw-app, flow and script editors to the session workspace (#10015) (c000bbc)
• resolve fork family/picker for superadmin visiting a non-member workspace (#10023) (368fd2d)
• scope AI-session flow/script editors to the session workspace (#10025) (c5060a1)
• security: drop --allow-run from Deno sandbox (GHSA-gj6h-vw66-mr8f) (#10039) (c029d6d)
• security: remove git from Deno sandbox allow-run (GHSA-gj6h-vw66-mr8f) (#10038) (689b20a)
• session preview tab labels, splitter hover, and diff-drawer sizing (#10008) (c139eed)
• sessions: open test pane when enabling debug so the debug UI is visible (#9998) (d7a9b46)
• sync theme into session page preview iframes on toggle (#10018) (3704d00)

Performance Improvements

• index v2_job(parent_job) to speed up run child-job listing (#10034) (9feda57)
• skip redundant retry-chain job query for successful top-level scripts (#10035) (15f9e9b)

1.753.0 (2026-07-08)

Features

• AI chat background jobs tray with detach, approval and preview (#9982) (286da00)
• condensed top bar for session preview editors (#10011) (b847ca2)
• db-health: add connection sizing guidance (#10014) (f28ea9c)
• sessions: scoped preview refresh + multi-target live editors + pipeline preview (#10006) (32c398f)
• shared tab system, universal markdown code blocks, subtle scrollbars (#10003) (a00ee51)

Bug Fixes

• bump bundled Go CLIs to patched versions to clear image CVEs (#9996) (d467161)
• name the offending item when a fork fails on a NUL escape (#10013) (99d0047)
• preserve worker group tag override on 'Run again' (#10004) (c4cb2f3)
• replicate external secret backend secrets when forking a workspace (#10007) (f65fe7b)
• session preview editors and picker dropdown overflow (#10010) (fb12b23)

1.752.0 (2026-07-07)

Features

• add fork_parent_workspace claim to OIDC tokens for fork workspaces (#9987) (7efeae2)
• add SQL migrations for data tables (#9693) (e47aeda)
• cli: clarify fork-branch workspace auto-targeting in output (#9988) (88c2d0e)
• open runs/schedules pages from AI chat in session preview tabs (#9976) (4bb82ad)
• raw-apps: runtime-error overlay + AI import-React instruction (#9966) (8df613b)
• sessions: v2 unified sidebar with family/fork scoping and preview router (#9816) (9503190)
• smooth bursty AI chat streaming with a typewriter reveal (#9991) (a6276b5)
• update base image to debian 13 (trixie) (#9973) (c5c1ead)

Bug Fixes

• ai-agent: align agent_actions_success with agent_actions for mcp and websearch (#9983) (87f8d46)
• ai: flow writer builds approval steps as scripts, not identity (#9985) (6b01caa)
• clear old path asset usage when renaming a script (#9979) (927b8d0)
• cli: auto-derive cascade triggers in --local pipeline graph (#9978) (edfe7b4)
• pipelines: live materialize/dataset editing — stale graph, phantom drafts, stale Save-all deploys (#9990) (f7efb64)
• sessions: auto-rename regression + preview-panel and fork nits (#9993) (804178f)
• sessions: scope fork session Edits to session-edited items only (#9989) (7046dc6)

1.751.0 (2026-07-06)

Features

• add cosmetic dev/staging label for dev workspaces (#9959) (fd8e64d)
• auth: add runtime NO_AUTH mode for authentication bypass (#9962) (91e1b08)
• frontend: custom skills — detail modal, batch manage, shared validation (#9847) (2e14302)
• pipelines: auto-derive cascade edges from ducklake/s3 reads (+ muted-read badge) (#9963) (3dcd394)

Bug Fixes

• ai: centralize Anthropic Messages API routing across completion paths (#9960) (cc2f638)
• assets: responsive layout for small screens (#9961) (45946d1)
• cli: quote non-identifier property names in resource-type namespace (#9964) (dc6b997)
• critical alerts modal mute toggles no longer close popover or fail to save (#9969) (6587019)
• frontend: theme-aware code block background in prose markdown (#9968) (9821596)

1.750.0 (2026-07-06)

Features

• chat-scoped session changes bar + unified diff drawer (#9762) (a6c0b37)
• pipelines: require data uploads before running a pipeline (#9953) (a1c5b7a)
• pipelines: wm_partition macro for grain-agnostic partition filters (#9950) (43044c2)

Bug Fixes

• ai: test key routes Azure Foundry Claude models via Anthropic Messages API (#9956) (ea19cc9)
• cli: HD-1 test_edges + HD-2 scd2 _current write in --local pipeline graph (#9947) (ad6f23d)
• pipelines: make node & pipeline-level run affordances always visible (#9948) (6eabb96)
• read chat drafts via own-draft route so drawer-kind drafts deploy (#9913) (056ebdb)
• resolve extensionless bun relative imports on windows loader (#9949) (bf96621)

1.749.0 (2026-07-05)

Features

• pipelines: mid-DAG selective execution (dbt model+) for pipeline runs (#9945) (2d3a773)
• pipelines: partition run-arg picker + first-run setup signpost (#9943) (475b072)
• pipelines: self-teaching custom data_test errors + scaffold (#9937) (0ad174f)

Bug Fixes

• cli: macro-library parity in --local pipeline graph + read-only run --dry-run (#9942) (e3f4303)
• datatable: self-teaching error for unresolved datatable:// references (#9941) (55451db)
• object-storage: remove 20-file bucket-browser listing cap in CE (#9935) (22452ce)
• pipelines: dedup guard for keyed merge + deploy-time SCD2 validation (#9936) (52ce805)
• pipelines: link SCD2 <dim>_current view to its producer across all graph surfaces (#9933) (574d3ac)
• pipelines: order data_test relationships refs before the tested script in a cascade (#9934) (46be39d)
• pipelines: pipeline-level run control, tables label, data-test rollback + fork badges (#9944) (6ae8dd3)
• rebuild windows bun loader main.ts filter from forward-slash cdir (#9946) (a582e04)

1.748.0 (2026-07-05)

Features

• ai-agent: support reasoning effort in AI agent workflow steps (#9886) (a368d49)
• ducklake: scheduled lake maintenance (expiry, compaction, orphan cleanup) (#9916) (3352150)
• pipelines: asset freshness — fresh/stale badge (CE) + watchdog (EE) (#9909) (5d7fb6d)
• pipelines: capture violating-row samples for data tests (#9919) (d4b4374)
• pipelines: fork data environments for ducklake materialization (dev data) (#9915) (39eb9de)
• pipelines: on_schema_change write guardrails + data_test deploy validation (#9930) (377c02e)
• pipelines: record upstream snapshot ids on cascade-dispatched jobs (#9910) (af36498)
• pipelines: schema contracts — save-time consumer checks vs captured schemas (#9917) (42e11c6)
• pipeline: write-audit-publish for materialization data tests (#9911) (dce247c)
• sdk: enforce s3:// URIs for string S3 params + ingestion (EL) docs (#9912) (5ad2de9)

Bug Fixes

• cli: pipeline + workspace UX batch (init/bind stub, run errors, macro libs, lock-job report, upgrade errors) (#9929) (28a6b08)
• cli: publish all windmill-parser-wasm-* deps so local pipeline graph keeps write edges (#9926) (744a759)
• pipelines: activity-axis label clarity + select failed node on cascade failure (#9931) (5769b60)