Pull Request Explorer

Summary

Add waiting indicator and scroll polish to chat

Improves user experience by replacing misleading typing dots with a clear waiting indicator and polishing scroll behavior, enhancing clarity during tool confirmation and user prompts.

Health Assessment

• • Fast cycle time of 5.7 hours and only one review comment indicate a smooth review process with minimal friction.

Summary

Sync home search bar state to URL

Allows users to share and bookmark search results via URL, improving navigation and collaboration.

Health Assessment

• • Rapid AI-assisted change with minimal code churn and no review needed, leading to a fast merge.

Summary

Add CLI datatable and ducklake list/run commands

Adds new CLI commands to list and run SQL queries against datatables and ducklake, enabling users to manage data directly from the command line. This improves developer productivity by allowing quick data inspection and execution without leaving the terminal.

Health Assessment

• • The PR was merged quickly with minimal review, indicating straightforward implementation and clear documentation.

Summary

Fix SAML deep link preservation across round-trip

Ensures users return to intended deep link after SAML login, preventing navigation hang and security issues.

Health Assessment

• • Fast turnaround with minimal rework; AI review identified a single issue that was resolved quickly, indicating a clean, focused fix.

Summary

Resolve relative imports from local content in script/flow preview

Enables local edits to be used in script, flow, and app dev previews instead of last deployed versions

Health Assessment

• • The PR has a large scope with 13 files changed, but the review process was relatively smooth with a short cycle time of 28.9 hours

Summary

Add AI chat path linking to drawers

Enables AI chat messages to link workspace paths and open related items via drawers, improving navigation and user experience.

Health Assessment

• • The PR required multiple iterations after a single review, indicating significant rework, yet the overall cycle time remained within normal bounds.

Summary

Fix flow progress bar early‑stop and error handling

Ensures the flow progress bar accurately reflects completion and error states, improving user confidence in workflow execution.

Health Assessment

• • Quick resolution of two UI bugs with minimal code changes, indicating efficient review and low risk.

Summary

Fix autoscaling worker count logic

Accurate autoscaling of worker groups ensures optimal resource usage and prevents under‑scaling of custom worker groups.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence.

Summary

Add oneshot system prompt with PR readiness guidance

Provides explicit guidance for webmux oneshot runs, ensuring PRs are only marked ready when confident, reducing review friction.

Health Assessment

• • Quick review and merge with minimal changes, indicating smooth process.

Summary

Visual redesign of AI chat interface

Enhances user experience by refreshing the AI chat UI, adding a streaming indicator, and improving scroll behavior, reducing confusion and improving usability.

Health Assessment

• • Fast cycle time and minimal review comments indicate a smooth, low‑friction process with a single commit and quick approval.

Summary

Derive Snowflake public key from private key

Users can configure Snowflake connections with only a private key, simplifying setup and reducing friction.

Health Assessment

• • Rapid review and merge indicate a straightforward change with minimal risk.

Summary

Harden main-branch guard and gate MCP tools

Strengthens repository protection by enforcing stricter git push rules and gating sensitive Claude AI connectors, reducing accidental force pushes and unauthorized tool usage.

Health Assessment

• • Quick review and merge, minimal changes, low risk.

Summary

Add optional KV secret path prefix setting

Enables operators to keep existing Vault layouts and scope policies more tightly, improving security and flexibility for secret storage.

Health Assessment

• • Fast review and minimal rework led to a quick 9‑hour cycle time, indicating a smooth integration of the new feature.

Summary

Update webmux config for oneshot

Enable auto-cleanup and auto-worktree creation in `.webmux.yaml` for oneshot workflows, removing GitHub branches on merge and auto-creating worktrees for Linear issues for teams WIN and GIT.

Health Assessment

• • Rapid review and merge with minimal changes; AI review provided quick validation.

Summary

Enforce auth guards on app component preview execution

Secures app preview execution by enforcing proper authorization, preventing operators from running arbitrary code and ensuring token scope restrictions.

Health Assessment

• • Fast cycle time and minimal review rounds indicate efficient resolution of a critical security bug.

Summary

Add protection-rules pull/push CLI commands

Adds CLI commands to pull and push workspace protection rules, enabling version‑controlled rule management and improved CI integration.

Health Assessment

• • Rapid approval with minimal iterations indicates high confidence in the change.

Summary

Provision migrated DB for mutual-resource recursion test

Fixes CI panics by provisioning a migrated test database, ensuring the test runs against a proper schema.

Health Assessment

• • AI-assisted change resolved a CI failure with minimal code modifications, demonstrating efficient use of automated tooling.

Summary

Add observability for unavailable search index

Provides clearer error messages and a status panel for the indexer, enabling admins to quickly distinguish configuration issues from bugs and improving system reliability.

Health Assessment

• • The PR was reviewed and merged within 3.4 hours, indicating a smooth process with minimal rework. AI-assisted code generation likely contributed to the rapid turnaround.

Summary

Fix recursion depth limit for resource interpolation

Prevents API crashes from circular resource references, ensuring system stability and protecting against DoS attacks.

Health Assessment

• • Rapid AI-assisted fix with minimal code changes and no review required, resulting in a fast merge and low risk.

Summary

Fix Safari popup blocking for customer portal

Ensures the customer portal opens correctly on Safari, improving user experience and reducing support tickets.

Health Assessment

• • Quick, AI‑assisted fix with minimal changes, resolved Safari issue promptly.

Summary

Add hidden git-deploy sync and regression tests

Adds deterministic git-sync logic to the CLI, enabling a hidden sync git-deploy subcommand and comprehensive e2e tests to prevent deployment failures on protected branches.

Health Assessment

• • PR had rapid iteration with multiple commits after review, but the review was quick; large scope suggests moderate risk.

Summary

Export audit logs to dedicated object store folder

Adds optional export of audit logs to object storage, improving durability and compliance while keeping zero overhead on the audit_log() hot path.

Health Assessment

• • The PR required several fixes after an AI review, indicating complex logic; review was quick but rework was extensive, raising risk for future changes.

Summary

Update EE repo reference for autoscaling fix

Updates the EE repository reference to include an autoscaling improvement that scales to max workers immediately when backlog exceeds the threshold, reducing worker startup delays.

Health Assessment

• • Merged within 5 hours with a single AI review, minimal code changes, and no reported issues.

Summary

Refactor Anthropic proxy building

Centralizes proxy request construction for Anthropic, improving consistency and maintainability across API and AI modules.

Health Assessment

• • Fast cycle time and single commit indicate minimal friction and low risk.

Summary

Enable jemalloc background thread to reduce RSS

Enables jemalloc background purge to reduce worker memory usage, preventing OOMs under cgroup limits. This improves system stability without operator action.

Health Assessment

• • Rapid 3‑hour cycle with a single small commit and no test changes indicates low complexity and minimal risk.

Summary

Add flow_user_state to QuickJS sandbox

Enables flows to read user state directly in input transforms, eliminating manual shim steps and improving developer experience. Also fixes root flow job lookup and key encoding.

Health Assessment

• • The PR required multiple fixes after initial review and a long cycle time, indicating moderate complexity and some review friction.

Summary

Fix VSCode webview clipboard paste to focused editor

Ensures copy/paste works correctly in the VS Code extension webview, directing pasted content to the active editor and preventing accidental pastes at the document start, improving developer productivity.

Health Assessment

• • Quick fix with AI assistance, minimal iterations, and no major regressions.

Summary

Fix undefined user flickering in multiplayer list

This fix eliminates phantom user entries in real-time presence lists, preventing confusion during collaboration. It ensures accurate user presence, improving reliability of the multiplayer feature.

Health Assessment

• • Rapid resolution with minimal changes indicates a straightforward bug fix with quick review and merge.

Summary

Release version 1.704.1

This PR publishes a new release, updating dependencies and documentation, enabling users to benefit from bug fixes and new features.

Health Assessment

• • Release PR merged quickly with minimal review, indicating a streamlined release process.

Summary

Fix Postgres replication slot LSN advancement

Prevents unbounded WAL retention by ensuring replication slots advance, improving database stability and reducing storage costs.

Health Assessment

• • Quick fix with minimal changes, fast review, low risk, and deterministic regression test ensures reliability.

Summary

Fix stale localStorage redirect on SAML deep link

Prevents stale redirects after SAML logins by skipping the localStorage write when RelayState carries a deep link, ensuring users are not bounced to an old deep link on subsequent login visits.

Health Assessment

• • Quick AI-assisted fix with minimal changes, merged immediately after review.

Summary

Fix SAML RelayState deep link redirect

Ensures users return to their intended deep link after SSO, improving user experience and reducing login friction.

Health Assessment

• • AI-assisted fix merged within 5 hours with minimal code changes and no review blockers.

Summary

Release version 1.704.0

Deploys new release with updated dependencies and features, ensuring stability and new capabilities.

Health Assessment

• • Release PR completed quickly with minimal review, indicating a streamlined release process.

Summary

Bump default git-sync script for extra perms

Ensures auto‑managed git‑sync repos correctly preserve permission changes, preventing missing commits when only ACLs change.

Health Assessment

• • Quick fix with minimal changes and a single review, indicating low complexity and high confidence.

Summary

fix: reject path traversal in MCP endpoint path parameters

Fixes a path traversal vulnerability in the MCP endpoint, preventing unauthorized access and ensuring secure API calls.

Health Assessment

• • Quick fix with minimal changes, resolved within 10 hours, low review friction.

Summary

Fix flow failure on zombie restart

Prevents flows from being marked failed when a zombie-restarted job was already completed by another worker by treating the AlreadyCompleted error as benign.

Health Assessment

• • Quick, single-file change with no rework; merged within 5.4 hours, indicating smooth review and low complexity.

Summary

Add global chat selected context

Enables selected workspace context support in global AI chat, improving user experience.

Health Assessment

• • Fast cycle time and review, with a simple and focused change set.

Summary

Add WIN and GIT teams to webmux Linear watch list

Configures webmux to monitor issues from WIN and GIT Linear teams, ensuring all relevant tickets surface in the integration view.

Health Assessment

• • Rapid review with no issues, minimal changes, quick merge.

Summary

Add Docusign OAuth provider

Adds Docusign as an OAuth provider, enabling users to connect their Docusign accounts via Windmill’s OAuth flow. This supports the Hub integration for document signing.

Health Assessment

• • Long review delay likely due to AI review process; minimal code changes result in low risk.

Summary

Add global ask user question tool

Enables the assistant to pause and present a multiple‑choice UI, allowing users to make decisions that the assistant can act upon, improving engagement and workflow efficiency.

Health Assessment

Summary

Show job status in favicon on run page

Adds a colored status badge to the browser tab favicon on the run page, allowing users to see job state at a glance without switching tabs.

Health Assessment

• • Quick turnaround with minimal review comments indicates straightforward implementation.

Summary

Fix absolute-path imports in Monaco editor

Eliminates false 'Cannot find module' errors for absolute imports in Bun TypeScript scripts, restoring accurate hover and go-to-definition support and improving developer experience.

Health Assessment

• • Rapid resolution with minimal changes and a single review, indicating low complexity and risk.

Summary

Fix AI reasoning content preservation

Ensures DeepSeek V4 chat tool loops preserve reasoning content, preventing errors and improving AI model interactions.

Health Assessment

• • Rapid review and merge with minimal changes suggest low risk and straightforward implementation.

Summary

Refactor OpenAI-compatible proxy building

Centralizes proxy logic for OpenAI-compatible providers, reducing duplication and improving maintainability, paving the way for future provider refactors.

Health Assessment

• • The PR was reviewed quickly with a single comment and required only two commits, indicating a smooth process and minimal rework.

Summary

Release version 1.703.3

Publishes a new release, updating version and configuration files for the Windmill platform.

Health Assessment

• • Release PR was auto-generated and reviewed quickly by AI, minimal changes, fast cycle.

Summary

Fix entrypoint override validation to prevent code injection

Security fix preventing arbitrary code execution via job entrypoint override. Ensures only valid function names are accepted, protecting worker processes.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence in the fix.

Summary

Enforce jobs:run scope on preview and inline endpoints

Fixes a privilege‑escalation vulnerability by adding scope checks to job preview and inline endpoints, ensuring only properly scoped tokens can execute arbitrary code.

Health Assessment

• • Quick fix with minimal changes, resolved within 1.4 hours, indicating efficient review and low friction.

Summary

Disable PDB generation in Windows backend tests

Stops recurring Windows test failures and disk exhaustion, ensuring reliable CI runs.

Health Assessment

• • Quick fix with minimal changes, resolved within 30 minutes, no rework needed.

Summary

Remove alpha/beta warnings from frontend features

This PR removes all user-facing alpha, beta, and experimental warnings from tested frontend features, allowing users to access debug mode and workflow-as-code templates without confirmation dialogs.

Health Assessment

• • Fast review and merge with minimal changes; no blockers; quick cycle time indicates low risk.

Summary

Fix unauthenticated resource exposure to app themes

Prevents cross‑workspace information disclosure by restricting unauthenticated access to app theme resources only. Public app viewers can still retrieve theme data safely.

Health Assessment

• • Fast review cycle and single commit fix indicate low complexity and minimal risk. AI assistance helped expedite the patch.