centdix
7c898579f5
fix compilation ( #7588 )
2026-01-16 10:45:48 +00:00
Ruben Fiszel
548d1af654
chore(main): release 1.607.1 ( #7586 )
...
* chore(main): release 1.607.1
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-16 00:12:11 +00:00
Ruben Fiszel
21ebaa4196
update git sync
2026-01-16 00:07:50 +00:00
Ruben Fiszel
74dccc73d3
chore(main): release 1.607.0 ( #7573 )
...
* chore(main): release 1.607.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-15 10:32:00 +00:00
Ruben Fiszel
86714f2d03
feat: allow resume urls at flow level for pre-generation ( #7582 )
2026-01-15 08:56:09 +00:00
Ruben Fiszel
d4f1d7fbb5
chore(main): release 1.606.1 ( #7568 )
...
* chore(main): release 1.606.1
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-14 14:51:14 +00:00
Ruben Fiszel
c5d0ea98bc
chore(main): release 1.606.0 ( #7553 )
...
* chore(main): release 1.606.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-14 12:15:47 +00:00
centdix
5c08abe141
feat(aiagent): handle oauth for mcp tools ( #7564 )
...
* feat(aiagent): handle oauth for mcp tools
* cleaning
* cleaning
* move oauth2
* cleaning
* cimd
* wrap path
* fix frontend
* fix
* refresh resources
* cleaning
* update ee ref
* update sqlx
* cleaning
* update
* cleaning
* update ref
* cleaning
* cleaning
* update ref
2026-01-14 12:06:40 +00:00
HugoCasa
f72c16456f
Revert "feat(aiagent): handle oauth for mcp tools [merge-ee-first] ( #7544 )"
...
This reverts commit e823c953d1 .
2026-01-14 12:59:14 +01:00
centdix
e823c953d1
feat(aiagent): handle oauth for mcp tools [merge-ee-first] ( #7544 )
...
* feat(aiagent): handle oauth for mcp tools
* cleaning
* cleaning
* move oauth2
* cleaning
* cimd
* wrap path
* fix frontend
* fix
* refresh resources
* cleaning
* update ee ref
* update sqlx
* cleaning
* update
* cleaning
* update ref
* cleaning
* cleaning
2026-01-14 11:57:00 +00:00
Ruben Fiszel
4732dc23a2
chore(main): release 1.605.0 ( #7548 )
...
* chore(main): release 1.605.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-13 18:05:29 +00:00
Ruben Fiszel
2c128c3b54
chore(main): release 1.604.0 ( #7547 )
...
* chore(main): release 1.604.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-13 16:30:48 +00:00
Ruben Fiszel
4451a37999
feat: debuggers for python and bun v0 ( #7546 )
2026-01-13 15:20:06 +00:00
Ruben Fiszel
726688ee4c
chore(main): release 1.603.4 ( #7542 )
...
* chore(main): release 1.603.4
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-12 16:44:03 +00:00
Ruben Fiszel
dca7e16532
fix: tighten preview path ( #7541 )
2026-01-12 05:21:05 +00:00
Ruben Fiszel
de2f5d3432
chore(main): release 1.603.3 ( #7539 )
...
* chore(main): release 1.603.3
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-11 10:02:18 +00:00
Ruben Fiszel
05285ca81d
tighten get_log_file
2026-01-11 10:00:48 +00:00
Ruben Fiszel
942fb62921
nit tightening
2026-01-11 09:30:07 +00:00
Ruben Fiszel
ecb8015d6c
chore(main): release 1.603.2 ( #7537 )
...
* chore(main): release 1.603.2
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-09 20:10:47 +01:00
Ruben Fiszel
98c073bfaa
chore(main): release 1.603.1 ( #7535 )
...
* chore(main): release 1.603.1
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-09 17:38:24 +00:00
Ruben Fiszel
57fd32b11d
fix improve tags sensitivity behavior for certain backend apis
2026-01-09 17:32:44 +00:00
Diego Imbert
7b19ca44a3
fix: Fix custom instance user migration ( #7534 )
2026-01-09 14:57:15 +00:00
Ruben Fiszel
88b1a0bcbe
chore(main): release 1.603.0 ( #7529 )
...
* chore(main): release 1.603.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-09 10:48:41 +00:00
claude[bot]
6f7cf2fb16
feat: add password reset flow using configured SMTP settings ( #7525 )
...
* feat: add password reset flow using configured SMTP settings
Implements password reset functionality for users with email/password login:
Backend:
- Add `/auth/request_password_reset` endpoint to request a password reset email
- Add `/auth/reset_password` endpoint to reset password using token
- Add `/auth/is_smtp_configured` endpoint to check if SMTP is available
- Uses existing `magic_link` table for storing reset tokens
- Tokens expire after 1 hour
- Invalidates all existing sessions on password reset
- Includes audit logging
Frontend:
- Add "Forgot password?" link on login page (shown when SMTP is configured)
- Add `/user/forgot-password` page for requesting password reset
- Add `/user/reset-password` page for entering new password
- Both pages follow existing Windmill design patterns
Security:
- Always returns success response to prevent email enumeration
- Password must be at least 8 characters
- Uses argon2 for password hashing (same as existing login)
Closes #7524
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
* nits
* nits
* fix oss
* nits
* fix oss
---------
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
Co-authored-by: HugoCasa <hugo@casademont.ch >
Co-authored-by: Ruben Fiszel <ruben@windmill.dev >
2026-01-09 10:31:56 +00:00
Ruben Fiszel
83fea45d48
split oauth into separate crate
2026-01-09 07:03:29 +00:00
Ruben Fiszel
d432cdbec1
split out windmill-mcp + pin tokio-utils
2026-01-09 06:16:26 +00:00
Ruben Fiszel
1ab07c28f2
chore(main): release 1.602.0 ( #7469 )
...
* chore(main): release 1.602.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2026-01-08 06:34:55 +00:00
Diego Imbert
710987a422
Fix data table creds setup ( #7516 )
...
* fix wrong pg_creds
* revoke permissions
2026-01-08 06:25:59 +00:00
centdix
a8e34de58d
upgrade rmcp crate ( #7518 )
2026-01-07 16:02:51 +00:00
hugocasa
cf90bd4676
fix: make workspace id change faster and add 100k jobs limit ( #7500 )
2026-01-06 18:07:51 +00:00
Diego Imbert
e6757994d5
fix: ducklake default connection extra_args ( #7509 )
...
* Ducklake default extra_args
* indicator nit
2026-01-06 17:55:05 +00:00
Ruben Fiszel
6ebb2f6d7c
chore(main): release 1.601.1 ( #7464 )
...
* chore(main): release 1.601.1
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-27 15:40:10 +00:00
Ruben Fiszel
a4696a5c21
chore(main): release 1.601.0 ( #7460 )
...
* chore(main): release 1.601.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-27 00:41:28 +00:00
Ruben Fiszel
bb24315613
chore(main): release 1.600.1 ( #7458 )
...
* chore(main): release 1.600.1
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-26 17:40:29 +00:00
Ruben Fiszel
ce45cf442a
chore(main): release 1.600.0 ( #7457 )
...
* chore(main): release 1.600.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-26 15:12:09 +00:00
Ruben Fiszel
e53b33c8fe
chore(main): release 1.599.3 ( #7455 )
...
* chore(main): release 1.599.3
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-25 16:45:52 +00:00
Ruben Fiszel
c60b8cb51f
fix static assets loading for apps raw
2025-12-25 16:29:49 +00:00
claude[bot]
77d3004a2f
fix: add CORS headers to static assets for iframe context sharing ( #7454 )
...
* fix: add CORS headers to static assets for iframe context sharing
Add Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy, and
Cross-Origin-Resource-Policy headers to static assets served by the backend
to match the vite preview config. This enables the TypeScript worker to work
correctly when ui_builder is loaded in an iframe.
Fixes #7453
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
* fix: add CORS headers only for /apps_raw paths and force reload on navigation
- Only add Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy, and
Cross-Origin-Resource-Policy headers for /apps_raw/ paths (not all static assets)
- Add frontend navigation handler to force page reload when navigating from
non-apps_raw paths to /apps_raw/add or /apps_raw/edit
- This ensures the TypeScript worker works correctly while avoiding CORS issues
for external iframe embeds in other parts of the app
Co-authored-by: Ruben Fiszel <rubenfiszel@users.noreply.github.com >
🤖 Generated with [Claude Code](https://claude.ai/code )
Co-Authored-By: Claude <noreply@anthropic.com >
* fix: also reload when navigating from /apps/get_raw/ to apps_raw editor
When viewing a raw app at /apps/get_raw/, the cross-origin isolation
headers are not present. Force a page reload when navigating from
this path to /apps_raw/add or /apps_raw/edit to ensure the headers
are fetched from the server.
Co-authored-by: Ruben Fiszel <rubenfiszel@users.noreply.github.com >
* Update +layout.svelte
---------
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Ruben Fiszel <rubenfiszel@users.noreply.github.com >
Co-authored-by: Ruben Fiszel <ruben@windmill.dev >
2025-12-25 14:53:33 +02:00
Ruben Fiszel
6f9f87acc6
chore(main): release 1.599.2 ( #7452 )
...
* chore(main): release 1.599.2
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-25 10:19:48 +00:00
Ruben Fiszel
bde940f8cf
chore(main): release 1.599.1 ( #7450 )
...
* chore(main): release 1.599.1
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-25 08:13:12 +00:00
Ruben Fiszel
5df8c10d11
chore(main): release 1.599.0 ( #7449 )
...
* chore(main): release 1.599.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-24 21:03:56 +00:00
Ruben Fiszel
3dd4579d0a
feat: raw apps can be built by agents fully locally ( #7448 )
2025-12-24 21:00:04 +00:00
Ruben Fiszel
cacd29b434
chore(main): release 1.598.0 ( #7445 )
...
* chore(main): release 1.598.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-23 20:57:24 +00:00
Ruben Fiszel
251091b0d1
chore(main): release 1.597.1 ( #7442 )
...
* chore(main): release 1.597.2
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-23 21:34:34 +02:00
Ruben Fiszel
8b94b324ad
chore(main): release 1.597.1 ( #7441 )
...
* chore(main): release 1.597.1
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-23 18:21:23 +00:00
Ruben Fiszel
cacaba84df
chore(main): release 1.597.0 ( #7425 )
...
* chore(main): release 1.597.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-23 16:53:58 +00:00
Pyra
9d698dabb4
feat: v2 job debouncing ( #7411 )
...
* rework everything again
Signed-off-by: pyranota <pyra@duck.com >
* updcate sqlx
Signed-off-by: pyranota <pyra@duck.com >
* update ref
Signed-off-by: pyranota <pyra@duck.com >
* fix things
Signed-off-by: pyranota <pyra@duck.com >
* fix function
Signed-off-by: pyranota <pyra@duck.com >
* final fixes
Signed-off-by: pyranota <pyra@duck.com >
* update sqlx
Signed-off-by: pyranota <pyra@duck.com >
* fix script creation
Signed-off-by: pyranota <pyra@duck.com >
* address todo
Signed-off-by: pyranota <pyra@duck.com >
* cleanup
Signed-off-by: pyranota <pyra@duck.com >
* remove dbg
Signed-off-by: pyranota <pyra@duck.com >
* cleanup
Signed-off-by: pyranota <pyra@duck.com >
* fix
Signed-off-by: pyranota <pyra@duck.com >
* fixups
Signed-off-by: pyranota <pyra@duck.com >
* fix cargo.toml
Signed-off-by: pyranota <pyra@duck.com >
* update ee repo
Signed-off-by: pyranota <pyra@duck.com >
* fix ci
Signed-off-by: pyranota <pyra@duck.com >
* nit
Signed-off-by: pyranota <pyra@duck.com >
* ref
Signed-off-by: pyranota <pyra@duck.com >
* fix
Signed-off-by: pyranota <pyra@duck.com >
* ee repo
Signed-off-by: pyranota <pyra@duck.com >
* sqlx
Signed-off-by: pyranota <pyra@duck.com >
* ee ref
Signed-off-by: pyranota <pyra@duck.com >
* remove dbg
Signed-off-by: pyranota <pyra@duck.com >
* sqlx
Signed-off-by: pyranota <pyra@duck.com >
* feat: v2 job debouncing
Signed-off-by: pyranota <pyra@duck.com >
* v2 debouncing
Signed-off-by: pyranota <pyra@duck.com >
* compat
Signed-off-by: pyranota <pyra@duck.com >
* fix all
Signed-off-by: pyranota <pyra@duck.com >
* remove legacy logic
Signed-off-by: pyranota <pyra@duck.com >
* nit
Signed-off-by: pyranota <pyra@duck.com >
* finish
Signed-off-by: pyranota <pyra@duck.com >
* nits
Signed-off-by: pyranota <pyra@duck.com >
* stage import
Signed-off-by: pyranota <pyra@duck.com >
* remove unused import
Signed-off-by: pyranota <pyra@duck.com >
* remove comments
Signed-off-by: pyranota <pyra@duck.com >
* ee ref
Signed-off-by: pyranota <pyra@duck.com >
* ee ref
Signed-off-by: pyranota <pyra@duck.com >
* nits
Signed-off-by: pyranota <pyra@duck.com >
* Update backend/windmill-queue/src/jobs.rs
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
* Update backend/windmill-common/src/runnable_settings/settings.rs
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
* Update frontend/src/lib/components/flows/DebounceLimit.svelte
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
* fix nits
Signed-off-by: pyranota <pyra@duck.com >
* force no compat in ci
Signed-off-by: pyranota <pyra@duck.com >
* better default key handling
Signed-off-by: pyranota <pyra@duck.com >
* simplify
Signed-off-by: pyranota <pyra@duck.com >
* sqlx
Signed-off-by: pyranota <pyra@duck.com >
* optimize
Signed-off-by: pyranota <pyra@duck.com >
* sqlx
Signed-off-by: pyranota <pyra@duck.com >
* fix flow step
Signed-off-by: pyranota <pyra@duck.com >
* add openapi
Signed-off-by: pyranota <pyra@duck.com >
* fix ci
Signed-off-by: pyranota <pyra@duck.com >
* ee ref
Signed-off-by: pyranota <pyra@duck.com >
* rename WMDEBUG flag
Signed-off-by: pyranota <pyra@duck.com >
* ee ref
Signed-off-by: pyranota <pyra@duck.com >
* remove gate for is_flow_step on pull
Signed-off-by: pyranota <pyra@duck.com >
* remove dead code
Signed-off-by: pyranota <pyra@duck.com >
* nits
Signed-off-by: pyranota <pyra@duck.com >
* chore: update ee-repo-ref to 71d872d27de44227b82f75a9c0879d8428684880
This commit updates the EE repository reference after PR #369 was merged in windmill-ee-private.
Previous ee-repo-ref: 4c7642dc9f7f4467fc055136bd56558b66ef2d54
New ee-repo-ref: 71d872d27de44227b82f75a9c0879d8428684880
Automated by sync-ee-ref workflow.
---------
Signed-off-by: pyranota <pyra@duck.com >
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
2025-12-23 13:24:04 +00:00
Ruben Fiszel
91a00857a8
add proper jobs timings for raw apps
2025-12-23 11:39:48 +00:00
Ruben Fiszel
f830a9d0fb
chore(main): release 1.596.0 ( #7422 )
...
* chore(main): release 1.596.0
* Apply automatic changes
---------
Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com >
2025-12-20 10:03:58 +00:00
Ruben Fiszel
d544da342c
fix: update to astral-tokio-tar for CVE ( #7423 )
...
* fix: Migrate to astral-tokio-tar to address CVE-2025-62518
Migrates from the abandoned tokio-tar library to the actively maintained astral-tokio-tar to address CVE-2025-62518 (TARmageddon), a high-severity RCE vulnerability (CVSS 8.1). The vulnerability involves a boundary-parsing bug in PAX/ustar header handling that enables file smuggling attacks via malicious TAR archives.
This is a drop-in replacement requiring only dependency updates in Cargo.toml files. The astral-tokio-tar library uses the same tokio_tar module name, so no source code changes are needed. All references to the vulnerable tokio-tar v0.3.1 have been removed from Cargo.lock and replaced with the patched astral-tokio-tar v0.5.6.
Related to previous PR #6943 which was closed due to CLA issues. Security disclosure available at https://edera.dev/stories/tarmageddon and patch details at https://github.com/astral-sh/tokio-tar/releases/tag/v0.5.6
* update
---------
Co-authored-by: Devdatta Talele <devtalele0@gmail.com >
Co-authored-by: Devdatta Talele <50290838+devdattatalele@users.noreply.github.com >
2025-12-20 09:04:36 +00:00