diff --git a/CHANGELOG.md b/CHANGELOG.md
index 41f288175e..8af7b3f510 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.627.0](https://github.com/windmill-labs/windmill/compare/v1.626.0...v1.627.0) (2026-02-05)
+
+
+### Features
+
+* mssql integrated auth (gssapi) ([#7760](https://github.com/windmill-labs/windmill/issues/7760)) ([afa6e7a](https://github.com/windmill-labs/windmill/commit/afa6e7ab5bb26972acbfe19af41dd3e6ac5df363))
+* restriction rulesets for workspaces ([#7791](https://github.com/windmill-labs/windmill/issues/7791)) ([a1cd02d](https://github.com/windmill-labs/windmill/commit/a1cd02d7f80c97eb07eda04113f3aae815fada69))
+
+
+### Bug Fixes
+
+* allow unauthed private pwsh repo ([#7817](https://github.com/windmill-labs/windmill/issues/7817)) ([476e6fd](https://github.com/windmill-labs/windmill/commit/476e6fd4bd2cdb062fa15a8c4048371ef4b31845))
+* fix asset grant ([e28c5b1](https://github.com/windmill-labs/windmill/commit/e28c5b18af25710b0ed3a3ffbceb18f3da76cd75))
+
 ## [1.626.0](https://github.com/windmill-labs/windmill/compare/v1.625.0...v1.626.0) (2026-02-05)
 
 
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index 7caaf2f6ca..3ba6b30099 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -219,9 +219,9 @@ dependencies = [
 
 [[package]]
 name = "anyhow"
-version = "1.0.100"
+version = "1.0.101"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
+checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
 
 [[package]]
 name = "ar_archive_writer"
@@ -1641,7 +1641,7 @@ dependencies = [
  "bitflags 2.9.4",
  "cexpr",
  "clang-sys",
- "itertools 0.10.5",
+ "itertools 0.13.0",
  "log",
  "prettyplease",
  "proc-macro2",
@@ -11147,9 +11147,9 @@ dependencies = [
 
 [[package]]
 name = "reqwest-middleware"
-version = "0.5.0"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f42e2f48018a33d679ee7f477a446b697663a14e91ab0b3a0206792a22dd3aa8"
+checksum = "199dda04a536b532d0cc04d7979e39b1c763ea749bf91507017069c00b96056f"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -11162,9 +11162,9 @@ dependencies = [
 
 [[package]]
 name = "reqwest-retry"
-version = "0.9.0"
+version = "0.9.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "180e3930c1c07a59122f304ff269a634a4d5013afecbe646ccad4ff98e0803c2"
+checksum = "fe2412db2af7d2268e7a5406be0431f37d9eb67ff390f35b395716f5f06c2eaa"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15618,7 +15618,7 @@ dependencies = [
 
 [[package]]
 name = "windmill"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "aws-sdk-config",
@@ -15682,7 +15682,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -15814,7 +15814,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "reqwest 0.12.28",
  "serde",
@@ -15824,7 +15824,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -15838,7 +15838,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "axum 0.7.9",
@@ -15857,7 +15857,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15953,7 +15953,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "regex",
  "serde",
@@ -15968,7 +15968,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -15992,7 +15992,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -16008,7 +16008,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-mcp"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -16028,7 +16028,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-oauth"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "async-oauth2",
@@ -16052,7 +16052,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -16061,7 +16061,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -16073,7 +16073,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -16085,7 +16085,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -16097,7 +16097,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -16109,7 +16109,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -16121,7 +16121,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -16132,7 +16132,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -16143,7 +16143,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -16156,7 +16156,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -16180,7 +16180,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -16194,7 +16194,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -16211,7 +16211,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -16225,7 +16225,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -16244,7 +16244,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -16255,7 +16255,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -16292,7 +16292,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "wasm-bindgen",
  "wasm-bindgen-test",
@@ -16302,7 +16302,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.626.0"
+version = "1.627.0"
 dependencies = [
  "anyhow",
  "async-once-cell",
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index d61d4575ee..943fa1dc58 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.626.0"
+version = "1.627.0"
 authors.workspace = true
 edition.workspace = true
 
@@ -35,7 +35,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal"]
 
 [workspace.package]
-version = "1.626.0"
+version = "1.627.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index ee1a974346..c4791a1836 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.626.0
+  version: 1.627.0
   title: Windmill API
 
   contact:
diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts
index bb1d050248..f8b2ae1fcc 100644
--- a/benchmarks/lib.ts
+++ b/benchmarks/lib.ts
@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.626.0";
+export const VERSION = "v1.627.0";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({
diff --git a/cli/src/main.ts b/cli/src/main.ts
index ff0680fcf0..a9931d0482 100644
--- a/cli/src/main.ts
+++ b/cli/src/main.ts
@@ -77,7 +77,7 @@ export {
 //   }
 // });
 
-export const VERSION = "1.626.0";
+export const VERSION = "1.627.0";
 
 // Re-exported from constants.ts to maintain backwards compatibility
 export { WM_FORK_PREFIX } from "./core/constants.ts";
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 0688ac9071..fe643884c6 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "windmill-components",
-	"version": "1.626.0",
+	"version": "1.627.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "windmill-components",
-			"version": "1.626.0",
+			"version": "1.627.0",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index b0930c9d31..b0ee396b1e 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "windmill-components",
-	"version": "1.626.0",
+	"version": "1.627.0",
 	"scripts": {
 		"dev": "vite dev",
 		"build": "vite build",
diff --git a/lsp/Pipfile b/lsp/Pipfile
index 4a720f251b..4a8777bd94 100644
--- a/lsp/Pipfile
+++ b/lsp/Pipfile
@@ -4,8 +4,8 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.626.0"
-wmill_pg = ">=1.626.0"
+wmill = ">=1.627.0"
+wmill_pg = ">=1.627.0"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index feb67b413c..478a5f0c5d 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -1,7 +1,7 @@
 openapi: '3.0.3'
 
 info:
-  version: 1.626.0
+  version: 1.627.0
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel
diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1
index 8446e61e36..cfa57b1266 100644
--- a/powershell-client/WindmillClient/WindmillClient.psd1
+++ b/powershell-client/WindmillClient/WindmillClient.psd1
@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.626.0'
+    ModuleVersion     = '1.627.0'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()
diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml
index 9db16afeb8..acd746a70c 100644
--- a/python-client/wmill/pyproject.toml
+++ b/python-client/wmill/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.626.0"
+version = "1.627.0"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/python-client/wmill_pg/pyproject.toml b/python-client/wmill_pg/pyproject.toml
index 8dcafec37d..47f1c58fd0 100644
--- a/python-client/wmill_pg/pyproject.toml
+++ b/python-client/wmill_pg/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill-pg"
-version = "1.626.0"
+version = "1.627.0"
 description = "An extension client for the wmill client library focused on pg"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json
index 8431f69f60..9590de6f16 100644
--- a/typescript-client/jsr.json
+++ b/typescript-client/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.626.0",
+  "version": "1.627.0",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]
diff --git a/typescript-client/package.json b/typescript-client/package.json
index f64e95cfe5..0cc669a7b8 100644
--- a/typescript-client/package.json
+++ b/typescript-client/package.json
@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.626.0",
+  "version": "1.627.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "sideEffects": false,
diff --git a/version.txt b/version.txt
index 575f722ede..88af80c98b 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-1.626.0
+1.627.0