diff --git a/CHANGELOG.md b/CHANGELOG.md index 1d56177b9c..ec5aea7a9a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,13 @@ # Changelog +## [1.674.2](https://github.com/windmill-labs/windmill/compare/v1.674.1...v1.674.2) (2026-04-04) + + +### Bug Fixes + +* enforce RLS on $var: resolution in AI proxy (GHSA-jwg4-v3cj-rvfm) ([#8713](https://github.com/windmill-labs/windmill/issues/8713)) ([ff8e39c](https://github.com/windmill-labs/windmill/commit/ff8e39c69b1438defcaabd9d4906e7adafa7010c)) +* SSRF via X-Resource-Path header in AI proxy endpoint ([#8712](https://github.com/windmill-labs/windmill/issues/8712)) ([f394e67](https://github.com/windmill-labs/windmill/commit/f394e674f22af13bb77915f33aa1e8de402b6fe1)) + ## [1.674.1](https://github.com/windmill-labs/windmill/compare/v1.674.0...v1.674.1) (2026-04-04) diff --git a/backend/Cargo.lock b/backend/Cargo.lock index c4278f395c..d1e22489b6 100644 --- a/backend/Cargo.lock +++ b/backend/Cargo.lock @@ -11721,7 +11721,7 @@ version = "0.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" dependencies = [ - "semver 1.0.27", + "semver 1.0.28", ] [[package]] @@ -12315,9 +12315,9 @@ dependencies = [ [[package]] name = "semver" -version = "1.0.27" +version = "1.0.28" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2" +checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" [[package]] name = "semver-parser" @@ -15740,7 +15740,7 @@ dependencies = [ "bitflags 2.9.4", "hashbrown 0.15.5", "indexmap 2.12.0", - "semver 1.0.27", + "semver 1.0.28", ] [[package]] @@ -15983,7 +15983,7 @@ dependencies = [ [[package]] name = "windmill" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-nats", @@ -16062,7 +16062,7 @@ dependencies = [ [[package]] name = "windmill-alerting" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16075,7 +16075,7 @@ dependencies = [ [[package]] name = "windmill-api" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "argon2", @@ -16216,7 +16216,7 @@ dependencies = [ [[package]] name = "windmill-api-agent-workers" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16239,7 +16239,7 @@ dependencies = [ [[package]] name = "windmill-api-assets" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16252,7 +16252,7 @@ dependencies = [ [[package]] name = "windmill-api-auth" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "axum 0.8.4", @@ -16278,7 +16278,7 @@ dependencies = [ [[package]] name = "windmill-api-client" -version = "1.674.1" +version = "1.674.2" dependencies = [ "reqwest 0.12.28", "serde", @@ -16288,7 +16288,7 @@ dependencies = [ [[package]] name = "windmill-api-configs" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16305,7 +16305,7 @@ dependencies = [ [[package]] name = "windmill-api-debug" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "base64 0.22.1", @@ -16328,7 +16328,7 @@ dependencies = [ [[package]] name = "windmill-api-embeddings" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "axum 0.8.4", @@ -16351,7 +16351,7 @@ dependencies = [ [[package]] name = "windmill-api-flow-conversations" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16367,7 +16367,7 @@ dependencies = [ [[package]] name = "windmill-api-flows" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16387,7 +16387,7 @@ dependencies = [ [[package]] name = "windmill-api-groups" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16407,7 +16407,7 @@ dependencies = [ [[package]] name = "windmill-api-inputs" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16421,7 +16421,7 @@ dependencies = [ [[package]] name = "windmill-api-integration-tests" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-nats", @@ -16452,7 +16452,7 @@ dependencies = [ [[package]] name = "windmill-api-jobs" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "axum 0.8.4", @@ -16477,7 +16477,7 @@ dependencies = [ [[package]] name = "windmill-api-npm-proxy" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "flate2", @@ -16495,7 +16495,7 @@ dependencies = [ [[package]] name = "windmill-api-openapi" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "axum 0.8.4", @@ -16517,7 +16517,7 @@ dependencies = [ [[package]] name = "windmill-api-schedule" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16537,7 +16537,7 @@ dependencies = [ [[package]] name = "windmill-api-scripts" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16567,7 +16567,7 @@ dependencies = [ [[package]] name = "windmill-api-settings" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "axum 0.8.4", @@ -16594,7 +16594,7 @@ dependencies = [ [[package]] name = "windmill-api-sse" -version = "1.674.1" +version = "1.674.2" dependencies = [ "lazy_static", "serde", @@ -16606,7 +16606,7 @@ dependencies = [ [[package]] name = "windmill-api-users" -version = "1.674.1" +version = "1.674.2" dependencies = [ "argon2", "axum 0.8.4", @@ -16631,7 +16631,7 @@ dependencies = [ [[package]] name = "windmill-api-workers" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16645,7 +16645,7 @@ dependencies = [ [[package]] name = "windmill-api-workspaces" -version = "1.674.1" +version = "1.674.2" dependencies = [ "axum 0.8.4", "chrono", @@ -16677,7 +16677,7 @@ dependencies = [ [[package]] name = "windmill-audit" -version = "1.674.1" +version = "1.674.2" dependencies = [ "chrono", "lazy_static", @@ -16691,7 +16691,7 @@ dependencies = [ [[package]] name = "windmill-autoscaling" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "axum 0.8.4", @@ -16710,7 +16710,7 @@ dependencies = [ [[package]] name = "windmill-common" -version = "1.674.1" +version = "1.674.2" dependencies = [ "aes-gcm", "aho-corasick", @@ -16775,7 +16775,7 @@ dependencies = [ "reqwest-retry", "rsa", "schemars 0.8.22", - "semver 1.0.27", + "semver 1.0.28", "serde", "serde_json", "serde_yml", @@ -16812,7 +16812,7 @@ dependencies = [ [[package]] name = "windmill-dep-map" -version = "1.674.1" +version = "1.674.2" dependencies = [ "chrono", "itertools 0.14.0", @@ -16831,7 +16831,7 @@ dependencies = [ [[package]] name = "windmill-git-sync" -version = "1.674.1" +version = "1.674.2" dependencies = [ "regex", "serde", @@ -16846,7 +16846,7 @@ dependencies = [ [[package]] name = "windmill-indexer" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "astral-tokio-tar", @@ -16870,7 +16870,7 @@ dependencies = [ [[package]] name = "windmill-jseval" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "futures", @@ -16887,7 +16887,7 @@ dependencies = [ [[package]] name = "windmill-macros" -version = "1.674.1" +version = "1.674.2" dependencies = [ "itertools 0.14.0", "lazy_static", @@ -16903,7 +16903,7 @@ dependencies = [ [[package]] name = "windmill-mcp" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -16924,7 +16924,7 @@ dependencies = [ [[package]] name = "windmill-native-triggers" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -16955,7 +16955,7 @@ dependencies = [ [[package]] name = "windmill-oauth" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-oauth2", @@ -16979,7 +16979,7 @@ dependencies = [ [[package]] name = "windmill-object-store" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-stream", @@ -17013,7 +17013,7 @@ dependencies = [ [[package]] name = "windmill-operator" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "futures", @@ -17031,7 +17031,7 @@ dependencies = [ [[package]] name = "windmill-parser" -version = "1.674.1" +version = "1.674.2" dependencies = [ "convert_case 0.6.0", "serde", @@ -17040,7 +17040,7 @@ dependencies = [ [[package]] name = "windmill-parser-bash" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "lazy_static", @@ -17052,7 +17052,7 @@ dependencies = [ [[package]] name = "windmill-parser-csharp" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "serde_json", @@ -17064,7 +17064,7 @@ dependencies = [ [[package]] name = "windmill-parser-go" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "gosyn", @@ -17076,7 +17076,7 @@ dependencies = [ [[package]] name = "windmill-parser-graphql" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "lazy_static", @@ -17088,7 +17088,7 @@ dependencies = [ [[package]] name = "windmill-parser-java" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "serde_json", @@ -17100,7 +17100,7 @@ dependencies = [ [[package]] name = "windmill-parser-nu" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "nu-parser", @@ -17111,7 +17111,7 @@ dependencies = [ [[package]] name = "windmill-parser-php" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "itertools 0.14.0", @@ -17122,7 +17122,7 @@ dependencies = [ [[package]] name = "windmill-parser-py" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "itertools 0.14.0", @@ -17134,7 +17134,7 @@ dependencies = [ [[package]] name = "windmill-parser-py-asset" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "rustpython-ast", @@ -17145,7 +17145,7 @@ dependencies = [ [[package]] name = "windmill-parser-py-imports" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-recursion", @@ -17167,7 +17167,7 @@ dependencies = [ [[package]] name = "windmill-parser-r" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "serde_json", @@ -17179,7 +17179,7 @@ dependencies = [ [[package]] name = "windmill-parser-ruby" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "lazy_static", @@ -17193,7 +17193,7 @@ dependencies = [ [[package]] name = "windmill-parser-rust" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "convert_case 0.6.0", @@ -17210,7 +17210,7 @@ dependencies = [ [[package]] name = "windmill-parser-sql" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "lazy_static", @@ -17223,7 +17223,7 @@ dependencies = [ [[package]] name = "windmill-parser-sql-asset" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "serde", @@ -17235,7 +17235,7 @@ dependencies = [ [[package]] name = "windmill-parser-ts" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "lazy_static", @@ -17253,7 +17253,7 @@ dependencies = [ [[package]] name = "windmill-parser-ts-asset" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "serde-wasm-bindgen", @@ -17269,7 +17269,7 @@ dependencies = [ [[package]] name = "windmill-parser-wac" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "rustpython-ast", @@ -17285,7 +17285,7 @@ dependencies = [ [[package]] name = "windmill-parser-yaml" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "serde", @@ -17296,7 +17296,7 @@ dependencies = [ [[package]] name = "windmill-queue" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-recursion", @@ -17333,7 +17333,7 @@ dependencies = [ [[package]] name = "windmill-runtime-nativets" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "const_format", @@ -17371,7 +17371,7 @@ dependencies = [ [[package]] name = "windmill-sql-datatype-parser-wasm" -version = "1.674.1" +version = "1.674.2" dependencies = [ "getrandom 0.3.4", "wasm-bindgen", @@ -17382,7 +17382,7 @@ dependencies = [ [[package]] name = "windmill-store" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-recursion", @@ -17411,7 +17411,7 @@ dependencies = [ [[package]] name = "windmill-test-utils" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17435,7 +17435,7 @@ dependencies = [ [[package]] name = "windmill-trigger" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17468,7 +17468,7 @@ dependencies = [ [[package]] name = "windmill-trigger-email" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17488,7 +17488,7 @@ dependencies = [ [[package]] name = "windmill-trigger-gcp" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17522,7 +17522,7 @@ dependencies = [ [[package]] name = "windmill-trigger-http" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17558,7 +17558,7 @@ dependencies = [ [[package]] name = "windmill-trigger-kafka" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17581,7 +17581,7 @@ dependencies = [ [[package]] name = "windmill-trigger-mqtt" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17605,7 +17605,7 @@ dependencies = [ [[package]] name = "windmill-trigger-nats" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-nats", @@ -17629,7 +17629,7 @@ dependencies = [ [[package]] name = "windmill-trigger-postgres" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17664,7 +17664,7 @@ dependencies = [ [[package]] name = "windmill-trigger-sqs" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17692,7 +17692,7 @@ dependencies = [ [[package]] name = "windmill-trigger-websocket" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-trait", @@ -17715,7 +17715,7 @@ dependencies = [ [[package]] name = "windmill-types" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "bitflags 2.9.4", @@ -17734,7 +17734,7 @@ dependencies = [ [[package]] name = "windmill-worker" -version = "1.674.1" +version = "1.674.2" dependencies = [ "anyhow", "async-once-cell", @@ -17845,7 +17845,7 @@ dependencies = [ [[package]] name = "windmill-worker-volumes" -version = "1.674.1" +version = "1.674.2" dependencies = [ "bytes", "futures", @@ -18535,7 +18535,7 @@ dependencies = [ "id-arena", "indexmap 2.12.0", "log", - "semver 1.0.27", + "semver 1.0.28", "serde", "serde_derive", "serde_json", diff --git a/backend/Cargo.toml b/backend/Cargo.toml index 9010f51715..a7e8ecca27 100644 --- a/backend/Cargo.toml +++ b/backend/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "windmill" -version = "1.674.1" +version = "1.674.2" authors.workspace = true edition.workspace = true @@ -85,7 +85,7 @@ members = [ exclude = ["./windmill-duckdb-ffi-internal", "./parsers/windmill-parser-wasm"] [workspace.package] -version = "1.674.1" +version = "1.674.2" authors = ["Ruben Fiszel "] edition = "2021" diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml index f9a314dfb0..8839f18997 100644 --- a/backend/windmill-api/openapi.yaml +++ b/backend/windmill-api/openapi.yaml @@ -1,7 +1,7 @@ openapi: "3.0.3" info: - version: 1.674.1 + version: 1.674.2 title: Windmill API contact: diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts index 0b361f3294..6bd56638e0 100644 --- a/benchmarks/lib.ts +++ b/benchmarks/lib.ts @@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts"; import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts"; import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts"; -export const VERSION = "v1.674.1"; +export const VERSION = "v1.674.2"; export async function login(email: string, password: string): Promise { return await windmill.UserService.login({ diff --git a/cli/src/main.ts b/cli/src/main.ts index f52a9bc380..4216b03396 100755 --- a/cli/src/main.ts +++ b/cli/src/main.ts @@ -78,7 +78,7 @@ export { token, }; -export const VERSION = "1.674.1"; +export const VERSION = "1.674.2"; // Re-exported from constants.ts to maintain backwards compatibility export { WM_FORK_PREFIX } from "./core/constants.ts"; diff --git a/frontend/package-lock.json b/frontend/package-lock.json index 489b6ab582..b16b4dfe6a 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -1,12 +1,12 @@ { "name": "windmill-components", - "version": "1.674.1", + "version": "1.674.2", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "windmill-components", - "version": "1.674.1", + "version": "1.674.2", "hasInstallScript": true, "license": "AGPL-3.0", "dependencies": { diff --git a/frontend/package.json b/frontend/package.json index fefe6c2c64..59abb26670 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -1,6 +1,6 @@ { "name": "windmill-components", - "version": "1.674.1", + "version": "1.674.2", "scripts": { "dev": "vite dev", "build": "vite build", diff --git a/lsp/Pipfile b/lsp/Pipfile index a54fbc8865..cb3d3ceb85 100644 --- a/lsp/Pipfile +++ b/lsp/Pipfile @@ -4,7 +4,7 @@ verify_ssl = true name = "pypi" [packages] -wmill = ">=1.674.1" +wmill = ">=1.674.2" sendgrid = "*" mysql-connector-python = "*" pymongo = "*" diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml index 36519ba376..46bfcf6ac9 100644 --- a/openflow.openapi.yaml +++ b/openflow.openapi.yaml @@ -1,7 +1,7 @@ openapi: '3.0.3' info: - version: 1.674.1 + version: 1.674.2 title: OpenFlow Spec contact: name: Ruben Fiszel diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1 index 40f215e8df..aaec794fe8 100644 --- a/powershell-client/WindmillClient/WindmillClient.psd1 +++ b/powershell-client/WindmillClient/WindmillClient.psd1 @@ -12,7 +12,7 @@ RootModule = 'WindmillClient.psm1' # Version number of this module. - ModuleVersion = '1.674.1' + ModuleVersion = '1.674.2' # Supported PSEditions # CompatiblePSEditions = @() diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml index dba1279f8f..625d2086f7 100644 --- a/python-client/wmill/pyproject.toml +++ b/python-client/wmill/pyproject.toml @@ -1,6 +1,6 @@ [tool.poetry] name = "wmill" -version = "1.674.1" +version = "1.674.2" description = "A client library for accessing Windmill server wrapping the Windmill client API" license = "Apache-2.0" homepage = "https://windmill.dev" diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json index 832208a5a8..01ca313273 100644 --- a/typescript-client/jsr.json +++ b/typescript-client/jsr.json @@ -1,6 +1,6 @@ { "name": "@windmill/windmill", - "version": "1.674.1", + "version": "1.674.2", "exports": "./src/index.ts", "publish": { "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"] diff --git a/typescript-client/package.json b/typescript-client/package.json index 6ae0b315cb..e9ac4d56a8 100644 --- a/typescript-client/package.json +++ b/typescript-client/package.json @@ -1,7 +1,7 @@ { "name": "windmill-client", "description": "Windmill SDK client for browsers and Node.js", - "version": "1.674.1", + "version": "1.674.2", "author": "Ruben Fiszel", "license": "Apache 2.0", "sideEffects": false, diff --git a/version.txt b/version.txt index 3667fab1a7..3431d6abaa 100644 --- a/version.txt +++ b/version.txt @@ -1 +1 @@ -1.674.1 +1.674.2