chore: update ee-repo-ref to a0d34a319a0dcdcb3ea3b32a7654b0f42d280ac3

This commit updates the EE repository reference after PR #531 was merged in windmill-ee-private.

Previous ee-repo-ref: e37b699b89ae51601e5b86d0f96ff9e7d9227829

New ee-repo-ref: a0d34a319a0dcdcb3ea3b32a7654b0f42d280ac3

Automated by sync-ee-ref workflow.

CHANGELOG.md

@@ -1,29 +1,5 @@
 # Changelog
 
-## [1.683.0](https://github.com/windmill-labs/windmill/compare/v1.682.0...v1.683.0) (2026-04-13)
-
-
-### Features
-
-* add black-box ai eval benchmarks ([#8618](https://github.com/windmill-labs/windmill/issues/8618)) ([cdcc564](https://github.com/windmill-labs/windmill/commit/cdcc56461b77554964622f490ae901f170886595))
-* add deploy restriction rule and fork review requests ([#8804](https://github.com/windmill-labs/windmill/issues/8804)) ([64c58c8](https://github.com/windmill-labs/windmill/commit/64c58c824fcefe00f15405b7e3877eb566a3ffa2))
-* allow non-admins to create and edit HTTP triggers ([#8810](https://github.com/windmill-labs/windmill/issues/8810)) ([9fb7816](https://github.com/windmill-labs/windmill/commit/9fb78164b4baa14c10d10f91ae969d48590c29f3))
-* display agent message in flow graph ([#8806](https://github.com/windmill-labs/windmill/issues/8806)) ([95411b2](https://github.com/windmill-labs/windmill/commit/95411b256332fa41816a93b19906f1534da9b300))
-* folder default_permissioned_as rules for ownership defaults on deploy ([#8801](https://github.com/windmill-labs/windmill/issues/8801)) ([60211c1](https://github.com/windmill-labs/windmill/commit/60211c1d1910b5f7ac6fed112f790201d2047a4c))
-* instance-level ruff config auto-pulled by LSP container ([#8803](https://github.com/windmill-labs/windmill/issues/8803)) ([3f5841f](https://github.com/windmill-labs/windmill/commit/3f5841f84d878cd3f43c435fa237d3f0c2265fb9))
-
-
-### Bug Fixes
-
-* **cli:** make cli help resilient to npm registry fetch failures ([#8809](https://github.com/windmill-labs/windmill/issues/8809)) ([b6f1cc7](https://github.com/windmill-labs/windmill/commit/b6f1cc70cd87c61df7112d3838fbb5fe9bcdc145))
-* enrich OTEL log records with per-request LogContext ([#8812](https://github.com/windmill-labs/windmill/issues/8812)) ([42d3e8c](https://github.com/windmill-labs/windmill/commit/42d3e8c7893cd959c7faffd19cd210c869c604f8))
-* silence user-facing toast for non-critical hub script tracking error ([#8808](https://github.com/windmill-labs/windmill/issues/8808)) ([378ba78](https://github.com/windmill-labs/windmill/commit/378ba7828456c871b5778f1144c4bb559bd5a733))
-
-
-### Performance Improvements
-
-* add inline-persist fast path for WAC v2 step() ([#8807](https://github.com/windmill-labs/windmill/issues/8807)) ([b3ef4bc](https://github.com/windmill-labs/windmill/commit/b3ef4bc26c5696624efee89b5e4e33e77e10cf15))
-
 ## [1.682.0](https://github.com/windmill-labs/windmill/compare/v1.681.0...v1.682.0) (2026-04-10)
 
 

backend/Cargo.lock

@@ -1228,7 +1228,7 @@ dependencies = [
  "hyper 0.14.32",
  "hyper 1.9.0",
  "hyper-rustls 0.24.2",
- "hyper-rustls 0.27.8",
+ "hyper-rustls 0.27.7",
  "hyper-util",
  "pin-project-lite",
  "rustls 0.21.12",
@@ -2270,7 +2270,7 @@ checksum = "6f8d983286843e49675a4b7a2d174efe136dc93a18d69130dd18198a6c167601"
 dependencies = [
  "cfg-if",
  "cpufeatures 0.3.0",
- "rand_core 0.10.1",
+ "rand_core 0.10.0",
 ]
 
 [[package]]
@@ -4006,7 +4006,7 @@ dependencies = [
  "http 1.4.0",
  "http-body-util",
  "hyper 1.9.0",
- "hyper-rustls 0.27.8",
+ "hyper-rustls 0.27.7",
  "hyper-util",
  "ipnet",
  "percent-encoding",
@@ -4612,7 +4612,7 @@ dependencies = [
  "deno_tls",
  "http-body-util",
  "hyper 1.9.0",
- "hyper-rustls 0.27.8",
+ "hyper-rustls 0.27.7",
  "hyper-util",
  "log",
  "once_cell",
@@ -6274,7 +6274,7 @@ dependencies = [
  "cfg-if",
  "libc",
  "r-efi 6.0.0",
- "rand_core 0.10.1",
+ "rand_core 0.10.0",
  "wasip2",
  "wasip3",
 ]
@@ -7064,7 +7064,7 @@ dependencies = [
  "headers",
  "http 1.4.0",
  "hyper 1.9.0",
- "hyper-rustls 0.27.8",
+ "hyper-rustls 0.27.7",
  "hyper-tls",
  "hyper-util",
  "native-tls",
@@ -7128,9 +7128,9 @@ dependencies = [
 
 [[package]]
 name = "hyper-rustls"
-version = "0.27.8"
+version = "0.27.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2b52f86d1d4bc0d6b4e6826d960b1b333217e07d36b882dca570a5e1c48895b"
+checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
 dependencies = [
  "http 1.4.0",
  "hyper 1.9.0",
@@ -7138,6 +7138,7 @@ dependencies = [
  "log",
  "rustls 0.23.35",
  "rustls-native-certs 0.8.3",
+ "rustls-pki-types",
  "tokio",
  "tokio-rustls 0.26.4",
  "tower-service",
@@ -7888,7 +7889,7 @@ dependencies = [
  "http-body-util",
  "hyper 1.9.0",
  "hyper-http-proxy",
- "hyper-rustls 0.27.8",
+ "hyper-rustls 0.27.7",
  "hyper-timeout",
  "hyper-util",
  "jsonpath-rust",
@@ -8077,9 +8078,9 @@ dependencies = [
 
 [[package]]
 name = "libc"
-version = "0.2.185"
+version = "0.2.184"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52ff2c0fe9bc6cb6b14a0592c2ff4fa9ceb83eea9db979b0487cd054946a2b8f"
+checksum = "48f5d2a454e16a5ea0f4ced81bd44e4cfc7bd3a507b61887c99fd3538b28e4af"
 
 [[package]]
 name = "libffi"
@@ -8287,9 +8288,9 @@ dependencies = [
 
 [[package]]
 name = "lru"
-version = "0.16.4"
+version = "0.16.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f66e8d5d03f609abc3a39e6f08e4164ebf1447a732906d39eb9b99b7919ef39"
+checksum = "a1dc47f592c06f33f8e3aea9591776ec7c9f9e4124778ff8a3c3b87159f7e593"
 dependencies = [
  "hashbrown 0.16.0",
 ]
@@ -8834,7 +8835,7 @@ dependencies = [
  "futures-sink",
  "futures-util",
  "keyed_priority_queue",
- "lru 0.16.4",
+ "lru 0.16.3",
  "mysql_common",
  "native-tls",
  "pem 3.0.6",
@@ -9580,9 +9581,9 @@ dependencies = [
 
 [[package]]
 name = "openssl"
-version = "0.10.77"
+version = "0.10.76"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bfe4646e360ec77dff7dde40ed3d6c5fee52d156ef4a62f53973d38294dad87f"
+checksum = "951c002c75e16ea2c65b8c7e4d3d51d5530d8dfa7d060b4776828c88cfb18ecf"
 dependencies = [
  "bitflags 2.9.4",
  "cfg-if",
@@ -9627,9 +9628,9 @@ dependencies = [
 
 [[package]]
 name = "openssl-sys"
-version = "0.9.113"
+version = "0.9.112"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ad2f2c0eba47118757e4c6d2bff2838f3e0523380021356e7875e858372ce644"
+checksum = "57d55af3b3e226502be1526dfdba67ab0e9c96fc293004e79576b2b9edb0dbdb"
 dependencies = [
  "cc",
  "libc",
@@ -10330,9 +10331,9 @@ dependencies = [
 
 [[package]]
 name = "pkg-config"
-version = "0.3.33"
+version = "0.3.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e"
+checksum = "7edddbd0b52d732b21ad9a5fab5c704c14cd949e5e9a1ec5929a24fded1b904c"
 
 [[package]]
 name = "plain"
@@ -10424,7 +10425,7 @@ dependencies = [
  "hmac 0.13.0",
  "md-5 0.11.0",
  "memchr",
- "rand 0.10.1",
+ "rand 0.10.0",
  "sha2 0.11.0",
  "stringprep",
 ]
@@ -10936,13 +10937,13 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.10.1"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2e8e8bcc7961af1fdac401278c6a831614941f6164ee3bf4ce61b7edb162207"
+checksum = "bc266eb313df6c5c09c1c7b1fbe2510961e5bcd3add930c1e31f7ed9da0feff8"
 dependencies = [
  "chacha20",
  "getrandom 0.4.2",
- "rand_core 0.10.1",
+ "rand_core 0.10.0",
 ]
 
 [[package]]
@@ -11004,9 +11005,9 @@ dependencies = [
 
 [[package]]
 name = "rand_core"
-version = "0.10.1"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
+checksum = "0c8d0fd677905edcbeedbf2edb6494d676f0e98d54d5cf9bda0b061cb8fb8aba"
 
 [[package]]
 name = "rand_distr"
@@ -11288,7 +11289,7 @@ dependencies = [
  "http-body 1.0.1",
  "http-body-util",
  "hyper 1.9.0",
- "hyper-rustls 0.27.8",
+ "hyper-rustls 0.27.7",
  "hyper-tls",
  "hyper-util",
  "js-sys",
@@ -11336,7 +11337,7 @@ dependencies = [
  "http-body 1.0.1",
  "http-body-util",
  "hyper 1.9.0",
- "hyper-rustls 0.27.8",
+ "hyper-rustls 0.27.7",
  "hyper-util",
  "js-sys",
  "log",
@@ -13948,7 +13949,7 @@ dependencies = [
  "itertools 0.14.0",
  "levenshtein_automata",
  "log",
- "lru 0.16.4",
+ "lru 0.16.3",
  "lz4_flex 0.13.0",
  "measure_time",
  "memmap2 0.9.10",
@@ -16013,7 +16014,7 @@ dependencies = [
 
 [[package]]
 name = "windmill"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -16092,7 +16093,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-alerting"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16105,7 +16106,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -16246,7 +16247,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-agent-workers"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16269,7 +16270,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-assets"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16282,7 +16283,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-auth"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -16308,7 +16309,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "reqwest 0.12.28",
  "serde",
@@ -16318,7 +16319,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-configs"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16335,7 +16336,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-debug"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "base64 0.22.1",
@@ -16358,7 +16359,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-embeddings"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -16381,7 +16382,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flow-conversations"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16397,7 +16398,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flows"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16418,7 +16419,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-groups"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16439,7 +16440,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-inputs"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16453,7 +16454,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-integration-tests"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -16484,7 +16485,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-jobs"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -16509,7 +16510,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-npm-proxy"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "flate2",
@@ -16527,7 +16528,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-openapi"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -16549,7 +16550,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-schedule"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16569,7 +16570,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-scripts"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16599,7 +16600,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-settings"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -16626,7 +16627,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-sse"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "lazy_static",
  "serde",
@@ -16638,7 +16639,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-users"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "argon2",
  "axum 0.8.4",
@@ -16663,7 +16664,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workers"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16677,7 +16678,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workspaces"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "axum 0.8.4",
  "chrono",
@@ -16710,7 +16711,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -16724,7 +16725,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -16743,7 +16744,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "aes-gcm",
  "aho-corasick",
@@ -16847,7 +16848,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-dep-map"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "chrono",
  "itertools 0.14.0",
@@ -16866,7 +16867,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "regex",
  "serde",
@@ -16881,7 +16882,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -16905,7 +16906,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-jseval"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -16922,7 +16923,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -16938,7 +16939,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-mcp"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -16959,7 +16960,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-native-triggers"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -16990,7 +16991,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-oauth"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-oauth2",
@@ -17014,7 +17015,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-object-store"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -17048,7 +17049,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-operator"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -17066,7 +17067,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -17075,7 +17076,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -17087,7 +17088,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -17099,7 +17100,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -17111,7 +17112,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -17123,7 +17124,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -17135,7 +17136,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -17146,7 +17147,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -17157,7 +17158,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -17169,7 +17170,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -17180,7 +17181,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -17202,7 +17203,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -17214,7 +17215,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -17228,7 +17229,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -17245,7 +17246,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -17258,7 +17259,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -17270,7 +17271,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -17288,7 +17289,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -17304,7 +17305,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -17320,7 +17321,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -17331,7 +17332,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -17368,7 +17369,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-runtime-nativets"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "const_format",
@@ -17406,7 +17407,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "getrandom 0.3.4",
  "wasm-bindgen",
@@ -17417,7 +17418,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-store"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -17447,7 +17448,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-test-utils"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17471,7 +17472,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17504,7 +17505,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-email"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17524,7 +17525,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-gcp"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17558,7 +17559,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-http"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17594,7 +17595,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-kafka"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17617,7 +17618,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-mqtt"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17641,7 +17642,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-nats"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -17665,7 +17666,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-postgres"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17700,7 +17701,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-sqs"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17728,7 +17729,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-websocket"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -17751,7 +17752,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "bitflags 2.9.4",
@@ -17770,7 +17771,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "anyhow",
  "async-once-cell",
@@ -17881,7 +17882,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker-volumes"
-version = "1.683.0"
+version = "1.682.0"
 dependencies = [
  "bytes",
  "futures",

backend/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.683.0"
+version = "1.682.0"
 authors.workspace = true
 edition.workspace = true
 
@@ -85,7 +85,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal", "./parsers/windmill-parser-wasm"]
 
 [workspace.package]
-version = "1.683.0"
+version = "1.682.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 

backend/ee-repo-ref.txt

@@ -1 +1 @@
-be2f3d4d11bb7110200524d7157caab3aac53996
+a0d34a319a0dcdcb3ea3b32a7654b0f42d280ac3

backend/src/main.rs

@@ -964,7 +964,7 @@ Windmill Community Edition {GIT_VERSION}
                 std::process::exit(1);
             }
         }
-        let valid_key = *LICENSE_KEY_VALID.read().await;
+        let valid_key = LICENSE_KEY_VALID.load(std::sync::atomic::Ordering::Relaxed);
         if !valid_key && !server_mode {
             tracing::error!("Invalid license key, workers require a valid license key");
         }

backend/src/monitor.rs

@@ -1137,7 +1137,7 @@ pub async fn delete_expired_items(db: &DB) -> () {
         ),
     }
 
-    let job_retention_secs = *JOB_RETENTION_SECS.read().await;
+    let job_retention_secs = JOB_RETENTION_SECS.load(std::sync::atomic::Ordering::Relaxed);
     if job_retention_secs > 0 {
         let batch_size = *JOB_CLEANUP_BATCH_SIZE;
         let max_batches = *JOB_CLEANUP_MAX_BATCHES;
@@ -1442,7 +1442,8 @@ async fn delete_log_files_from_disk_and_store(
     // API, up to 1000 objects per request).
     #[cfg(feature = "parquet")]
     {
-        let should_del_from_store = *MONITOR_LOGS_ON_OBJECT_STORE.read().await;
+        let should_del_from_store =
+            MONITOR_LOGS_ON_OBJECT_STORE.load(std::sync::atomic::Ordering::Relaxed);
         if should_del_from_store {
             if let Some(os) = windmill_object_store::get_object_store().await {
                 let s3_paths: Vec<_> = paths_to_delete
@@ -1491,11 +1492,13 @@ pub async fn reload_instance_events_webhook_setting(db: &DB) {
     let value = load_value_from_global_settings(db, INSTANCE_EVENTS_WEBHOOK_SETTING).await;
     match value {
         Ok(Some(serde_json::Value::String(s))) if !s.is_empty() => {
-            *INSTANCE_EVENTS_WEBHOOK.write().await = Some(s);
+            INSTANCE_EVENTS_WEBHOOK.store(std::sync::Arc::new(Some(s)));
         }
         Ok(None) | Ok(Some(serde_json::Value::Null)) | Ok(Some(serde_json::Value::String(_))) => {
             // Fall back to env var if DB has no value
-            *INSTANCE_EVENTS_WEBHOOK.write().await = std::env::var("INSTANCE_EVENTS_WEBHOOK").ok();
+            INSTANCE_EVENTS_WEBHOOK.store(std::sync::Arc::new(
+                std::env::var("INSTANCE_EVENTS_WEBHOOK").ok(),
+            ));
         }
         Err(e) => {
             tracing::error!("Error loading instance_events_webhook setting: {e:#}");
@@ -1732,57 +1735,55 @@ pub async fn reload_workspace_registries_setting(conn: &Connection) {
 }
 
 pub async fn reload_hub_api_secret_setting(conn: &Connection) {
-    reload_option_setting_with_tracing(
-        conn,
-        HUB_API_SECRET_SETTING,
-        "HUB_API_SECRET",
-        HUB_API_SECRET.clone(),
-    )
-    .await;
+    match load_option_setting_value::<String>(conn, HUB_API_SECRET_SETTING, "HUB_API_SECRET").await
+    {
+        Ok(v) => HUB_API_SECRET.store(std::sync::Arc::new(v)),
+        Err(e) => tracing::error!("Error reloading setting HUB_API_SECRET: {:?}", e),
+    }
 }
 
 pub async fn reload_retention_period_setting(conn: &Connection) {
-    if let Err(e) = reload_setting(
+    match load_setting_value::<i64>(
         conn,
         RETENTION_PERIOD_SECS_SETTING,
         "JOB_RETENTION_SECS",
         60 * 60 * 24 * 30,
-        JOB_RETENTION_SECS.clone(),
         |x| x,
     )
     .await
     {
-        tracing::error!("Error reloading retention period: {:?}", e)
+        Ok(v) => JOB_RETENTION_SECS.store(v, Ordering::Relaxed),
+        Err(e) => tracing::error!("Error reloading retention period: {:?}", e),
     }
 }
 
 pub async fn reload_audit_log_retention_days_setting(conn: &Connection) {
-    if let Err(e) = reload_setting(
+    match load_setting_value::<i64>(
         conn,
         AUDIT_LOG_RETENTION_DAYS_SETTING,
         "AUDIT_LOG_RETENTION_DAYS",
         0, // 0 means use default: 365 for EE, 14 for CE
-        AUDIT_LOG_RETENTION_DAYS.clone(),
         |x| x,
     )
     .await
     {
-        tracing::error!("Error reloading audit log retention days: {:?}", e)
+        Ok(v) => AUDIT_LOG_RETENTION_DAYS.store(v, Ordering::Relaxed),
+        Err(e) => tracing::error!("Error reloading audit log retention days: {:?}", e),
     }
 }
 
 pub async fn reload_delete_logs_periodically_setting(conn: &Connection) {
-    if let Err(e) = reload_setting(
+    match load_setting_value::<bool>(
         conn,
         MONITOR_LOGS_ON_OBJECT_STORE_SETTING,
         "MONITOR_LOGS_ON_OBJECT_STORE",
         false,
-        MONITOR_LOGS_ON_OBJECT_STORE.clone(),
         |x| x,
     )
     .await
     {
-        tracing::error!("Error reloading retention period: {:?}", e)
+        Ok(v) => MONITOR_LOGS_ON_OBJECT_STORE.store(v, Ordering::Relaxed),
+        Err(e) => tracing::error!("Error reloading retention period: {:?}", e),
     }
 }
 
@@ -2805,10 +2806,7 @@ pub async fn reload_base_url_setting(conn: &Connection) -> error::Result<()> {
         }
     }
 
-    {
-        let mut l = IS_SECURE.write().await;
-        *l = is_secure;
-    }
+    IS_SECURE.store(is_secure, Ordering::Relaxed);
 
     Ok(())
 }
@@ -3694,8 +3692,7 @@ pub async fn reload_critical_error_channels_setting(conn: &DB) -> error::Result<
         vec![]
     };
 
-    let mut l = CRITICAL_ERROR_CHANNELS.write().await;
-    *l = critical_error_channels;
+    CRITICAL_ERROR_CHANNELS.store(std::sync::Arc::new(critical_error_channels));
 
     Ok(())
 }
@@ -3740,18 +3737,13 @@ pub async fn reload_http_route_workspaced_route_setting(conn: &DB) -> error::Res
         }
     };
 
-    let mut l = HTTP_ROUTE_WORKSPACED_ROUTE.write().await;
-
-    if *l != ws_route {
-        *l = ws_route;
-        drop(l);
+    let previous = HTTP_ROUTE_WORKSPACED_ROUTE.swap(ws_route, Ordering::Relaxed);
+    if previous != ws_route {
         // Bump the HTTP trigger version so the route cache is rebuilt with
         // the updated workspaced_route behavior on the next request.
         sqlx::query!("SELECT nextval('http_trigger_version_seq')")
             .fetch_one(conn)
             .await?;
-    } else {
-        *l = ws_route;
     }
     Ok(())
 }
@@ -3783,8 +3775,7 @@ pub async fn reload_critical_alerts_on_db_oversize(conn: &DB) -> error::Result<(
         None
     };
 
-    let mut l = CRITICAL_ALERTS_ON_DB_OVERSIZE.write().await;
-    *l = db_oversize;
+    CRITICAL_ALERTS_ON_DB_OVERSIZE.store(std::sync::Arc::new(db_oversize));
 
     Ok(())
 }
@@ -3815,8 +3806,7 @@ pub async fn reload_jwt_secret_setting(db: &DB) -> error::Result<()> {
         generate_and_save_jwt_secret(db).await?
     };
 
-    let mut l = JWT_SECRET.write().await;
-    *l = jwt_secret;
+    JWT_SECRET.store(std::sync::Arc::new(jwt_secret));
 
     Ok(())
 }
@@ -3938,7 +3928,7 @@ RETURNING job_id
 }
 
 async fn audit_log_retention_days() -> i64 {
-    let v = *AUDIT_LOG_RETENTION_DAYS.read().await;
+    let v = AUDIT_LOG_RETENTION_DAYS.load(std::sync::atomic::Ordering::Relaxed);
     if v > 0 {
         v
     } else if cfg!(feature = "enterprise") {

backend/windmill-api-jobs/src/execution.rs

@@ -65,7 +65,7 @@ pub async fn check_tag_available_for_workspace(
 pub async fn check_license_key_valid() -> error::Result<()> {
     use windmill_common::ee_oss::LICENSE_KEY_VALID;
 
-    let valid = *LICENSE_KEY_VALID.read().await;
+    let valid = LICENSE_KEY_VALID.load(std::sync::atomic::Ordering::Relaxed);
     if !valid {
         return Err(error::Error::BadRequest(
             "License key is not valid. Go to your superadmin settings to update your license key."

backend/windmill-api-settings/src/log_cleanup.rs

@@ -293,7 +293,7 @@ async fn cleanup_job_logs(
     db: &DB,
     store: &Arc<dyn ObjectStore>,
 ) -> error::Result<()> {
-    let retention_secs = *JOB_RETENTION_SECS.read().await;
+    let retention_secs = JOB_RETENTION_SECS.load(std::sync::atomic::Ordering::Relaxed);
     if retention_secs <= 0 {
         return Ok(());
     }
@@ -465,7 +465,7 @@ async fn cleanup_s3_orphans(
     db: &DB,
     store: &Arc<dyn ObjectStore>,
 ) -> error::Result<()> {
-    let job_retention_secs = *JOB_RETENTION_SECS.read().await;
+    let job_retention_secs = JOB_RETENTION_SECS.load(std::sync::atomic::Ordering::Relaxed);
     let now = Utc::now();
     // Service logs always have a retention (hardcoded SERVICE_LOG_RETENTION_SECS),
     // so we scan for service-log orphans regardless of JOB_RETENTION_SECS. Job-log

backend/windmill-api-users/src/users.rs

@@ -2071,7 +2071,7 @@ pub async fn create_session_token<'c>(
     .await?;
 
     let mut cookie = Cookie::new(COOKIE_NAME, token.clone());
-    cookie.set_secure(IS_SECURE.read().await.clone());
+    cookie.set_secure(IS_SECURE.load(std::sync::atomic::Ordering::Relaxed));
     cookie.set_same_site(Some(tower_cookies::cookie::SameSite::Lax));
     cookie.set_http_only(true);
     cookie.set_path(COOKIE_PATH);
@@ -2202,7 +2202,7 @@ async fn exit_impersonation(
     Json(req): Json<ExitImpersonationRequest>,
 ) -> Result<String> {
     let mut cookie = tower_cookies::Cookie::new(COOKIE_NAME, req.token);
-    cookie.set_secure(IS_SECURE.read().await.clone());
+    cookie.set_secure(IS_SECURE.load(std::sync::atomic::Ordering::Relaxed));
     cookie.set_same_site(Some(tower_cookies::cookie::SameSite::Lax));
     cookie.set_http_only(true);
     cookie.set_path(COOKIE_PATH);

backend/windmill-api/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.683.0
+  version: 1.682.0
   title: Windmill API
 
   contact:

backend/windmill-api/src/lib.rs

@@ -1139,7 +1139,7 @@ async fn list_workspace_labels(
 async fn ee_license() -> String {
     use windmill_common::ee_oss::{LICENSE_KEY_ID, LICENSE_KEY_VALID};
 
-    if *LICENSE_KEY_VALID.read().await {
+    if LICENSE_KEY_VALID.load(std::sync::atomic::Ordering::Relaxed) {
         LICENSE_KEY_ID.read().await.clone()
     } else {
         "".to_string()

backend/windmill-common/src/ee_oss.rs

@@ -11,13 +11,15 @@ use crate::error;
 #[cfg(not(feature = "private"))]
 use serde::Deserialize;
 #[cfg(not(feature = "private"))]
+use std::sync::atomic::AtomicBool;
+#[cfg(not(feature = "private"))]
 use std::sync::Arc;
 #[cfg(not(feature = "private"))]
 use tokio::sync::RwLock;
 
 #[cfg(not(feature = "private"))]
 lazy_static::lazy_static! {
-  pub static ref LICENSE_KEY_VALID: Arc<RwLock<bool>> = Arc::new(RwLock::new(true));
+  pub static ref LICENSE_KEY_VALID: AtomicBool = AtomicBool::new(true);
   pub static ref LICENSE_KEY_ID: Arc<RwLock<String>> = Arc::new(RwLock::new("".to_string()));
   pub static ref LICENSE_KEY: Arc<RwLock<String>> = Arc::new(RwLock::new("".to_string()));
 }

backend/windmill-common/src/global_settings.rs

@@ -69,11 +69,10 @@ pub const WORKSPACE_REGISTRIES_SETTING: &str = "workspace_registries";
 pub const RESTART_COORDINATION_SETTING: &str = "_restart_coordination";
 pub const ALERT_CONFIG_SETTING: &str = "alert_job_queue_waiting";
 
-use std::sync::Arc;
-use tokio::sync::RwLock;
+use std::sync::atomic::AtomicBool;
 
 lazy_static::lazy_static! {
-    pub static ref HTTP_ROUTE_WORKSPACED_ROUTE: Arc<RwLock<bool>> = Arc::new(RwLock::new(false));
+    pub static ref HTTP_ROUTE_WORKSPACED_ROUTE: AtomicBool = AtomicBool::new(false);
 }
 
 pub const ENV_SETTINGS: &[&str] = &[

backend/windmill-common/src/jwt.rs

@@ -3,15 +3,14 @@ use base64::{engine::general_purpose::URL_SAFE_NO_PAD, Engine};
 use hmac::{Hmac, Mac};
 use serde::{de::DeserializeOwned, Serialize};
 use sha2::Sha256;
-use std::{collections::HashSet, sync::Arc};
-use tokio::sync::RwLock;
+use std::collections::HashSet;
 
 lazy_static::lazy_static! {
-    pub static ref JWT_SECRET: Arc<RwLock<String>> = Arc::new(RwLock::new("".to_string()));
+    pub static ref JWT_SECRET: arc_swap::ArcSwap<String> = arc_swap::ArcSwap::from_pointee("".to_string());
 }
 
 pub async fn encode_with_internal_secret<T: Serialize>(claims: T) -> error::Result<String> {
-    let jwt_secret = JWT_SECRET.read().await;
+    let jwt_secret = JWT_SECRET.load();
 
     if jwt_secret.is_empty() {
         return Err(Error::internal_err("JWT secret is not set".to_string()));
@@ -28,7 +27,7 @@ pub async fn encode_with_internal_secret<T: Serialize>(claims: T) -> error::Resu
 }
 
 pub async fn decode_with_internal_secret<T: DeserializeOwned>(token: &str) -> error::Result<T> {
-    let jwt_secret = JWT_SECRET.read().await;
+    let jwt_secret = JWT_SECRET.load();
 
     if jwt_secret.is_empty() {
         return Err(Error::internal_err("JWT secret is not set".to_string()));
@@ -65,7 +64,7 @@ pub fn decode_without_verify<T: DeserializeOwned>(token: &str) -> anyhow::Result
 pub async fn generate_signature(header_and_payload: &str) -> anyhow::Result<String> {
     let header_and_payload = header_and_payload.trim_start_matches("jwt_ext_");
     let header_and_payload = header_and_payload.trim_start_matches("jwt_");
-    let secret = JWT_SECRET.read().await;
+    let secret = JWT_SECRET.load();
 
     // Create HMAC-SHA256
     let mut mac = Hmac::<Sha256>::new_from_slice(secret.as_bytes())?;

backend/windmill-common/src/lib.rs

@@ -14,7 +14,7 @@ use std::{
     net::SocketAddr,
     str::FromStr,
     sync::{
-        atomic::{AtomicBool, Ordering},
+        atomic::{AtomicBool, AtomicI64, Ordering},
         Arc,
     },
 };
@@ -216,13 +216,13 @@ lazy_static::lazy_static! {
     pub static ref HUB_BASE_URL: Arc<RwLock<String>> = Arc::new(RwLock::new(DEFAULT_HUB_BASE_URL.to_string()));
 
 
-    pub static ref CRITICAL_ERROR_CHANNELS: Arc<RwLock<Vec<CriticalErrorChannel>>> = Arc::new(RwLock::new(vec![]));
-    pub static ref CRITICAL_ALERTS_ON_DB_OVERSIZE: Arc<RwLock<Option<f32>>> = Arc::new(RwLock::new(None));
+    pub static ref CRITICAL_ERROR_CHANNELS: arc_swap::ArcSwap<Vec<CriticalErrorChannel>> = arc_swap::ArcSwap::from_pointee(vec![]);
+    pub static ref CRITICAL_ALERTS_ON_DB_OVERSIZE: arc_swap::ArcSwap<Option<f32>> = arc_swap::ArcSwap::from_pointee(None);
 
-    pub static ref JOB_RETENTION_SECS: Arc<RwLock<i64>> = Arc::new(RwLock::new(0));
-    pub static ref AUDIT_LOG_RETENTION_DAYS: Arc<RwLock<i64>> = Arc::new(RwLock::new(0));
+    pub static ref JOB_RETENTION_SECS: AtomicI64 = AtomicI64::new(0);
+    pub static ref AUDIT_LOG_RETENTION_DAYS: AtomicI64 = AtomicI64::new(0);
 
-    pub static ref MONITOR_LOGS_ON_OBJECT_STORE: Arc<RwLock<bool>> = Arc::new(RwLock::new(false));
+    pub static ref MONITOR_LOGS_ON_OBJECT_STORE: AtomicBool = AtomicBool::new(false);
 
     pub static ref INSTANCE_NAME: String = rd_string(5);
 

backend/windmill-common/src/utils.rs

@@ -46,13 +46,13 @@ pub const AGENT_WORKER_NAME_PREFIX: &str = "ag";
 
 use crate::CRITICAL_ALERT_MUTE_UI_ENABLED;
 use std::panic::{self, AssertUnwindSafe, Location};
-use std::sync::atomic::Ordering;
+use std::sync::atomic::{AtomicBool, Ordering};
 
 use crate::worker::CLOUD_HOSTED;
 
 lazy_static::lazy_static! {
     pub static ref COOKIE_DOMAIN: Option<String> = std::env::var("COOKIE_DOMAIN").ok();
-    pub static ref IS_SECURE: Arc<RwLock<bool>> = Arc::new(RwLock::new(false));
+    pub static ref IS_SECURE: AtomicBool = AtomicBool::new(false);
 
     pub static ref FORCE_IPV4: bool = std::env::var("FORCE_IPV4")
         .map(|v| v.to_lowercase() == "true" || v == "1")
@@ -164,7 +164,7 @@ lazy_static::lazy_static! {
         }
     };
 
-    pub static ref HUB_API_SECRET: Arc<RwLock<Option<String>>> = Arc::new(RwLock::new(None));
+    pub static ref HUB_API_SECRET: arc_swap::ArcSwap<Option<String>> = arc_swap::ArcSwap::from_pointee(None);
 }
 
 #[derive(Clone)]
@@ -392,7 +392,7 @@ pub async fn http_get_from_hub(
         request = request.header("X-uid", uid);
     }
 
-    if let Some(hub_api_secret) = HUB_API_SECRET.read().await.clone() {
+    if let Some(hub_api_secret) = (**HUB_API_SECRET.load()).clone() {
         request = request.header("X-api-secret", hub_api_secret);
     }
 

backend/windmill-common/src/webhook.rs

@@ -26,8 +26,8 @@ lazy_static::lazy_static! {
 
 lazy_static::lazy_static! {
 
-    pub static ref INSTANCE_EVENTS_WEBHOOK: Arc<RwLock<Option<String>>> =
-        Arc::new(RwLock::new(std::env::var("INSTANCE_EVENTS_WEBHOOK").ok()));
+    pub static ref INSTANCE_EVENTS_WEBHOOK: arc_swap::ArcSwap<Option<String>> =
+        arc_swap::ArcSwap::from_pointee(std::env::var("INSTANCE_EVENTS_WEBHOOK").ok());
 
     pub static ref WEBHOOK_CACHE: Cache<String, Option<String>> = Cache::new(100);
 
@@ -211,7 +211,7 @@ impl WebhookShared {
                             }
                         },
                         Some(WebhookPayload::InstanceEvent(event)) => {
-                            let url = INSTANCE_EVENTS_WEBHOOK.read().await.clone();
+                            let url = (**INSTANCE_EVENTS_WEBHOOK.load()).clone();
                             if let Some(url) = url {
                                 #[cfg(feature = "prometheus")]
                                 let timer = if METRICS_ENABLED.load(std::sync::atomic::Ordering::Relaxed) { Some(WEBHOOK_REQUEST_COUNT.start_timer()) } else { None };
@@ -243,10 +243,7 @@ impl WebhookShared {
     }
 
     pub fn send_instance_event(&self, event: InstanceEvent) {
-        if INSTANCE_EVENTS_WEBHOOK
-            .try_read()
-            .is_ok_and(|v| v.is_none())
-        {
+        if INSTANCE_EVENTS_WEBHOOK.load().is_none() {
             return;
         }
         let _ = self.channel.send(WebhookPayload::InstanceEvent(event));

backend/windmill-queue/src/schedule.rs

@@ -130,7 +130,7 @@ pub async fn push_scheduled_job<'c>(
     authed: Option<&Authed>,
     now_cutoff: Option<DateTime<Utc>>,
 ) -> Result<Transaction<'c, Postgres>> {
-    if !*LICENSE_KEY_VALID.read().await {
+    if !LICENSE_KEY_VALID.load(std::sync::atomic::Ordering::Relaxed) {
         return Err(error::Error::BadRequest(
             "License key is not valid. Go to your superadmin settings to update your license key."
                 .to_string(),

backend/windmill-test-utils/src/lib.rs

@@ -646,8 +646,7 @@ fn find_module_in_vec(modules: Vec<FlowStatusModule>, id: &str) -> Option<FlowSt
 
 pub async fn set_jwt_secret() {
     let secret = "mytestsecret".to_string();
-    let mut l = JWT_SECRET.write().await;
-    *l = secret;
+    JWT_SECRET.store(std::sync::Arc::new(secret));
 }
 
 #[derive(Debug, sqlx::FromRow, Serialize)]

backend/windmill-trigger-http/src/handler.rs

@@ -62,7 +62,7 @@ pub async fn route_path_key_exists(
         .await?
         .unwrap_or(false)
     } else {
-        let http_route_workspaced = *HTTP_ROUTE_WORKSPACED_ROUTE.read().await;
+        let http_route_workspaced = HTTP_ROUTE_WORKSPACED_ROUTE.load(std::sync::atomic::Ordering::Relaxed);
         let effective_workspaced = workspaced_route.unwrap_or(false) || http_route_workspaced;
         let route_path_key = if effective_workspaced {
             std::borrow::Cow::Owned(format!("{}/{}", w_id, route_path_key.trim_matches('/')))
@@ -145,7 +145,7 @@ async fn require_admin_for_instance_wide_route(
     is_admin: bool,
     workspaced_route: Option<bool>,
 ) -> Result<bool> {
-    let http_route_workspaced = *HTTP_ROUTE_WORKSPACED_ROUTE.read().await;
+    let http_route_workspaced = HTTP_ROUTE_WORKSPACED_ROUTE.load(std::sync::atomic::Ordering::Relaxed);
     let effective_workspaced = workspaced_route.unwrap_or(false) || http_route_workspaced;
     if !is_admin && !effective_workspaced {
         return Err(Error::NotAuthorized(
@@ -465,7 +465,7 @@ impl TriggerCrud for HttpTrigger {
         let resolved_edited_by = trigger.base.resolve_edited_by(authed);
         let resolved_permissioned_as = trigger.base.resolve_permissioned_as(authed);
 
-        let http_route_workspaced = *HTTP_ROUTE_WORKSPACED_ROUTE.read().await;
+        let http_route_workspaced = HTTP_ROUTE_WORKSPACED_ROUTE.load(std::sync::atomic::Ordering::Relaxed);
         let effective_workspaced =
             trigger.config.workspaced_route.unwrap_or(false) || http_route_workspaced;
 

backend/windmill-trigger-http/src/lib.rs

@@ -274,7 +274,7 @@ pub async fn refresh_routers(db: &DB) -> Result<(bool, RwLockReadGuard<'_, Route
             .await?;
 
             let mut router = matchit::Router::new();
-            let http_route_workspaced = *HTTP_ROUTE_WORKSPACED_ROUTE.read().await;
+            let http_route_workspaced = HTTP_ROUTE_WORKSPACED_ROUTE.load(std::sync::atomic::Ordering::Relaxed);
 
             for trigger in triggers {
                 let full_path =

backend/windmill-worker/src/worker.rs

@@ -2141,7 +2141,7 @@ pub async fn run_worker(
         }
         #[cfg(feature = "enterprise")]
         {
-            let valid_key = *LICENSE_KEY_VALID.read().await;
+            let valid_key = LICENSE_KEY_VALID.load(std::sync::atomic::Ordering::Relaxed);
 
             if !valid_key {
                 tracing::error!(
@@ -3014,7 +3014,7 @@ pub async fn run_worker(
 
     #[cfg(feature = "enterprise")]
     {
-        let valid_key = *LICENSE_KEY_VALID.read().await;
+        let valid_key = LICENSE_KEY_VALID.load(std::sync::atomic::Ordering::Relaxed);
 
         if !valid_key {
             tracing::info!(worker = %worker_name, hostname = %hostname, "Invalid license key, exiting immediately");

benchmarks/lib.ts

@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.683.0";
+export const VERSION = "v1.682.0";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({

cli/src/main.ts

@@ -78,7 +78,7 @@ export {
   token,
 };
 
-export const VERSION = "1.683.0";
+export const VERSION = "1.682.0";
 
 // Re-exported from constants.ts to maintain backwards compatibility
 export { WM_FORK_PREFIX } from "./core/constants.ts";

frontend/package-lock.json

@@ -1,12 +1,12 @@
 {
 	"name": "windmill-components",
-	"version": "1.683.0",
+	"version": "1.682.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "windmill-components",
-			"version": "1.683.0",
+			"version": "1.682.0",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {

frontend/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "windmill-components",
-	"version": "1.683.0",
+	"version": "1.682.0",
 	"scripts": {
 		"dev": "vite dev",
 		"build": "vite build",

lsp/Pipfile

@@ -4,7 +4,7 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.683.0"
+wmill = ">=1.682.0"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"

openflow.openapi.yaml

@@ -1,7 +1,7 @@
 openapi: '3.0.3'
 
 info:
-  version: 1.683.0
+  version: 1.682.0
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel

powershell-client/WindmillClient/WindmillClient.psd1

@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.683.0'
+    ModuleVersion     = '1.682.0'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()

python-client/wmill/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.683.0"
+version = "1.682.0"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"

typescript-client/jsr.json

@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.683.0",
+  "version": "1.682.0",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]

typescript-client/package.json

@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.683.0",
+  "version": "1.682.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "sideEffects": false,

version.txt

@@ -1 +1 @@
-1.683.0
+1.682.0