Pull Request Explorer

Summary

Invalidate cached app policy on change or deletion

Removes a security flaw that allowed anonymous users to execute apps after access was revoked, ensuring policy changes are respected immediately.

Health Assessment

• • Fast 7.8‑hour turnaround with a single commit and minimal review, addressing a critical security advisory.

Summary

Fix custom-tag overrides on Run again

Ensures non‑superadmin users can rerun jobs without tag‑validation errors, improving reliability and user experience.

Health Assessment

• • Quick fix with minimal code changes; no blockers; fast review and merge.

Summary

Patch critical CVEs in windmill-cli image

Removes two critical vulnerabilities from the CLI Docker image, ensuring secure deployments without affecting runtime functionality.

Health Assessment

• • Quick fix with minimal changes, resolved within an hour, indicating efficient review and low risk.

Summary

Enforce variable write scope on resource delete cascade

Prevents privilege escalation by ensuring delete cascades respect variable write permissions, protecting sensitive data.

Health Assessment

• • Merged within 3.2 hours, indicating a quick, low‑complexity fix with minimal review friction.

Summary

Fix CRLF line endings in bash scripts

Normalizes Windows CRLF line endings in bash job content, preventing runtime errors and ensuring reliable script execution for users.

Health Assessment

• • AI-assisted fix resolved a runtime issue quickly with minimal code changes, merged within minutes, indicating low complexity and risk.

Summary

Disable redirects on worker AI provider client

Closes a critical SSRF vulnerability by preventing the worker from following redirects to private hosts, protecting internal services from malicious AI provider configurations.

Health Assessment

• • Rapid 1.5‑hour fix with minimal code changes, addressing a high‑impact security issue without introducing new features or breaking existing functionality.

Summary

Fix SSRF bypass in git URL validation

Prevents authenticated users from exploiting git URL parsing to reach internal hosts, protecting against SSRF attacks.

Health Assessment

• • Rapid single-file fix with no rework, minimal risk to production

Summary

Release version 1.759.0

Publishes a new release, bumping the version and updating dependencies across backend, frontend, and devops components.

Health Assessment

• • The PR was merged within 9 hours, indicating a smooth, automated release process with minimal review friction.

Summary

Add lock toggle awareness of root protection rules

This PR updates dev workspace lock toggles to reflect existing root workspace protection rules, preventing misconfiguration and ensuring the UI accurately represents enforced restrictions.

Health Assessment

• • Fast 17‑hour cycle time and single‑commit history indicate a low‑risk UI enhancement with minimal review friction.

Summary

Fix OOM in backend integration tests

Restores low‑memory mold linker in CI to prevent out‑of‑memory crashes during parallel test builds, improving reliability and build speed.

Health Assessment

• • Merged within 11 hours with no review, indicating a straightforward fix.

Summary

Pin third‑party action to commit SHA

Hardens supply‑chain by pinning a mutable GitHub Action to a fixed commit, preventing potential secret leakage.

Health Assessment

• • Fast review and merge with minimal changes, low risk to production.

Summary

Cap build jobs and disable incremental to prevent OOM

Reduces CI memory usage, preventing job failures and ensuring reliable test runs.

Health Assessment

• • Quick, low‑risk change that stabilizes CI without affecting application code.

Summary

Expose web‑platform globals in NativeTS runtime

Adds missing browser/Deno/bun globals to the NativeTS runtime, enabling scripts that rely on standard web APIs to run correctly and reducing runtime errors for end users.

Health Assessment

• • Rapid, AI‑assisted iteration produced a large change that required multiple review cycles; the runtime now fully supports web‑platform globals, improving compatibility but increasing risk of regressions.

Summary

Raise QuickJS eval memory cap to 128MB

Improves reliability of user-defined JavaScript transforms by increasing the memory limit and providing clear out-of-memory error messages, reducing support tickets and enabling larger payloads.

Health Assessment

• • The PR was reviewed and iterated quickly, with multiple commits in under 8 hours, indicating efficient collaboration and minimal friction.

Summary

Fix MCP flow tool input variable advertisement

Ensures MCP flow tools correctly advertise input variables by handling schemas that omit required fields, improving UI discovery without affecting runtime. This fixes a bug where input variables were hidden, enhancing developer experience.

Health Assessment

• • PR merged in 0.1 hours with no review comments, indicating a straightforward bug fix with minimal friction.

Summary

Wrap session GUC reads in RLS policies

Optimizes RLS policy evaluation by hoisting session GUC reads to per‑statement InitPlans, reducing per‑row lookups and improving query performance.

Health Assessment

• • Fast 7.7‑hour cycle, minimal review, straightforward migration, low risk to production.

Summary

Fix tree-view file indentation alignment

Corrects file row indentation so files align with sibling folders at each nesting level, improving visual consistency in the tree view. This change ensures consistent spacing across the tree view and picker components.

Health Assessment

• • Rapid resolution with minimal changes; AI-assisted code generation led to a quick fix.

Summary

Add Web Crypto support to nativets runtime

Enables scripts to use crypto APIs (randomUUID, getRandomValues, subtle) in the nativets runtime, aligning behavior with bun and improving security capabilities for users.

Health Assessment

• • Fast 0.8‑hour cycle, AI‑generated code, minimal rework, low complexity and risk

Summary

Fix MCP token scope for preview run tools

Ensures MCP tokens can invoke preview run tools without 403 errors, improving developer experience and preventing scope-related failures.

Health Assessment

• • Quick, single-file change with no rework; merged within 0.9 hours, indicating a straightforward bug fix with minimal impact.

Summary

Fix nativets missing arg default handling

Ensures scripts run with correct defaults, preventing silent errors and aligning behavior with other runtimes.

Health Assessment

• • Quick fix with minimal changes, no review needed, merged within 30 minutes.

Summary

Add apt-get upgrade to runtime Docker stages

Ensures runtime images stay up-to-date with Debian security patches, reducing CVE count and improving security posture for self-hosted deployments.

Health Assessment

• • Fast merge with minimal changes, no review needed, quick security improvement.

Summary

Fix Caddy bind default for self-host

Ensures self-hosted Caddy server binds correctly when ADDRESS unset, preventing silent regression after base image upgrade.

Health Assessment

• • Quick fix with minimal changes, resolved regression promptly.

Summary

Fix self-hosted Caddy layer4 error

Fixes self-hosted Caddy startup by switching to native caddy-l4 support, removing unrecognized global option error, ensuring image stays in sync.

Health Assessment

• • Quick fix with minimal changes, merged within 12 minutes, indicating smooth review and low complexity.

Summary

Release version 1.758.0

This PR publishes a new release, bumping version and updating dependencies, enabling users to access latest features and bug fixes.

Health Assessment

• • Release was fast, with minimal review and quick merge, indicating a smooth release process.

Summary

Fix AI-created flow note sizing

Ensures AI-generated notes automatically size to content, preventing overflow and improving readability for users.

Health Assessment

• • AI-assisted code changes were reviewed quickly, resulting in a fast merge with minimal friction.

Summary

Add real tool descriptions for AI agents

Enables AI agents to use descriptive tool metadata, improving model selection and user experience.

Health Assessment

• • Fast 9‑hour cycle with minimal rework; AI assistance streamlined the implementation; low complexity and clear scope suggest a low‑risk merge.

Summary

Fix session draft debounce and cleanup

Ensures deleted drafts aren’t resurrected, prevents accidental reuse, and accurately counts pending sessions, improving data integrity and user experience.

Health Assessment

• • PR addressed multiple debounce-related bugs, required several iterations after review, but resolved within 9 hours, indicating efficient collaboration.

Summary

Align MCP script filter with scripts list API

Ensures all runnable scripts except library scripts are exposed as MCP tools, improving tool discovery.

Health Assessment

• • Quick fix with minimal changes, merged within hours.

Summary

Fix raw-app reload causing 404 on start

Users can now create raw apps without encountering a 404 error, ensuring a smoother onboarding experience.

Health Assessment

• • Quick fix with minimal changes, no rework required.

Summary

Allow sandbox and public access before first deploy

Enables users to configure sandbox isolation and public access settings before deploying an app, improving workflow flexibility and reducing deployment errors.

Health Assessment

• • Merged in under 4 hours with minimal changes and no review, indicating a straightforward bug fix.

Summary

Add CLI --tag override for script and flow

Adds a --tag option to CLI run/preview commands, enabling scoped trial runs to specific workers without backend changes. This improves developer workflow by allowing targeted execution during testing.

Health Assessment

• • PR completed in just over five hours with minimal rework; AI assistance accelerated implementation and kept the change focused and low risk.

Summary

Add flow-group and sticky-note support to global AI chat

Global AI chat now supports flow grouping and sticky notes, matching flow mode behavior. This improves user productivity by enabling proactive organization and persistent annotations across sessions.

Health Assessment

• • PR merged within 1.1 hours with no review, indicating low complexity and high confidence in changes.

Summary

Drop debuginfo in backend integration tests

Prevents CI runner OOM failures, ensuring reliable test runs and faster feedback for backend developers.

Health Assessment

• • Quick fix with minimal changes, resolved OOM issue in CI, no impact on local builds.

Summary

Reopen script test panel on full screen

Improves user experience by automatically expanding the test pane when the preview goes full screen, ensuring developers can view and run tests without manual adjustment.

Health Assessment

• • Fast turnaround of 2.6 hours with no review iterations indicates a straightforward, low-risk fix.

Summary

Fix theme loading on Resources Theme tab

Ensures theme resources load immediately when the Theme tab is selected, improving user experience in the low‑code app builder.

Health Assessment

• • Quick single‑commit fix with minimal code changes, resolved a UI bug that prevented theme resources from appearing.

Summary

Improve runs page batch re-run performance

Adds a lossless completed_at bound to the batch re-run query, eliminating expensive sequential scans. This reduces run page load times and improves overall system responsiveness.

Health Assessment

• • Fast review and merge with minimal changes, delivering a quick performance boost.

Summary

Add support for multiple pending sessions

Allow users to set up multiple unsent AI sessions in parallel, each persisted in IndexedDB.

Health Assessment

• • The PR was reviewed and merged quickly, indicating a smooth development process.

Summary

Release version 1.757.0

Releases version 1.757.0, updating changelog, dependencies, and client libraries to reflect new features and bug fixes, ensuring users have the latest stable release.

Health Assessment

• • Fast release cycle with minimal review, indicating automated release process and low complexity changes.

Summary

Add SSRF bypass for private SAML metadata URLs

Enables self‑hosted deployments to use internal SAML IdP URLs without crashing, improving reliability and reducing downtime for private‑IP environments.

Health Assessment

• • Merged within 1.2 hours with minimal review, indicating a straightforward, low‑risk change.

Summary

Mandate local-review-codex before PRs

Adds a second review step to catch issues early, improving code quality and reducing merge errors.

Health Assessment

• • M
• • i
• • n
• • i
• • m
• • a
• • l
• •
• • c
• • h
• • a
• • n
• • g
• • e
• • s
• •
• • a
• • n
• • d
• •
• • r
• • a
• • p
• • i
• • d
• •
• • m
• • e
• • r
• • g
• • e
• •
• • i
• • n
• • d
• • i
• • c
• • a
• • t
• • e
• •
• • l
• • o
• • w
• •
• • r
• • i
• • s
• • k
• •
• • a
• • n
• • d
• •
• • s
• • t
• • r
• • a
• • i
• • g
• • h
• • t
• • f
• • o
• • r
• • w
• • a
• • r
• • d
• •
• • r
• • e
• • v
• • i
• • e
• • w
• • .

Summary

Enable maintainer-triggered Codex/Pi reviews on fork PRs

Adds support for maintainer‑initiated Codex and Pi reviews on fork pull requests while hardening the workflow to prevent secret exfiltration.

Health Assessment

• • The PR required several iterations to address security concerns around fork reviews, resulting in moderate review friction but was merged within 24 hours, indicating efficient collaboration.

Summary

Fix AI-agent flow graph repeated tool calls

Corrects UI bug where repeated tool calls were shown as failures, ensuring accurate status display for AI-agent runs.

Health Assessment

• • Merged within 1.2 hours with no review, indicating a straightforward bug fix.

Summary

Release version 1.756.1 with bug fix

Bumps version across backend, frontend, CLI, and SDKs while fixing a provenance gate bug, improving data integrity for deployed apps.

Health Assessment

• • Fast release cycle with minimal review, indicating a streamlined release process.

Summary

Fix S3 provenance gate for deployed app components

Ensures deployed apps and editor previews can safely access S3 files, preventing file‑restriction errors for admins and users.

Health Assessment

• • The PR was merged within 8.4 hours with only one review round, indicating a smooth review process. The change spans 427 lines across 8 files, representing a large code change that touches both backend security logic and frontend S3‑access utilities.

Summary

Release version 1.756.0

This release adds trigger support for binary HTTP responses and fixes secret replication and session autosave issues, enhancing reliability.

Health Assessment

• • Release was automated and merged within 0.2 hours with minimal review, indicating a streamlined release process.

Summary

Serve binary HTTP-route responses via base64 transfer encoding

Adds an opt‑in base64 decoding for binary HTTP responses, enabling small/medium binary payloads to be returned directly without object storage.

Health Assessment

• • Fast review and merge with minimal changes, indicating low complexity and risk.

Summary

Replicate all secrets on fork with external backend

Ensures that when a workspace is forked, all secrets—including those migrated to an external backend—are correctly replicated, preventing read failures for users.

Health Assessment

• • Fast turnaround with AI assistance; minimal code changes; low risk to production.

Summary

Sync AI session preview with workspace edits

Ensures session previews reflect recent workspace changes and eliminates phantom autosaves, improving user experience and data consistency.

Health Assessment

• • Rapid resolution with minimal code changes; no significant risk to production.

Summary

Drop debuginfo in Windows backend tests

Disables debug info in Windows backend tests to prevent disk exhaustion, ensuring reliable CI runs and reducing build failures.

Health Assessment

• • Fast merge with minimal changes; no review needed; quick fix to CI issue.

Summary

Release 1.755.0 with updated dependencies

Bumps the project to version 1.755.0, updating dependencies and configuration files for a new release.

Health Assessment

• • Release PR merged quickly with minimal review, indicating a straightforward maintenance update.