Pull Request Explorer

Summary

Release version 1.820.0

Publishes a new release, updating changelog, dependencies, and configuration files to reflect version 1.820.0.

Health Assessment

• • Fast merge (9.5h) with automated release process and no review required, indicating a straightforward release update.

Summary

Add data table cards and managed-first wizard

Enables streamlined data table creation with a wizard and card UI, improving user onboarding and simplifying database management.

Health Assessment

• • Rapid iteration with AI assistance led to quick merge, but multiple commits suggest significant rework.

Summary

Show native web search in assistant settings

Adds visibility of provider‑run web search capability in the assistant settings modal, improving transparency and control for users.

Health Assessment

• • PR completed in under 30 hours with a single review and no rework, indicating a straightforward feature addition.

Summary

Drop caller-supplied _MODULES at job push

Prevents malicious injection of module code via job arguments, tightening security for job execution.

Health Assessment

• • Fast review cycle (0.1h) and merge within 0.7h indicates low friction. The change spans 7 Rust files with 204 lines added/removed, a sizable scope but no complex review rounds, suggesting moderate risk.

Summary

Fix AI Evals parser wasm serving in vitest

Fixes intermittent AI evaluation failures by correctly serving parser WebAssembly modules in the Vitest bridge. This improves reliability of AI evaluation workflows and prevents model timeouts.

Health Assessment

• • Merged within 20 minutes with minimal changes; AI assistance accelerated the fix.

Summary

Add styled feature tour to default raw app

Enhances the default raw app with a styled tour showcasing four starter runnables, improving user onboarding and demonstrating platform capabilities.

Health Assessment

• • Rapid review and merge within 24 minutes, minimal iterations, indicating high confidence and low complexity.

Summary

Fix double billing of service accounts after session refresh

This PR stops service accounts from being billed twice by preventing impersonation session refreshes and adjusting billing queries, ensuring accurate seat counts and reducing unnecessary costs.

Health Assessment

• • The PR was merged within 6 hours with no review comments, indicating a straightforward fix. AI assistance likely accelerated the implementation and testing.

Summary

Refuse OIDC tokens for unauthorized preview paths

This change blocks OIDC token issuance for preview jobs that could impersonate paths a user cannot write, preventing privilege escalation. It strengthens security by ensuring only authorized users can generate tokens for deployed code.

Health Assessment

• • The PR underwent multiple iterations after a quick review, indicating complex changes and careful security validation.

Summary

Surface raw app build errors to AI session

Enables AI sessions to detect and report raw app build failures, improving debugging and developer experience.

Health Assessment

• • Fast cycle time and minimal review rounds indicate a straightforward bug fix with low risk.

Summary

Restart perpetual runs on the version a deploy makes runnable

Ensures that when a new script version is deployed, any running perpetual scripts are stopped and restarted on the new version, preserving arguments and preventing stale loops.

Health Assessment

• • Long cycle time and multiple commits after review suggest significant rework; large code additions increase complexity; AI assistance may have accelerated coding but added review overhead.

Summary

Fix custom schedule handlers identity

Ensures custom schedule handlers run under the schedule’s identity, improving security, billing, and consistency with error handling.

Health Assessment

• • Quick AI‑assisted fix with minimal review time and no major rework.

Summary

Remove COOP/COEP from raw app editor

Enables cross-origin resources in the raw app editor and UI builder, eliminating unnecessary page reloads and improving developer experience.

Health Assessment

• • Fast 1.6‑hour cycle with minimal review, AI‑assisted code generation, and a high‑scope change that improves editor usability.

Summary

Fix submenu open behavior across gutter

Ensures submenu remains open when pointer crosses gutter, improving UX on various viewports.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, low risk.

Summary

Fix resumed session fork wait handling

Improves reliability of session fork creation after page reloads, preventing timeouts and erroneous error messages, ensuring smoother user experience.

Health Assessment

• • Rapid 1.2‑hour cycle with minimal rework; single review round and two commits indicate a straightforward bug fix with low risk.

Summary

Fix secret toggle to hide values

Ensures secret values remain hidden when toggling, preventing accidental exposure and improving security.

Health Assessment

• • Quick review and minimal changes indicate a low‑risk bug fix with little friction.

Summary

Add background workspace fork with progress

Improves reliability of workspace forking by running copy in background, preventing UI failures due to proxy timeouts and providing real‑time progress to users.

Health Assessment

• • Rapid AI‑assisted iteration resolved proxy timeout issue in under 4 hours, but the PR spans 15 files and ~800 lines, indicating high technical risk despite low review friction.

Summary

Revert batch job pull feature

Restores single‑pull job claiming, simplifying worker logic and reducing complexity for better maintainability.

Health Assessment

• • PR was merged immediately after creation, indicating minimal review and high confidence in the revert.

Summary

Add batch job pulling for workers

Enables the server to claim multiple jobs per worker in a single database call, reducing Postgres load and improving throughput on busy instances.

Health Assessment

• • The PR required four days from first review to merge, with a single review round and a large code change, indicating potential bottlenecks in review or testing processes.

Summary

Share AI guidance between CLI and chat

Unifies AI guidance source, improves linting, reduces runtime errors, enhancing developer experience.

Health Assessment

• • Rapid iteration with multiple commits after review indicates active rework; large scope but quick cycle time suggests efficient collaboration.

Summary

Replace AI Sessions Beta Banner with Feedback Link

The PR removes the beta banner from session chat, moving the feedback link to assistant settings, streamlining the UI and centralizing user feedback.

Health Assessment

• • Fast cycle time and quick review suggest a smooth process; moderate rework but no blockers.

Summary

Fix unauthorized flow preview restarts

Prevents users from restarting flow previews from runs they cannot read, ensuring access control and protecting sensitive data.

Health Assessment

• • Quick fix with minimal changes, no rework, merged within 1.5 hours.

Summary

Add external Postgres cluster support for data tables

Enables enterprise users to host data tables and Ducklake catalogs on external Postgres clusters managed by Windmill, improving scalability, isolation, and control over data infrastructure.

Health Assessment

• • The PR spans 4,857 lines across 20 files and took 12 days to merge, indicating a complex, high‑impact change with significant review and rework effort.

Summary

Fix worker last job reporting for short jobs

Accurate job tracking improves monitoring reliability. Short jobs now appear in worker status and alerts.

Health Assessment

• • Fast cycle time and minimal rework indicate smooth integration.

Summary

Add telemetry for trigger suspend, resume, discard

Improves accuracy of trigger event metrics, preventing inflated job counts and enabling better monitoring of trigger behavior.

Health Assessment

• • Fast cycle time and minimal review rounds indicate smooth integration; moderate code changes across backend and frontend.

Summary

Run turns concurrently across multiple flow chat conversations

Allows users to execute multiple chat turns at once, reducing wait times and improving workflow efficiency.

Health Assessment

• • The PR introduced extensive changes across backend, SDK, and frontend, with a long review cycle and AI-assisted code generation, indicating significant effort and potential risk.

Summary

Add tree view to schedules page

Introduces a hierarchical tree view for schedules, enabling users to group by user and folder, improving navigation and reducing clutter.

Health Assessment

• • Multiple AI-assisted commits and a quick first review, but a long overall cycle time due to integration work and conflict resolution.

Summary

Add tree view to trigger list pages

Enables hierarchical grouping of triggers across multiple pages, improving navigation and reducing clutter for users.

Health Assessment

• • Fast review and merge within 16 hours, minimal rework, but large line changes indicate a significant UI refactor.

Summary

Release version 1.819.0

Publishes version 1.819.0, delivering new features, bug fixes, and performance improvements to users.

Health Assessment

• • Release commit with minimal code changes, quick turnaround, and no significant review friction.

Summary

Fix token scope escalation in interpolated references

The patch tightens token scope enforcement for interpolated references and capture configurations, preventing unauthorized data access. It safeguards sensitive variables, secrets, and resources from being exposed through token misuse.

Health Assessment

• • The PR was reviewed and merged within a day, indicating efficient review and low complexity. The fix addresses critical security gaps with minimal code changes, ensuring robust token scope enforcement.

Summary

Fix scope flow resume and minting to job's run

Secures job resume/cancel flows by binding signatures to the correct workspace and requiring proper run tokens, preventing cross-workspace abuse and ensuring only authorized users can resume suspended jobs.

Health Assessment

• • The PR was reviewed and merged within 23 hours with no additional commits, indicating a straightforward, low-risk fix with minimal scope.

Summary

Fix job read access gating for batch rerun

Prevents users from accessing job arguments they shouldn't see, tightening security and preventing data leakage.

Health Assessment

• • Quick review and single iteration indicate low friction. The PR fixed a security issue with moderate code changes, resulting in a fast cycle time.

Summary

Fix workspace dependency creation path mismatch

Prevents an admin from writing dependencies into unauthorized workspaces by ensuring the workspace ID in the request body matches the path workspace, improving security and consistency. The change maintains API compatibility and adds integration tests to enforce the contract.

Health Assessment

• • Quick review and minimal changes indicate a straightforward security fix with low risk.

Summary

Fix lock schedule and trigger writes by session workspace

Ensures frontend lock respects the workspace the component acts on, preventing permission errors when using AI sessions.

Health Assessment

• • Quick fix with minimal changes, resolved in under 2 hours, no backend changes, low risk.

Summary

Fix path autocomplete to respect caller permissions

Prevents a security leak by ensuring the autocomplete endpoint only returns paths the caller can read, applying row‑level security and per‑caller caching.

Health Assessment

• • The PR was reviewed and merged quickly, with no rework, and addresses a critical security issue in a small code change.

Summary

Fix IPv4-in-IPv6 checks and object store test

Enhances outbound address validation to block internal IP exposure, preventing DNS rebinding attacks. Tightens object storage connectivity checks for non-super-admins, ensuring secure access.

Health Assessment

• • The PR was merged quickly with minimal review, indicating confidence in the changes, but the large code churn and security implications warrant careful monitoring.

Summary

Fix test panel controls overlapping in debug mode

Corrects the positioning of test panel controls, ensuring a clear and usable interface when debugging scripts.

Health Assessment

• • The PR was merged within 41.7 hours with only a single file change, indicating a straightforward fix with minimal review friction.

Summary

Add hub sync button to resource types tab

Adds a sync button for superadmins to sync resource types with Hub directly from the Resources page, improving admin workflow and reducing navigation steps. This streamlines admin tasks and ensures resource types are up-to-date without leaving the main interface.

Health Assessment

• • Quick review and single commit indicate straightforward change with minimal friction.

Summary

Fix run not found page redesign and workspace switch

Improves user experience when a job is missing by providing a clear, styled not-found page and ensuring correct workspace navigation, reducing confusion and support tickets. The redesign also eliminates stale not-found views when switching workspaces, preventing misleading error messages.

Health Assessment

• • Quick resolution with minimal rework; AI-assisted code improved UI and fixed stale state bug.

Summary

Fix SMTP clicktracking persistence on sync

Ensures the 'Disable click tracking on links' setting is retained during instance configuration sync, preventing accidental loss of user preferences and maintaining email deliverability.

Health Assessment

• • Quick fix with minimal changes and rapid review indicates low risk and efficient resolution.

Summary

Add provenance claims to job OIDC tokens

Introduces new claims in job OIDC tokens that allow trust policies to verify whether the code is deployed, enhancing security and auditability for job executions.

Health Assessment

• • The PR was reviewed quickly (0.2h) and merged after 44h, with multiple commits indicating active iteration but a focused change set. The large code addition (342 lines) and backend focus suggest moderate risk, mitigated by the swift review process.

Summary

Fix schedule toggle unsaved changes

Prevents false unsaved changes banner when toggling a schedule, eliminating phantom drafts and improving user experience.

Health Assessment

• • Quick AI-assisted fix with minimal code changes and no blockers, resulting in a fast review and merge cycle.

Summary

Fix flow restart to enforce path and workspace checks

Prevents unauthorized execution of arbitrary flow versions across workspaces by validating restart requests against the original job's path and workspace, closing a critical authorization hole.

Health Assessment

• • The PR was reviewed and merged within 18 hours, with a single commit after the initial review, indicating a smooth process and low complexity.

Summary

Fix job lineage token validation

Prevents unauthorized job lineage forging by ensuring only a job's own token can claim lineage, enhancing security and preventing privilege escalation.

Health Assessment

• • Rapid review and merge within 24h indicates high priority security fix; minimal code churn and clear test coverage reduce risk.

Summary

Improve dev load performance by reducing module graph

Reduces initial load time in development, speeding up developer productivity and reducing bandwidth usage. Also improves production build reliability by handling missing chunks gracefully.

Health Assessment

• • The PR was reviewed and merged quickly, with minimal back‑and‑forth, indicating a smooth process. The change involved a moderate number of files and a moderate code churn, but the performance gains justify the effort.

Summary

Add per-cluster data table roles for external instances

Adds per-cluster role catalogs for data tables on external Postgres clusters, enabling fine-grained access control and isolation across clusters.

Health Assessment

• • The PR involved multiple AI-assisted commits and a series of merges to resolve conflicts, indicating a complex feature addition with significant iteration and a long cycle time.

Summary

Fix AI agent tool tag handling

Ensures AI agent tools execute on the correct worker queue based on their tag, improving reliability and security of AI workflows.

Health Assessment

• • Quick AI‑assisted fix with minimal review time and no major rework.

Summary

Fix double-processing of slow canceled flows

This PR prevents canceled flows from being requeued and processed twice during slow transitions, improving reliability and reducing erroneous alerts.

Health Assessment

• • Fast turnaround with AI assistance; minimal code changes; low risk to production.

Summary

Fix canceled flow worker death handling

Ensures flows that are soft‑canceled but whose worker dies between steps are properly completed, preventing orphaned jobs and blocking parent flows, improving reliability and reducing manual intervention.

Health Assessment

• • Fast cycle time and minimal review rounds indicate efficient resolution; the bug fix addresses a critical edge case that could cause orphaned flows, improving system reliability.